$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: F4/QcVi/cU7sjmm59WRERZEMfSCdBBK1lCmS/svwYPI= Subject key identifier: 7C:2F:8E:7B:14:A3:B2:43:D6:A8:64:F7:D5:D0:B2:B6:5E:4C:BC:BF Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 016E Signing time: Sat 31 May 2025 03:35:52 +0000 Manifest this update: Sat 31 May 2025 03:35:52 +0000 Manifest next update: Sat 07 Jun 2025 03:35:52 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: f2OwClg6sfzNh5KAqccJxSvAH1JgHVeIYMdLfhhd+uw=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: May 31 03:35:52 2025 GMT Not After : Jun 7 03:35:52 2025 GMT Subject: CN=683a7918-a1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:a7:69:c1:04:5c:3c:ff:cb:d1:71:9b:c5: 4b:57:af:d5:2a:43:c2:74:1a:b8:8b:23:3f:1f:40: 8f:e3:10:58:41:1d:a1:43:ed:a3:8d:23:a5:91:60: eb:cb:0c:b0:c6:c8:0b:13:fb:65:b5:99:f8:b5:bb: 78:f8:49:5b:85:d8:40:f7:ed:13:eb:55:57:5c:df: cd:7b:2f:b2:4a:74:ee:55:6b:6b:09:b6:3c:ae:29: 36:70:3f:1d:2a:83:e7:7e:bb:f8:ee:89:79:44:bd: 5b:b5:13:6a:5b:9c:36:3b:b5:df:03:2c:6c:45:33: 4b:3e:db:c1:00:4c:3b:08:1b:25:eb:4d:28:6a:4c: d2:19:38:42:23:fe:56:9c:41:16:b6:a7:1c:81:10: a9:67:12:d5:aa:56:ce:38:14:70:39:af:f2:82:7d: ed:87:ff:3b:76:64:68:c2:5e:6f:99:e7:f0:3e:c9: 0a:8b:64:86:ed:1a:65:f9:60:83:9a:fe:2b:19:77: 7c:c6:1d:74:ea:d2:88:ce:3c:eb:42:ec:c9:9e:c8: 29:72:b6:cf:d8:19:68:b1:3f:3c:57:e0:d8:c1:fa: 7e:a6:5d:b5:12:bb:8a:48:c0:6e:41:4f:52:69:bc: cf:11:a6:7b:f0:60:88:70:77:96:ea:ca:fb:4e:af: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2F:8E:7B:14:A3:B2:43:D6:A8:64:F7:D5:D0:B2:B6:5E:4C:BC:BF X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e3:7a:21:a9:29:84:02:74:78:fa:43:0b:70:1b:cf:6b:ac: 9f:7a:8a:63:bc:b0:4d:c8:a3:88:f3:00:de:9c:9c:62:09:b4: 3e:ef:ea:16:d6:9f:49:ee:5b:6a:2c:0e:bb:c4:75:b8:64:5e: 18:2b:46:26:dd:0a:70:ea:b5:cd:d0:50:56:c7:1c:59:55:89: 03:de:63:ef:c7:b4:3a:2a:8a:6b:26:e6:f3:f7:e1:d0:4e:e5: 8f:7b:2e:cc:80:be:0e:8b:16:70:e6:80:76:4a:27:b6:9f:57: f6:60:86:f9:ce:9b:e6:bc:84:3d:31:5b:7b:f5:a4:5c:0c:74: 48:18:4e:e5:a8:95:5c:95:38:01:05:df:23:67:5c:be:ae:c6: 32:3b:ee:a9:25:fa:32:a5:dc:67:56:02:9f:e6:ba:58:28:3f: 7e:46:f4:aa:2d:81:a5:ec:35:d6:35:cd:d7:f9:79:c6:47:a1: 68:53:fa:5e:6b:0a:74:be:31:00:ba:52:8c:cc:73:b7:64:29: 4e:54:a8:0e:bd:a5:f3:38:8a:99:46:5a:75:a5:7f:26:0d:1c: 7e:92:f1:2e:34:93:55:cc:fd:27:4c:56:a4:42:69:57:b1:ae: dc:ed:5e:1d:4c:28:4d:b2:ec:b3:23:f5:d9:df:39:3c:52:43: 8f:5c:88:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUwNTMxMDMzNTUyWhcNMjUwNjA3MDMzNTUyWjAYMRYwFAYD VQQDEw02ODNhNzkxOC1hMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVunacEEXDz/y9Fxm8VLV6/VKkPCdBq4iyM/H0CP4xBYQR2hQ+2jjSOlkWDr ywywxsgLE/tltZn4tbt4+ElbhdhA9+0T61VXXN/Ney+ySnTuVWtrCbY8rik2cD8d KoPnfrv47ol5RL1btRNqW5w2O7XfAyxsRTNLPtvBAEw7CBsl600oakzSGThCI/5W nEEWtqccgRCpZxLVqlbOOBRwOa/ygn3th/87dmRowl5vmefwPskKi2SG7Rpl+WCD mv4rGXd8xh106tKIzjzrQuzJnsgpcrbP2BlosT88V+DYwfp+pl21EruKSMBuQU9S abzPEaZ78GCIcHeW6sr7Tq95KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwvjnsU o7JD1qhk99XQsrZeTLy/MB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA143ohqSmEAnR4+kMLcBvPa6yfeopjvLBNyKOI8wDenJxiCbQ+7+oW 1p9J7ltqLA67xHW4ZF4YK0Ym3Qpw6rXN0FBWxxxZVYkD3mPvx7Q6KoprJubz9+HQ TuWPey7MgL4OixZw5oB2Sie2n1f2YIb5zpvmvIQ9MVt79aRcDHRIGE7lqJVclTgB Bd8jZ1y+rsYyO+6pJfoypdxnVgKf5rpYKD9+RvSqLYGl7DXWNc3X+XnGR6FoU/pe awp0vjEAulKMzHO3ZClOVKgOvaXzOIqZRlp1pX8mDRx+kvEuNJNVzP0nTFakQmlX sa7c7V4dTChNsuyzI/XZ3zk8UkOPXIjV -----END CERTIFICATE-----Generated at Sat May 31 17:03:31 2025 by rpki-client