$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft File: qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json) Hash identifier: 6i9sN5StCBdfiqWyPsW3mdR3ZtvygMHDbvpbSH4kDEk= Subject key identifier: F7:BF:2A:47:1F:B4:EF:A9:07:2A:22:B1:AD:E4:CD:5A:80:B0:CD:90 Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft Manifest number: 34EB Signing time: Sat 10 May 2025 14:18:40 +0000 Manifest this update: Sat 10 May 2025 14:18:40 +0000 Manifest next update: Sat 17 May 2025 14:18:40 +0000 Files and hashes: 1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: rRcwQygp96cKwanvrGZtWzG6r+JQ1bWkUuoASNovIe0=) 2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: F5aTMcUYsmdixUm9yQzG1VwvhsqYUF6nPzXXk9qwa44=) 3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: xfrnwW4CE8rEb6G9IL8uJB1Hv4mR3WOgjrI080cSfHc=) 4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: qedOB7JdFBTfxxMEPND3tzfrdQHqBUmjzqhuDo8ig1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: May 10 14:18:40 2025 GMT Not After : May 17 14:18:40 2025 GMT Subject: CN=681f6040-4fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:38:17:b1:f2:70:40:45:e7:fa:9a:9d:0e: 74:d6:d2:ba:d5:18:22:8c:8d:a0:40:40:3b:06:07: c8:77:1f:38:49:bf:da:64:8c:57:65:7c:d8:f1:8d: 90:12:21:1f:c6:b4:fe:af:67:e7:f6:78:e0:00:40: 0b:dd:c3:63:d0:4e:60:6d:ff:10:50:43:9a:61:f0: b2:6b:5b:9e:6a:d0:eb:af:5e:7a:6e:bc:a1:28:81: 2b:50:d0:e6:72:8a:36:79:da:f9:d7:c7:c5:a5:8e: 81:34:99:b4:84:c4:68:45:9d:72:fd:85:05:d8:f8: a3:15:5f:20:ad:01:e8:99:24:ae:23:e6:2e:ef:71: 79:06:85:c8:79:d2:c4:a7:82:b4:c1:2c:63:79:e4: 10:c5:81:d0:68:3a:ed:f2:ba:6e:fc:fe:28:e8:35: c9:17:f4:c6:6d:67:d4:bf:16:67:53:79:4b:a8:d1: 0a:ac:f9:3c:35:3f:92:f7:fa:72:b1:fe:2f:de:c2: f2:a9:fe:76:f3:51:55:ba:b7:6e:74:d8:2e:59:68: 64:dc:97:f6:ec:2f:bd:0d:c8:f1:35:aa:67:7f:aa: 1b:97:20:1d:9f:84:2b:52:a6:10:55:d8:a0:46:76: c8:b7:3c:59:ff:81:01:57:24:3b:8d:5f:32:f9:5b: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:2A:47:1F:B4:EF:A9:07:2A:22:B1:AD:E4:CD:5A:80:B0:CD:90 X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:3d:41:61:61:3c:cd:38:24:4c:b8:62:73:8f:b1:e6:ab:ad: 3b:ab:ad:dd:9f:ae:71:62:7c:b6:ab:4f:99:7d:a1:80:16:07: 4a:9d:61:ed:23:ab:69:74:08:49:a4:e0:33:08:9f:7a:09:31: 41:2d:22:1f:5d:9f:66:63:02:50:0d:f1:36:d5:17:98:51:da: 34:d9:09:ce:f4:f7:da:8c:71:2b:52:a4:c5:13:fa:45:fb:ae: f4:09:d4:c4:bd:ad:ab:01:48:db:64:15:5d:2b:a5:52:0d:9a: a7:22:49:53:03:7c:6e:61:be:52:54:50:fa:ed:78:e2:4d:b8: 7b:5a:fe:56:7c:4b:1f:c0:bf:8a:a7:18:46:2c:24:c1:58:34: e5:69:99:c5:d1:bc:0a:15:b8:8f:96:35:dd:7d:08:26:9e:6d: 53:4c:a9:b1:3f:d4:dd:d6:cc:bd:88:5a:40:13:77:e2:a1:c8: 58:fb:67:27:45:e6:e3:ce:6c:41:9c:16:c2:8b:84:11:c2:7a: 78:9d:7e:f3:51:f6:4a:49:69:5e:e5:56:5e:17:32:60:b9:1b: 3e:9e:35:36:a1:4d:3e:43:6f:be:d3:72:b7:38:60:5f:c4:86: 6e:d6:50:67:08:4f:42:22:b5:15:3b:7b:0e:a2:8b:10:21:6a: e9:b8:d2:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjUwNTEwMTQxODQwWhcNMjUwNTE3MTQxODQwWjAYMRYwFAYD VQQDEw02ODFmNjA0MC00ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pw4F7HycEBF5/qanQ501tK61RgijI2gQEA7BgfIdx84Sb/aZIxXZXzY8Y2Q EiEfxrT+r2fn9njgAEAL3cNj0E5gbf8QUEOaYfCya1ueatDrr156bryhKIErUNDm coo2edr518fFpY6BNJm0hMRoRZ1y/YUF2PijFV8grQHomSSuI+Yu73F5BoXIedLE p4K0wSxjeeQQxYHQaDrt8rpu/P4o6DXJF/TGbWfUvxZnU3lLqNEKrPk8NT+S9/py sf4v3sLyqf5281FVurdudNguWWhk3Jf27C+9DcjxNapnf6oblyAdn4QrUqYQVdig RnbItzxZ/4EBVyQ7jV8y+VvRLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe/Kkcf tO+pByoisa3kzVqAsM2QMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1 TTNfVDE2bG1iRmpMakR0UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1PUFhYTzNOCRMuGJzj7Hmq607q63dn65xYny2q0+ZfaGAFgdKnWHt I6tpdAhJpOAzCJ96CTFBLSIfXZ9mYwJQDfE21ReYUdo02QnO9PfajHErUqTFE/pF +670CdTEva2rAUjbZBVdK6VSDZqnIklTA3xuYb5SVFD67XjiTbh7Wv5WfEsfwL+K pxhGLCTBWDTlaZnF0bwKFbiPljXdfQgmnm1TTKmxP9Td1sy9iFpAE3fiochY+2cn RebjzmxBnBbCi4QRwnp4nX7zUfZKSWle5VZeFzJguRs+njU2oU0+Q2++03K3OGBf xIZu1lBnCE9CIrUVO3sOoosQIWrpuNJ7 -----END CERTIFICATE-----Generated at Sun May 11 01:11:11 2025 by rpki-client