$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: wasW/8q2PhxqSC0OToqnzf7efRszb/t90+ruiHC2u/M= Subject key identifier: 09:78:A1:4E:C3:8E:6B:AE:80:3D:D7:2C:97:55:99:77:09:75:BA:FD Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 092B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 0911 Signing time: Sat 10 May 2025 20:06:10 +0000 Manifest this update: Sat 10 May 2025 20:06:09 +0000 Manifest next update: Sat 17 May 2025 20:06:09 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: EAaWZXN4kNAv9PEp3uvp4QrOZl86ZDbxxQr4EvPEJbA=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2347 (0x92b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: May 10 20:06:09 2025 GMT Not After : May 17 20:06:09 2025 GMT Subject: CN=681fb1b1-3b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:68:36:59:5a:65:ef:24:96:fd:fc:16:29: 87:bb:50:b4:5d:a0:3f:b0:6e:51:d1:7d:40:41:37: 92:4e:ae:65:8c:96:3e:c9:73:c6:23:cd:49:4c:b6: b1:fd:a3:82:4b:bc:dc:6c:76:bd:63:c4:90:ca:a8: 03:f7:54:e3:69:5f:da:fc:24:4d:0a:8d:ab:72:ef: ce:b2:61:21:ce:2f:7d:87:34:b3:7b:43:1b:8d:ca: d5:f1:82:fa:44:47:95:2c:b2:a1:da:34:64:66:ce: 7f:8e:38:5b:e3:51:95:05:e6:30:ab:9a:49:f4:af: 54:ae:ca:c7:a8:d8:b5:73:67:7d:b9:f7:50:07:b2: 98:e4:64:31:4d:51:71:5f:45:69:c5:4e:99:ce:61: 2d:8e:e4:93:c5:da:09:2e:4d:8c:00:cd:a4:12:dc: 86:f1:7d:29:aa:0b:cc:6e:f4:2d:18:b6:b7:8a:41: 1c:36:ac:29:69:5e:09:ab:7d:e8:aa:4c:ce:3b:32: 57:1d:bc:84:45:12:94:b5:0a:c0:33:9a:27:a3:de: 49:fc:d8:9b:7f:39:f7:82:c9:b8:9e:b8:73:4b:fa: 4d:43:55:21:ae:66:83:72:55:db:55:e9:66:fe:40: 04:30:c8:a9:da:47:b1:ef:5b:58:ee:05:77:d6:57: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:78:A1:4E:C3:8E:6B:AE:80:3D:D7:2C:97:55:99:77:09:75:BA:FD X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:57:86:e6:11:14:f0:f0:f8:86:81:11:13:11:77:39:19:77: 14:0c:16:e5:9e:8e:56:06:7c:6c:a0:89:3c:8f:6b:e4:d0:a1: d3:f6:a0:0e:ae:da:a2:0a:d9:eb:86:2f:77:e2:53:ad:99:21: 2c:17:7f:e0:d5:0c:bb:e9:b3:7e:37:17:70:e7:0d:aa:60:bd: 53:54:85:15:4b:c7:15:4e:d9:63:22:f8:48:62:db:2c:52:85: 35:0a:1f:67:7a:6d:db:9c:48:91:cd:4e:fb:0f:40:0f:4f:c6: 06:d9:5a:7c:c8:c3:1d:0b:ef:19:47:01:fc:e5:2b:32:a1:46: 9b:6a:6b:74:03:98:5e:71:b9:b5:a8:6f:20:88:ba:25:b9:41: d0:07:d8:94:96:5b:41:8d:52:de:e8:04:d7:dd:1c:2b:81:79: 5e:02:e0:d7:e8:f7:64:49:06:fc:aa:d2:96:47:12:bc:ad:ac: be:bb:08:04:ad:80:28:19:46:47:52:51:68:65:84:69:17:f0: 53:f3:27:5d:2c:ed:01:96:55:e8:f3:35:39:5a:b7:c5:67:e1: 70:36:a9:9a:28:0b:20:c0:75:bf:c9:ac:15:71:72:db:0f:09: e4:63:80:a8:7e:ea:a6:fe:97:7c:08:c6:82:0e:7c:d4:96:82: 3e:7b:58:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjUwNTEwMjAwNjA5WhcNMjUwNTE3MjAwNjA5WjAYMRYwFAYD VQQDEw02ODFmYjFiMS0zYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswZoNllaZe8klv38FimHu1C0XaA/sG5R0X1AQTeSTq5ljJY+yXPGI81JTLax /aOCS7zcbHa9Y8SQyqgD91TjaV/a/CRNCo2rcu/OsmEhzi99hzSze0MbjcrV8YL6 REeVLLKh2jRkZs5/jjhb41GVBeYwq5pJ9K9UrsrHqNi1c2d9ufdQB7KY5GQxTVFx X0VpxU6ZzmEtjuSTxdoJLk2MAM2kEtyG8X0pqgvMbvQtGLa3ikEcNqwpaV4Jq33o qkzOOzJXHbyERRKUtQrAM5ono95J/Nibfzn3gsm4nrhzS/pNQ1UhrmaDclXbVelm /kAEMMip2kex71tY7gV31lcyswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl4oU7D jmuugD3XLJdVmXcJdbr9MB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIV4bmERTw8PiGgRETEXc5GXcUDBblno5WBnxsoIk8j2vk0KHT9qAO rtqiCtnrhi934lOtmSEsF3/g1Qy76bN+Nxdw5w2qYL1TVIUVS8cVTtljIvhIYtss UoU1Ch9nem3bnEiRzU77D0APT8YG2Vp8yMMdC+8ZRwH85SsyoUabamt0A5hecbm1 qG8giLoluUHQB9iUlltBjVLe6ATX3RwrgXleAuDX6PdkSQb8qtKWRxK8ray+uwgE rYAoGUZHUlFoZYRpF/BT8yddLO0BllXo8zU5WrfFZ+FwNqmaKAsgwHW/yawVcXLb DwnkY4Cofuqm/pd8CMaCDnzUloI+e1h1 -----END CERTIFICATE-----Generated at Sun May 11 22:24:55 2025 by rpki-client