$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: Tyj6dOiqAZ5pm4e+Nfwf4YO59n+zF3VD483r3zhg/TQ= Subject key identifier: DF:19:ED:02:60:EB:69:D2:89:90:F2:8F:81:57:42:93:6C:CC:E2:7B Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 093D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 0920 Signing time: Mon 12 May 2025 20:11:26 +0000 Manifest this update: Mon 12 May 2025 20:11:25 +0000 Manifest next update: Mon 19 May 2025 20:11:25 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: ag8/nGTYpP5pty8HMijcmPVOMA4cITyL8FTNwvaJSAo=) 2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 32vqSpioV/ocfZ8lNVlLrP1HBCXvPW2r4a1wVHXWwtw=) 3: A3205A2C087A11F0B3E16071C4F9AE02.roa (hash: BEIVPWqxpMMSqh3PVFhct25NDkvQJDR6AlvWx/meI0s=) 4: 12E98624087811F0BCB34A4AC4F9AE02.roa (hash: iH8YMRAJUm283xvA/+AQkWhtL1+Lbn7estZkwtyfyJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2365 (0x93d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: May 12 20:11:25 2025 GMT Not After : May 19 20:11:25 2025 GMT Subject: CN=682255ee-0e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:72:83:8b:63:1e:ff:77:b9:85:56:76:bc:88: 70:ba:93:e9:54:5a:fc:46:76:a4:f7:62:5b:25:f3: 8a:aa:b9:48:8d:6c:ec:cf:63:4f:58:5e:7e:c0:53: 91:f4:39:49:24:ea:ee:fd:bc:6a:65:c6:70:80:bb: 52:90:9a:6b:e3:71:2d:bb:44:56:fc:d8:bd:e5:66: bc:c3:37:6f:9e:6b:f9:03:d5:52:8c:8a:29:e4:bc: 89:09:cb:f7:07:14:81:c0:b2:eb:bd:87:12:7f:dc: 15:64:13:92:6b:b6:b4:bf:3f:a1:8d:a7:e3:f7:ef: c8:db:99:cd:9d:19:44:1a:07:6c:8d:8c:ab:e3:95: 93:7c:56:fd:aa:30:75:8f:93:be:5f:1c:69:ba:d7: eb:de:37:ed:f2:fe:cd:c3:c4:4c:56:8f:55:56:2d: 95:8b:27:7a:30:bf:6a:50:bd:59:91:6b:77:e9:e5: 23:bd:bc:fe:25:af:0b:77:ef:e1:a2:14:16:b8:ed: f1:a7:93:c5:27:dd:bc:74:05:af:fd:ab:e4:f9:7a: af:67:f8:24:af:fe:95:3e:f9:a9:b3:76:89:d8:b5: 42:d4:7a:6e:76:5a:b9:51:48:aa:5f:96:11:f5:03: 47:9e:db:58:37:3e:6f:66:01:ab:e9:f6:98:db:2b: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:ED:02:60:EB:69:D2:89:90:F2:8F:81:57:42:93:6C:CC:E2:7B X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:25:97:59:e3:3f:3d:b9:df:8d:40:b0:eb:85:0a:7a:6b:2c: 34:d0:9a:ad:96:c0:95:5d:cc:9a:11:1c:61:87:e3:b8:a4:0a: 50:8a:79:8f:8c:44:11:b5:1b:1b:8f:7b:8f:3c:d3:fb:b5:ac: 5c:44:fe:a3:dc:c6:e0:ae:63:17:9a:fb:d3:da:01:37:6a:ba: f8:0e:9e:1d:bc:51:db:8d:92:f4:6a:9f:b2:22:9c:8e:56:7a: 21:76:65:aa:2e:5c:f6:ea:85:f3:38:00:b6:69:e9:23:7e:94: a0:0f:7e:85:ad:5a:d3:45:a5:f2:ef:60:11:f5:c9:58:50:2d: c6:8e:cc:39:63:b8:bb:c6:59:77:61:85:fc:9e:b8:82:06:ac: f0:1d:ca:0b:66:f8:56:ba:93:ca:53:fd:59:33:47:72:97:03: 14:ee:8a:3f:4f:0d:7d:b9:c2:af:b0:0d:c9:1d:9c:47:3b:d8: e8:74:10:b7:91:5e:90:7c:bc:eb:87:b5:66:a2:12:5f:e9:72: 88:04:8a:97:cf:c6:94:e5:ce:6a:ed:49:8f:bb:03:d7:e4:95: 35:9b:84:52:5e:c4:71:2e:06:2a:2f:a3:de:75:53:59:d3:9d: c1:ab:77:b9:6b:96:50:bb:da:6b:c7:fc:a8:da:92:1d:be:60: f2:0e:e7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUwNTEyMjAxMTI1WhcNMjUwNTE5MjAxMTI1WjAYMRYwFAYD VQQDEw02ODIyNTVlZS0wZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HKDi2Me/3e5hVZ2vIhwupPpVFr8Rnak92JbJfOKqrlIjWzsz2NPWF5+wFOR 9DlJJOru/bxqZcZwgLtSkJpr43Etu0RW/Ni95Wa8wzdvnmv5A9VSjIop5LyJCcv3 BxSBwLLrvYcSf9wVZBOSa7a0vz+hjafj9+/I25nNnRlEGgdsjYyr45WTfFb9qjB1 j5O+Xxxputfr3jft8v7Nw8RMVo9VVi2Viyd6ML9qUL1ZkWt36eUjvbz+Ja8Ld+/h ohQWuO3xp5PFJ928dAWv/avk+XqvZ/gkr/6VPvmps3aJ2LVC1Hpudlq5UUiqX5YR 9QNHnttYNz5vZgGr6faY2ytRdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8Z7QJg 62nSiZDyj4FXQpNszOJ7MB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmJZdZ4z89ud+NQLDrhQp6ayw00JqtlsCVXcyaERxhh+O4pApQinmP jEQRtRsbj3uPPNP7taxcRP6j3MbgrmMXmvvT2gE3arr4Dp4dvFHbjZL0ap+yIpyO VnohdmWqLlz26oXzOAC2aekjfpSgD36FrVrTRaXy72AR9clYUC3Gjsw5Y7i7xll3 YYX8nriCBqzwHcoLZvhWupPKU/1ZM0dylwMU7oo/Tw19ucKvsA3JHZxHO9jodBC3 kV6QfLzrh7VmohJf6XKIBIqXz8aU5c5q7UmPuwPX5JU1m4RSXsRxLgYqL6PedVNZ 053Bq3e5a5ZQu9prx/yo2pIdvmDyDufd -----END CERTIFICATE-----Generated at Tue May 13 09:14:17 2025 by rpki-client