$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: +afDuyQxRRwh2/cDRKjOKDH5BjdnUMEY2Gv0vtEzi10= Subject key identifier: 02:78:69:19:78:5C:2D:11:39:45:84:56:A4:6F:0A:42:10:E9:FA:D5 Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 0701 Signing time: Sat 10 May 2025 21:36:45 +0000 Manifest this update: Sat 10 May 2025 21:36:44 +0000 Manifest next update: Sat 17 May 2025 21:36:44 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: 8oPkCinrPYCtOTI1vqEiZR4rwQ21GlaxT/Fr7/EYQJg=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: May 10 21:36:44 2025 GMT Not After : May 17 21:36:44 2025 GMT Subject: CN=681fc6ec-8ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:b7:25:ba:bc:7a:2d:ac:62:ae:3f:2d:e3: bb:95:2d:f7:99:db:88:14:1c:6b:db:05:59:67:90: 30:2a:f7:c0:ac:43:d6:da:b1:c0:c5:fc:51:30:ff: 59:62:c2:ee:c5:9e:4a:b0:aa:f6:d4:55:65:17:05: a0:06:b1:08:24:52:a8:c5:49:1f:85:af:75:76:f0: 81:3f:39:13:13:60:02:b8:cf:2f:df:8d:aa:f5:80: 9f:1d:1f:61:b0:30:76:a2:6a:97:55:45:81:ef:4e: a9:17:80:b3:18:54:69:77:97:9a:3d:8f:43:cb:c5: ad:dc:df:38:66:36:34:7c:bf:b1:3e:e2:e6:1e:8e: 1e:f5:23:6a:c6:91:fd:81:a9:08:65:47:aa:31:16: 1e:31:9b:ce:03:e3:13:da:d5:2a:87:62:38:99:5d: 55:6c:e4:af:b2:73:d4:62:b3:9a:12:17:74:07:fe: 82:45:9a:47:1e:77:72:62:86:6b:9c:1d:b8:d1:93: 29:77:bb:da:1e:db:df:b1:d4:a8:d2:af:a2:31:4a: 3d:1c:8a:07:e6:af:bd:08:ee:8d:fe:ae:53:11:43: 95:7c:5b:8e:af:4b:13:5f:c9:b0:95:24:0f:3f:38: f4:bc:25:00:49:34:07:fd:01:41:35:f7:10:59:de: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:78:69:19:78:5C:2D:11:39:45:84:56:A4:6F:0A:42:10:E9:FA:D5 X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:9c:17:00:bb:ce:a1:8c:e6:e6:44:c4:c4:f2:00:21:2c:5e: 69:32:b6:f7:59:c0:f2:67:d6:93:17:bd:25:2b:68:9f:ec:fb: 4b:27:19:29:cf:e5:b6:20:0f:af:b4:35:75:bb:69:b9:8d:8f: bc:22:01:94:23:30:39:f2:3c:ba:05:c7:2b:c7:9f:49:78:63: 89:4b:8d:f7:a3:4e:d7:6d:3d:49:72:14:48:5a:61:ce:70:0d: 6e:6e:1d:10:d9:eb:9b:a0:df:9c:a4:d4:27:4c:7d:3f:81:53: 3a:fa:f6:0f:9b:58:46:de:2b:78:10:07:01:e3:2a:2c:c5:71: 30:e4:42:02:2f:00:4b:2b:e9:9b:ed:70:26:ca:9c:d3:7e:f0: 43:bd:2a:48:04:12:4b:68:47:ed:d2:1c:df:f2:2d:77:33:15: b9:e3:d4:ca:9f:1b:6d:63:1b:de:f1:d9:7f:bb:ee:a9:48:33: 20:50:b6:78:91:a8:c2:f7:b3:77:1f:af:b1:d3:38:47:79:c7: ad:5c:d0:e3:6c:68:4e:1d:a2:ea:f4:1b:9f:4f:25:54:5b:5c: f7:6f:2a:8a:cf:09:9b:5d:d1:06:05:a3:fa:9a:d2:dd:91:ac: fa:c2:af:c9:6b:c6:f7:57:ae:52:cc:56:82:91:5d:79:8b:91: 47:87:8f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjUwNTEwMjEzNjQ0WhcNMjUwNTE3MjEzNjQ0WjAYMRYwFAYD VQQDEw02ODFmYzZlYy04YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxny3Jbq8ei2sYq4/LeO7lS33mduIFBxr2wVZZ5AwKvfArEPW2rHAxfxRMP9Z YsLuxZ5KsKr21FVlFwWgBrEIJFKoxUkfha91dvCBPzkTE2ACuM8v342q9YCfHR9h sDB2omqXVUWB706pF4CzGFRpd5eaPY9Dy8Wt3N84ZjY0fL+xPuLmHo4e9SNqxpH9 gakIZUeqMRYeMZvOA+MT2tUqh2I4mV1VbOSvsnPUYrOaEhd0B/6CRZpHHndyYoZr nB240ZMpd7vaHtvfsdSo0q+iMUo9HIoH5q+9CO6N/q5TEUOVfFuOr0sTX8mwlSQP Pzj0vCUASTQH/QFBNfcQWd7YnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJ4aRl4 XC0ROUWEVqRvCkIQ6frVMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCznBcAu86hjObmRMTE8gAhLF5pMrb3WcDyZ9aTF70lK2if7PtLJxkp z+W2IA+vtDV1u2m5jY+8IgGUIzA58jy6Bccrx59JeGOJS433o07XbT1JchRIWmHO cA1ubh0Q2euboN+cpNQnTH0/gVM6+vYPm1hG3it4EAcB4yosxXEw5EICLwBLK+mb 7XAmypzTfvBDvSpIBBJLaEft0hzf8i13MxW549TKnxttYxve8dl/u+6pSDMgULZ4 kajC97N3H6+x0zhHecetXNDjbGhOHaLq9BufTyVUW1z3byqKzwmbXdEGBaP6mtLd kaz6wq/Ja8b3V65SzFaCkV15i5FHh48O -----END CERTIFICATE-----Generated at Sun May 11 01:38:49 2025 by rpki-client