$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft File: QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json) Hash identifier: Fe+QM892SRZ8tGAn9mz2pZmAp+j9x9z9DkiVNAuVexU= Subject key identifier: D5:50:55:78:53:04:D6:8D:AF:27:FC:D4:F6:FD:BC:0F:93:60:26:58 Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft Manifest number: 0123 Signing time: Thu 15 May 2025 04:14:12 +0000 Manifest this update: Thu 15 May 2025 04:14:12 +0000 Manifest next update: Thu 22 May 2025 04:14:12 +0000 Files and hashes: 1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: o8coiqrCM23QT0Co3YiG2PVVPxmENQcuK5djLLUR8Lg=) 2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: FYt2RufvdZwSZ5zQDPicr3Fxe0XZIP7npmhW3SH2a8Y=) 3: 5A5E75E2E30611EFAD52D552C4F9AE02.roa (hash: nu5dbwOLlZ13YTkUDnySdOEtRFAsDLmzMv0XGB5W4wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Validity Not Before: May 15 04:14:12 2025 GMT Not After : May 22 04:14:12 2025 GMT Subject: CN=68256a14-ca7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:5a:e8:37:59:8f:8f:a2:ce:33:e8:82:95: 10:29:aa:aa:68:8f:75:39:ee:c9:c0:3a:93:be:d8: fc:b8:3a:71:f4:d8:23:9d:e6:84:ba:a4:61:64:91: 3e:a9:c9:19:d4:24:7d:4c:22:33:a7:3a:4f:e6:7e: 57:07:52:2b:00:f4:65:7b:fd:b9:2b:a4:d5:9f:dd: 9e:b2:b8:d3:04:de:d9:50:63:4c:3a:0f:1d:1c:57: cf:57:41:74:4c:1a:63:74:be:49:c1:ac:b1:78:a3: 75:e9:12:44:35:41:d8:66:c6:c4:5d:96:24:e5:b9: 70:b3:c2:d0:18:c3:8b:7c:e6:eb:10:c4:8f:96:a1: d2:42:a0:e6:5c:fd:23:79:fc:83:fc:6b:12:44:10: ec:0a:2c:9c:41:86:31:12:26:ab:c7:01:44:74:b7: 2b:18:1c:7b:e3:df:95:ea:ec:12:d1:3d:ef:8f:31: 13:a8:f4:f0:26:79:26:06:19:80:c2:a9:52:7d:07: e4:c9:c1:e6:de:92:cf:3b:96:6a:d6:47:14:05:18: b2:d2:64:aa:6c:cd:01:c5:49:29:fc:94:bd:84:35: 36:75:90:af:49:b1:e9:31:39:85:34:53:2b:d6:aa: c7:f6:e8:f8:f7:61:b1:71:35:b6:1f:cc:cf:b6:61: df:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:55:78:53:04:D6:8D:AF:27:FC:D4:F6:FD:BC:0F:93:60:26:58 X509v3 Authority Key Identifier: keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9a:ec:a6:a7:2a:63:59:ef:0c:41:fb:83:87:c4:6d:e1:02: 83:ca:46:50:ba:a7:0e:34:7c:4c:85:a3:19:d7:eb:7a:0e:54: 5a:dc:2e:cf:73:d2:da:1a:10:fb:45:7c:16:06:59:33:a5:24: 93:58:4d:b0:96:ee:b4:7d:2e:15:84:19:c6:5b:cc:94:3b:a2: 1b:ae:f2:1b:8c:f2:0a:9a:0e:9e:e1:80:38:d3:8e:36:0a:08: d9:b6:6e:17:54:ca:db:a3:ce:56:bd:0a:75:bf:eb:0f:40:2e: c7:d2:21:d8:69:bb:c1:59:72:d1:82:10:46:5f:47:aa:ad:e0: cf:a5:2b:74:5e:5d:dd:74:ae:fe:31:84:2d:49:5f:93:8b:8d: 65:4d:cc:1f:1b:0b:54:09:01:9b:cb:a5:fa:a4:34:a9:ae:0d: 8c:a2:a2:ec:c9:a0:c3:14:4a:7d:80:65:d9:ae:0c:30:57:1a: 70:33:8a:36:54:49:2a:db:6f:55:8c:5f:a2:7f:04:f0:b6:c0: a5:ed:76:bc:98:3a:c7:4c:54:e4:3d:2a:04:7e:ec:bc:4c:ca: 16:23:0e:bf:82:a4:74:06:10:42:79:2b:be:08:51:77:9d:e6: 9c:4b:d8:2e:4b:b0:16:25:4c:82:0c:90:f6:b7:5b:95:c6:d4: cb:cf:b5:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDQxNTNCQTQ5OUE0NEU3RUMxMDQxQzYwRUY3RjM2OUFD NjIzNTdBQTgwHhcNMjUwNTE1MDQxNDEyWhcNMjUwNTIyMDQxNDEyWjAYMRYwFAYD VQQDEw02ODI1NmExNC1jYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pFa6DdZj4+izjPogpUQKaqqaI91Oe7JwDqTvtj8uDpx9NgjneaEuqRhZJE+ qckZ1CR9TCIzpzpP5n5XB1IrAPRle/25K6TVn92esrjTBN7ZUGNMOg8dHFfPV0F0 TBpjdL5JwayxeKN16RJENUHYZsbEXZYk5blws8LQGMOLfObrEMSPlqHSQqDmXP0j efyD/GsSRBDsCiycQYYxEiarxwFEdLcrGBx749+V6uwS0T3vjzETqPTwJnkmBhmA wqlSfQfkycHm3pLPO5Zq1kcUBRiy0mSqbM0BxUkp/JS9hDU2dZCvSbHpMTmFNFMr 1qrH9uj492GxcTW2H8zPtmHfyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVQVXhT BNaNryf81Pb9vA+TYCZYMB8GA1UdIwQYMBaAFEFTukmaROfsEEHGDvfzaaxiNXqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS8wRTBERkE5ODhD Q0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUtd1FRY1lPOV9OcHJHSTFl cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS8wRTBERkE5ODhDQ0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUt d1FRY1lPOV9OcHJHSTFlcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUmuympypjWe8MQfuDh8Rt4QKDykZQuqcONHxMhaMZ1+t6DlRa3C7P c9LaGhD7RXwWBlkzpSSTWE2wlu60fS4VhBnGW8yUO6IbrvIbjPIKmg6e4YA40442 CgjZtm4XVMrbo85WvQp1v+sPQC7H0iHYabvBWXLRghBGX0eqreDPpSt0Xl3ddK7+ MYQtSV+Ti41lTcwfGwtUCQGby6X6pDSprg2MoqLsyaDDFEp9gGXZrgwwVxpwM4o2 VEkq229VjF+ifwTwtsCl7Xa8mDrHTFTkPSoEfuy8TMoWIw6/gqR0BhBCeSu+CFF3 neacS9guS7AWJUyCDJD2t1uVxtTLz7VS -----END CERTIFICATE-----Generated at Thu May 15 09:51:13 2025 by rpki-client