$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: kB/oqtAeIqA383WXMN9PG+luJVw7MiSQtC6SMfXQ6m4= Subject key identifier: CA:29:66:CC:EF:D0:A4:F9:89:B1:1B:04:3D:24:89:EA:72:68:00:4C Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 0841 Signing time: Wed 14 May 2025 20:53:36 +0000 Manifest this update: Wed 14 May 2025 20:53:35 +0000 Manifest next update: Wed 21 May 2025 20:53:35 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: uVNH7IPCsMaYxw6VQ5vUlKqtDkAaygiJODtHQHDdDlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: May 14 20:53:35 2025 GMT Not After : May 21 20:53:35 2025 GMT Subject: CN=682502cf-b39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:fd:df:cd:ac:c3:55:f4:25:f3:27:81:97: 3a:24:bc:b2:29:ae:2f:a7:03:16:08:c1:f8:d2:dc: 4c:86:a4:0e:76:18:63:71:87:e1:03:61:ac:d8:97: 8f:33:d0:84:19:3a:6b:29:44:6a:42:aa:ea:3a:c5: 78:7f:dc:4e:1e:f0:1a:ba:1a:3f:cc:21:e2:21:e5: e4:e3:3a:6d:20:a9:ae:f4:a4:24:f6:6e:d7:3c:09: c7:ae:22:32:15:90:46:f9:66:86:2c:fe:32:ae:09: f2:c6:57:c2:83:ac:83:df:7b:f8:22:13:42:1b:c2: 7d:0c:51:e1:19:51:16:88:8a:8d:87:1f:94:f2:b2: 4c:cc:79:bc:af:1d:6f:cc:a2:e4:10:5c:97:bf:e1: 5e:8f:42:3d:00:ca:9b:73:b0:2f:d6:4f:e3:a6:04: 57:35:e1:ec:78:0d:7e:9f:6b:d4:d5:c1:65:ee:51: aa:c7:2c:4d:00:93:98:37:c5:5a:db:06:38:fe:13: 5b:f1:d1:2b:f1:56:93:82:07:0b:83:8d:fe:bb:87: 9a:95:6d:44:f3:fb:58:c5:56:96:8c:42:f5:6d:f0: c0:de:1a:83:1b:b2:90:38:bb:92:8c:7a:d2:51:6f: 62:67:26:29:4b:0b:35:c0:db:3e:4f:c2:cb:e1:7e: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:66:CC:EF:D0:A4:F9:89:B1:1B:04:3D:24:89:EA:72:68:00:4C X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e1:48:a1:a9:1d:f3:96:83:70:34:41:34:49:c8:31:52:3a: 78:7b:f8:69:c5:5f:4d:b7:a6:7b:6f:0f:cf:67:27:9e:31:08: 57:11:f6:f8:52:37:a9:eb:4a:a2:3f:4a:11:91:4b:4e:b2:d4: a4:6e:d2:a6:ff:77:0f:e2:36:d9:67:c8:52:0f:f6:fb:e7:27: 91:f0:32:36:3f:bf:ac:d7:9e:54:98:e2:db:cc:18:71:4e:62: 15:8b:0a:67:da:2d:0f:72:d8:ff:78:de:34:a8:af:f2:6f:f3: 95:3c:d1:d0:ce:bd:75:45:9f:fd:34:dd:64:72:6c:0e:4a:0d: 4c:54:73:51:bf:36:34:45:73:6d:c9:f2:f6:c4:30:02:dc:79: 8c:aa:c8:fa:a2:54:55:a7:9e:28:75:b5:ab:ce:f9:56:c4:48: a4:cf:e1:af:76:6b:1d:7e:54:e1:d7:5d:4c:9a:8a:85:c5:c4: 09:0f:ef:c7:52:d8:f0:88:b0:72:3b:2f:f9:7a:69:93:e5:e4: 9c:93:54:55:a7:21:04:40:6e:1c:5b:e4:e2:4a:e5:1a:e1:4e: 4a:63:5e:b7:8b:a2:27:7f:16:74:f6:78:73:cb:5c:c2:88:1d: 4d:55:f6:e8:c0:0f:a8:89:cb:ed:93:02:86:38:d4:4a:a9:cb: 3b:ce:38:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUwNTE0MjA1MzM1WhcNMjUwNTIxMjA1MzM1WjAYMRYwFAYD VQQDEw02ODI1MDJjZi1iMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sn9382sw1X0JfMngZc6JLyyKa4vpwMWCMH40txMhqQOdhhjcYfhA2Gs2JeP M9CEGTprKURqQqrqOsV4f9xOHvAauho/zCHiIeXk4zptIKmu9KQk9m7XPAnHriIy FZBG+WaGLP4yrgnyxlfCg6yD33v4IhNCG8J9DFHhGVEWiIqNhx+U8rJMzHm8rx1v zKLkEFyXv+Fej0I9AMqbc7Av1k/jpgRXNeHseA1+n2vU1cFl7lGqxyxNAJOYN8Va 2wY4/hNb8dEr8VaTggcLg43+u4ealW1E8/tYxVaWjEL1bfDA3hqDG7KQOLuSjHrS UW9iZyYpSws1wNs+T8LL4X5GfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMopZszv 0KT5ibEbBD0kiepyaABMMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc4UihqR3zloNwNEE0ScgxUjp4e/hpxV9Nt6Z7bw/PZyeeMQhXEfb4 Ujep60qiP0oRkUtOstSkbtKm/3cP4jbZZ8hSD/b75yeR8DI2P7+s155UmOLbzBhx TmIViwpn2i0Pctj/eN40qK/yb/OVPNHQzr11RZ/9NN1kcmwOSg1MVHNRvzY0RXNt yfL2xDAC3HmMqsj6olRVp54odbWrzvlWxEikz+GvdmsdflTh111MmoqFxcQJD+/H UtjwiLByOy/5emmT5eSck1RVpyEEQG4cW+TiSuUa4U5KY163i6InfxZ09nhzy1zC iB1NVfbowA+oicvtkwKGONRKqcs7zjik -----END CERTIFICATE-----Generated at Fri May 16 09:38:40 2025 by rpki-client