$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: hx8yz13kL23SGmrSiFJu5uDKu8jt16aPcrHWmLTPElQ= Subject key identifier: 93:20:7B:F3:31:97:84:1F:5C:4D:0C:43:5B:3F:72:61:46:5B:4A:5D Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 5A Signing time: Tue 13 May 2025 03:23:15 +0000 Manifest this update: Tue 13 May 2025 03:23:15 +0000 Manifest next update: Tue 20 May 2025 03:23:15 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: aitIUkAvHirWSLf7zuweC5QRi7U5aX80mOFKdtcis1c=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: May 13 03:23:15 2025 GMT Not After : May 20 03:23:15 2025 GMT Subject: CN=6822bb23-5618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c7:ff:68:fa:34:e9:94:43:13:cf:83:33:58: a3:02:47:38:9a:3f:b5:92:c8:17:2c:ee:8a:8b:9e: 47:8b:59:86:99:67:2c:ca:6a:fb:be:c5:45:88:41: 11:fc:85:3f:43:85:76:5b:8b:e5:63:8d:9c:c7:2f: ed:df:e2:b9:55:d7:ca:f2:d9:82:c3:18:f5:36:37: f5:a4:37:5d:b3:49:d9:38:f9:65:c0:61:6c:e1:04: 94:60:d7:72:25:32:8f:83:f3:56:90:9b:c6:6b:c5: c1:74:3b:d7:b7:84:59:24:1f:c3:1e:1c:3a:bf:7b: 16:7f:c9:47:60:5a:c8:3e:15:28:c1:4c:28:2b:30: 1b:a5:46:94:c5:1c:35:6f:0f:84:d7:88:1b:4a:f4: e8:0a:f5:ae:a0:11:09:6d:53:33:01:83:ad:dd:b3: 4a:2a:58:21:0d:fc:81:4d:57:ab:03:fa:cb:46:6b: 6e:6b:80:37:be:33:81:b9:41:8b:36:aa:e9:68:a1: 92:2a:61:5a:31:15:29:8c:7f:9a:5b:c7:ee:c7:78: e4:f0:95:2c:f3:80:fc:24:55:2c:10:82:3c:f7:76: 0e:b9:5b:09:d8:a7:09:49:a7:a7:0b:21:41:8a:0d: 51:3f:e3:e7:f4:44:40:82:e1:8c:9b:b6:17:57:4b: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:7B:F3:31:97:84:1F:5C:4D:0C:43:5B:3F:72:61:46:5B:4A:5D X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9d:ae:a6:45:59:76:37:ed:e5:54:ce:f7:2d:c1:b2:46:e0: 5b:13:e6:f8:d1:23:fc:3a:44:b1:7d:f0:75:4c:8a:b2:37:3f: e4:c1:63:d8:bb:2f:96:af:f1:60:25:2c:c8:51:76:cc:49:f9: 36:26:59:ab:69:18:76:4a:f5:e4:01:fa:68:47:5f:09:60:20: 27:d9:7c:d1:e5:6b:18:6b:0c:21:f0:43:48:a0:f4:ca:4b:ad: 29:b7:68:a3:34:11:b1:2f:23:a6:41:c0:6d:70:b3:03:0b:e0: dd:ab:74:9f:2e:51:77:08:bb:5b:e6:1b:af:e7:5d:88:6f:2c: 53:34:3d:c0:14:86:91:ac:fd:7b:c9:0d:67:bd:c6:a8:62:a3: 81:6d:49:6b:52:82:a9:e4:8c:e3:92:d8:9b:c2:12:8f:c3:eb: e1:eb:b1:d0:3e:88:3c:81:98:9b:46:bf:88:40:0f:58:4f:06: 81:37:be:d8:86:9a:90:4a:42:3b:cb:a2:99:b8:af:ee:dd:90: 49:90:f6:a7:39:2c:a8:6b:6a:09:81:5e:1a:06:63:5c:5c:f1: de:cc:a4:4f:28:1f:57:87:81:f5:71:94:63:03:8a:80:90:5c: 50:95:8f:c4:93:20:23:40:c8:6e:fb:40:47:06:43:d2:00:ac: 9f:c0:ea:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNTA1MTMwMzIzMTVaFw0yNTA1MjAwMzIzMTVaMBgxFjAUBgNV BAMTDTY4MjJiYjIzLTU2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZx/9o+jTplEMTz4MzWKMCRziaP7WSyBcs7oqLnkeLWYaZZyzKavu+xUWIQRH8 hT9DhXZbi+VjjZzHL+3f4rlV18ry2YLDGPU2N/WkN12zSdk4+WXAYWzhBJRg13Il Mo+D81aQm8ZrxcF0O9e3hFkkH8MeHDq/exZ/yUdgWsg+FSjBTCgrMBulRpTFHDVv D4TXiBtK9OgK9a6gEQltUzMBg63ds0oqWCEN/IFNV6sD+stGa25rgDe+M4G5QYs2 qulooZIqYVoxFSmMf5pbx+7HeOTwlSzzgPwkVSwQgjz3dg65WwnYpwlJp6cLIUGK DVE/4+f0RECC4YybthdXS7vZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkyB78zGX hB9cTQxDWz9yYUZbSl0wHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDVGLzhDQTIwQTFDQUFEMjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2Zy SU9vTDhZYkstbnNZbXdndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGudrqZFWXY37eVUzvctwbJG4FsT5vjRI/w6RLF98HVMirI3P+TBY9i7 L5av8WAlLMhRdsxJ+TYmWatpGHZK9eQB+mhHXwlgICfZfNHlaxhrDCHwQ0ig9MpL rSm3aKM0EbEvI6ZBwG1wswML4N2rdJ8uUXcIu1vmG6/nXYhvLFM0PcAUhpGs/XvJ DWe9xqhio4FtSWtSgqnkjOOS2JvCEo/D6+HrsdA+iDyBmJtGv4hAD1hPBoE3vtiG mpBKQjvLopm4r+7dkEmQ9qc5LKhragmBXhoGY1xc8d7MpE8oH1eHgfVxlGMDioCQ XFCVj8STICNAyG77QEcGQ9IArJ/A6jg= -----END CERTIFICATE-----Generated at Wed May 14 03:22:34 2025 by rpki-client