$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json) Hash identifier: eJhMEcqpmUkWvQsWKkefhmw/B4d9LKDhVHdT1sTaFwQ= Subject key identifier: D5:88:4A:EF:25:BB:F5:95:CA:FE:1F:4F:4D:C3:D2:4A:19:87:89:F4 Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft Manifest number: 02EA Signing time: Sun 11 May 2025 00:52:36 +0000 Manifest this update: Sun 11 May 2025 00:52:36 +0000 Manifest next update: Sun 18 May 2025 00:52:36 +0000 Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: q4aErtBlhB8EvCMAGyUr2ukr2xvk7t+S6h7skOVMeFA=) 2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Validity Not Before: May 11 00:52:36 2025 GMT Not After : May 18 00:52:36 2025 GMT Subject: CN=681ff4d4-9dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:91:c4:71:63:98:3b:af:98:13:50:83:8a: c1:22:01:a1:01:35:5b:91:52:53:f5:e7:87:c3:f1: 7b:d6:0a:33:d3:bb:c9:71:bb:1c:89:a8:ec:8b:01: d0:c5:bb:93:94:64:52:fc:9e:25:71:c8:6d:c9:a0: 08:d9:a6:93:0a:28:22:4d:a0:c0:b7:f0:d7:f4:25: 71:c2:fb:61:80:2b:c4:89:dd:44:78:28:92:39:a2: cf:1a:a4:aa:92:09:a8:5e:b9:2e:b1:ac:1e:1d:48: 6e:71:b3:96:76:c3:29:61:a0:ea:39:eb:60:7c:1c: 4e:e9:82:62:71:51:55:40:c3:b0:53:fb:8e:60:28: 31:68:56:74:19:27:50:5b:da:3d:a6:57:30:e1:7f: 48:57:be:aa:b8:0a:bf:ee:78:26:e1:4a:a1:77:f9: b7:53:a6:82:0e:72:66:d2:4f:19:d9:f3:cd:8b:cb: e0:19:1d:aa:f8:c9:01:f8:ad:6b:eb:45:e2:5a:8a: b6:8d:71:d4:24:be:4b:f7:d2:d1:59:14:57:37:16: 97:51:ea:ac:6d:1d:9c:19:b6:a9:33:b0:c4:48:ea: 00:52:52:c6:2d:dd:58:e8:ce:d5:44:42:58:e7:68: 71:c5:74:27:28:ac:9f:29:c2:1b:c8:a6:0a:f8:12: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:4A:EF:25:BB:F5:95:CA:FE:1F:4F:4D:C3:D2:4A:19:87:89:F4 X509v3 Authority Key Identifier: keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:94:63:d6:18:39:37:f4:a4:50:44:4d:f8:f6:10:ce:8e:37: 52:64:89:f9:18:cc:d1:ed:41:79:fd:1b:94:18:2c:b0:a8:32: 33:eb:d1:05:17:1f:85:c2:d7:b9:87:92:0b:71:69:7e:a1:29: 6b:a1:53:1c:6d:de:97:a8:6a:20:35:5b:e4:b4:b2:cc:81:19: af:7a:a4:d4:32:e8:9d:da:a4:db:f8:16:05:aa:91:81:8b:7b: 8f:99:70:98:34:c3:82:77:15:81:75:4a:31:ef:4a:f0:99:55: 5c:4f:33:8e:38:38:25:88:ef:06:2f:36:86:c0:af:cc:48:29: e7:f1:95:60:d6:6e:ba:2d:b3:b1:9e:90:9c:54:95:91:45:8c: 71:91:42:2e:18:2e:e6:c8:ea:bd:35:19:8a:d1:c9:2d:3a:e1: fc:af:72:15:19:25:7e:d5:00:d1:c3:bb:b8:ca:5d:53:49:5e: 1c:54:65:ee:51:f6:08:21:3f:fc:89:4a:27:7b:fe:ee:70:7f: 5c:20:a7:a1:b3:c7:ad:75:b8:ad:2e:ab:8a:d9:e9:00:4b:cd: 04:4a:3a:98:d2:68:3c:41:58:f0:61:0c:b3:41:4e:b3:6a:2e: 88:d5:64:e5:d8:d1:1a:1f:b8:01:36:34:b0:ad:28:b7:b9:fe: cd:9a:23:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxRkMxMTAvBgNVBAUTKDQxNUQxRUY1N0REQTc4QTVGQzk1MjQwNTQyNDg0MDAy OENENDdEOTkwHhcNMjUwNTExMDA1MjM2WhcNMjUwNTE4MDA1MjM2WjAYMRYwFAYD VQQDEw02ODFmZjRkNC05ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sGRxHFjmDuvmBNQg4rBIgGhATVbkVJT9eeHw/F71goz07vJcbsciajsiwHQ xbuTlGRS/J4lcchtyaAI2aaTCigiTaDAt/DX9CVxwvthgCvEid1EeCiSOaLPGqSq kgmoXrkusaweHUhucbOWdsMpYaDqOetgfBxO6YJicVFVQMOwU/uOYCgxaFZ0GSdQ W9o9plcw4X9IV76quAq/7ngm4Uqhd/m3U6aCDnJm0k8Z2fPNi8vgGR2q+MkB+K1r 60XiWoq2jXHUJL5L99LRWRRXNxaXUeqsbR2cGbapM7DESOoAUlLGLd1Y6M7VREJY 52hxxXQnKKyfKcIbyKYK+BLeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWISu8l u/WVyv4fT03D0koZh4n0MB8GA1UdIwQYMBaAFEFdHvV92nil/JUkBUJIQAKM1H2Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFGQy8zMDRBODlEQ0RF MzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVLWDhsU1FGUWtoQUFvelVm WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWMGU5WDNhZUtYOGxTUUZRa2hBQW96VWZaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFGQy8zMDRBODlEQ0RFMzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVL WDhsU1FGUWtoQUFvelVmWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBclGPWGDk39KRQRE349hDOjjdSZIn5GMzR7UF5/RuUGCywqDIz69EF Fx+Fwte5h5ILcWl+oSlroVMcbd6XqGogNVvktLLMgRmveqTUMuid2qTb+BYFqpGB i3uPmXCYNMOCdxWBdUox70rwmVVcTzOOODgliO8GLzaGwK/MSCnn8ZVg1m66LbOx npCcVJWRRYxxkUIuGC7myOq9NRmK0cktOuH8r3IVGSV+1QDRw7u4yl1TSV4cVGXu UfYIIT/8iUone/7ucH9cIKehs8etdbitLquK2ekAS80ESjqY0mg8QVjwYQyzQU6z ai6I1WTl2NEaH7gBNjSwrSi3uf7NmiPE -----END CERTIFICATE-----Generated at Tue May 13 00:02:36 2025 by rpki-client