$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: DHAnBbEbg6sddOtnYfWwpkv432DZUspMQNjcKQrJmjQ= Subject key identifier: E7:6A:47:C3:3A:BE:4F:C2:EE:6C:78:BF:1F:C2:06:40:C8:9C:57:72 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 077E Signing time: Mon 12 May 2025 21:13:30 +0000 Manifest this update: Mon 12 May 2025 21:13:29 +0000 Manifest next update: Mon 19 May 2025 21:13:29 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: LPVASe5/QlqqmZeohEOIId713IfQmRS5qFl8sfe2ORE=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: May 12 21:13:29 2025 GMT Not After : May 19 21:13:29 2025 GMT Subject: CN=68226479-7426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:fb:00:bd:8a:7b:2c:ad:25:f5:d8:18:58: bf:55:a0:3c:eb:52:9d:e2:7d:40:bd:a8:a1:22:e3: e6:72:14:07:1a:4e:f5:62:78:d1:83:f7:16:24:31: 46:8c:c5:0a:00:b5:f7:27:77:38:48:d5:41:8a:0a: 70:c4:02:20:5a:d6:a2:5e:04:c8:b6:8a:db:e3:ba: 78:64:c6:f0:79:87:20:5c:3a:e3:12:5b:c0:77:d1: 7b:34:fe:97:e1:74:f0:8a:88:b7:b1:fb:57:bb:9b: 99:4b:53:36:fa:72:b0:82:99:93:e5:38:33:e0:6c: 8b:0a:7c:83:3b:ae:6a:20:bf:03:7f:06:f7:54:3c: 80:b5:2a:74:58:68:67:04:3d:48:f4:d7:03:b4:cd: ea:38:77:8c:45:1e:29:c2:8d:d6:79:76:ee:4d:9f: e0:d1:c5:c3:a8:9c:52:28:e4:cd:4d:af:53:1e:54: 44:c7:12:70:ea:6b:2b:97:25:11:b4:d8:e4:8b:04: c8:83:8f:a9:5e:6d:45:ac:5b:70:6a:11:7a:47:7c: f0:55:8b:8d:40:c5:38:9f:46:bb:7e:30:20:c1:3a: 3d:19:ca:d6:e7:bb:8f:fc:99:e9:b4:27:10:a8:a3: 53:2a:c2:5f:4a:3d:98:b2:69:c6:00:e1:28:dc:3c: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6A:47:C3:3A:BE:4F:C2:EE:6C:78:BF:1F:C2:06:40:C8:9C:57:72 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:56:fe:d1:ad:e0:94:39:0c:6a:f2:48:15:6d:24:bb:b6:97: 6a:8c:69:f6:ef:ff:21:f7:a4:7b:ec:95:0d:7e:15:a0:30:8f: 04:da:73:25:b8:1b:64:01:a1:7b:02:af:75:8c:ae:35:a2:71: 89:1e:c0:d8:bf:f3:9a:8d:52:d4:26:59:29:e3:b2:48:8c:fd: 73:8a:d1:db:6a:a0:13:90:20:c1:3c:82:2e:b2:0a:8e:a3:96: a5:88:40:1a:ae:22:a0:32:99:dd:8f:ef:c9:7d:64:1a:03:27: e6:12:2f:a7:df:1b:74:4a:3f:48:fd:bd:0e:2a:73:80:ff:ae: ff:fb:14:16:c0:ac:60:df:6c:25:10:ac:e7:05:d7:60:b1:f9: a9:2d:85:86:7a:e4:ea:d4:8c:9e:31:71:b9:bb:60:25:8a:d0: a1:f0:d3:c3:21:9a:bc:65:87:ea:d9:15:e6:05:af:15:e1:df: ff:67:b4:3f:ae:00:ec:76:d4:0b:91:3c:f0:15:bf:97:22:04: b2:9f:c6:fd:bc:47:da:71:c1:75:51:b6:78:95:cf:62:4f:74: 7a:40:86:47:8a:4a:16:3d:97:64:7d:05:2b:38:05:26:23:80: 29:9b:ad:bc:b6:49:32:1e:9b:8f:f8:7a:33:3d:1d:9d:b6:78: e0:18:1c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUwNTEyMjExMzI5WhcNMjUwNTE5MjExMzI5WjAYMRYwFAYD VQQDEw02ODIyNjQ3OS03NDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthT7AL2KeyytJfXYGFi/VaA861Kd4n1AvaihIuPmchQHGk71YnjRg/cWJDFG jMUKALX3J3c4SNVBigpwxAIgWtaiXgTItorb47p4ZMbweYcgXDrjElvAd9F7NP6X 4XTwioi3sftXu5uZS1M2+nKwgpmT5Tgz4GyLCnyDO65qIL8Dfwb3VDyAtSp0WGhn BD1I9NcDtM3qOHeMRR4pwo3WeXbuTZ/g0cXDqJxSKOTNTa9THlRExxJw6msrlyUR tNjkiwTIg4+pXm1FrFtwahF6R3zwVYuNQMU4n0a7fjAgwTo9GcrW57uP/JnptCcQ qKNTKsJfSj2YsmnGAOEo3DzMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdqR8M6 vk/C7mx4vx/CBkDInFdyMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnVv7RreCUOQxq8kgVbSS7tpdqjGn27/8h96R77JUNfhWgMI8E2nMl uBtkAaF7Aq91jK41onGJHsDYv/OajVLUJlkp47JIjP1zitHbaqATkCDBPIIusgqO o5aliEAariKgMpndj+/JfWQaAyfmEi+n3xt0Sj9I/b0OKnOA/67/+xQWwKxg32wl EKznBddgsfmpLYWGeuTq1IyeMXG5u2AlitCh8NPDIZq8ZYfq2RXmBa8V4d//Z7Q/ rgDsdtQLkTzwFb+XIgSyn8b9vEfaccF1UbZ4lc9iT3R6QIZHikoWPZdkfQUrOAUm I4Apm628tkkyHpuP+HozPR2dtnjgGBwk -----END CERTIFICATE-----Generated at Tue May 13 22:48:36 2025 by rpki-client