$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: cGzMn1MV+wvCGgzXii9+q+HJf/NqxPQINaA2Ye8wNVc= Subject key identifier: CE:AD:1B:83:AA:8E:B1:1A:DA:1C:C9:81:22:2C:62:D4:BB:98:59:5D Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2DFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2DEE Signing time: Wed 14 May 2025 15:32:40 +0000 Manifest this update: Wed 14 May 2025 15:32:39 +0000 Manifest next update: Wed 21 May 2025 15:32:39 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: gvxD2b/bhcw65fBrEbKZKKE1MKRwIxpw1/pERnPYenM=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11771 (0x2dfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: May 14 15:32:39 2025 GMT Not After : May 21 15:32:39 2025 GMT Subject: CN=6824b798-0c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:ac:8b:27:30:01:d4:25:65:41:64:a2:8b: 1c:6b:2e:a4:b0:41:97:16:aa:54:ae:6e:11:7c:8d: 2f:48:36:2e:59:0e:72:1a:7d:11:38:81:0f:b3:8d: 89:05:b8:88:19:bd:2c:d1:b1:f0:41:96:03:27:97: d8:23:f6:08:29:13:c8:76:0c:4b:a4:80:e5:bc:9a: 53:a4:ce:ba:2c:c7:48:b2:79:14:8b:e7:53:18:63: 3f:92:de:4a:00:69:5f:57:fc:5c:f3:3f:3a:8f:52: 46:95:ce:fc:de:eb:55:ff:ed:01:f0:89:33:7a:10: 3a:99:bc:40:9e:5b:3a:d0:27:6d:a3:6d:86:d1:d6: 12:ab:3e:56:3a:0c:22:00:6f:5b:2b:85:f5:ae:68: 77:5d:24:89:38:66:d7:11:f7:72:84:28:45:93:8c: bb:47:cd:2f:8c:fa:cd:d8:48:6b:37:93:59:f2:46: a1:b4:61:28:e3:bd:1b:84:3a:c0:f8:74:68:af:b1: 09:22:22:4e:3b:86:2b:03:9f:ac:b3:c0:aa:32:44: 18:27:b5:d4:2b:70:28:c7:0e:1a:91:cb:d8:21:1c: a3:83:3d:1c:81:b1:de:44:11:87:f7:10:33:1b:15: 0c:58:85:40:3b:01:4a:a6:ba:55:6d:d6:b3:e9:8b: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AD:1B:83:AA:8E:B1:1A:DA:1C:C9:81:22:2C:62:D4:BB:98:59:5D X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:04:50:3f:f7:85:35:95:5b:77:b6:a6:a9:c0:a2:f9:16:e1: 86:20:0f:e3:25:19:92:d4:62:ad:72:00:3f:51:c3:47:18:cb: 6d:e2:ac:02:41:9f:08:df:ff:be:e9:01:3e:23:76:d2:ee:48: aa:35:d9:4c:56:cb:e9:58:2e:42:6d:27:14:18:75:93:05:98: 38:77:e9:2e:54:03:2d:d8:54:d6:ad:52:45:39:de:9c:21:c2: 06:09:76:f7:44:ed:5a:6a:01:cd:33:cf:77:38:e3:ae:05:c6: 56:f0:7a:41:bb:3e:93:7c:e6:a2:32:cd:57:c8:35:c2:f9:b9: 5e:9e:8d:9d:51:12:15:a3:bb:b0:26:14:1a:fe:ef:88:4c:1a: 6d:a9:c4:76:87:00:fb:56:92:cc:e2:5f:be:81:06:61:c3:3e: 83:b4:26:a8:05:f4:3e:a5:ef:21:c0:94:4d:de:80:38:84:ab: d1:fe:fa:4b:19:f9:1d:0d:4a:28:c9:8e:50:40:c4:54:75:c1: 11:ee:b3:06:bf:e4:2f:35:2b:97:12:b3:01:7c:db:6d:fc:6d: c2:2a:22:c0:18:ed:33:1c:5f:b5:bd:56:28:0f:a3:17:22:2c: f6:c7:53:3e:c5:3e:01:9b:e6:e6:5a:b3:48:c2:6e:dc:b7:ed: 34:f5:7f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwNTE0MTUzMjM5WhcNMjUwNTIxMTUzMjM5WjAYMRYwFAYD VQQDEw02ODI0Yjc5OC0wYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZasiycwAdQlZUFkooscay6ksEGXFqpUrm4RfI0vSDYuWQ5yGn0ROIEPs42J BbiIGb0s0bHwQZYDJ5fYI/YIKRPIdgxLpIDlvJpTpM66LMdIsnkUi+dTGGM/kt5K AGlfV/xc8z86j1JGlc783utV/+0B8IkzehA6mbxAnls60Cdto22G0dYSqz5WOgwi AG9bK4X1rmh3XSSJOGbXEfdyhChFk4y7R80vjPrN2EhrN5NZ8kahtGEo470bhDrA +HRor7EJIiJOO4YrA5+ss8CqMkQYJ7XUK3Aoxw4akcvYIRyjgz0cgbHeRBGH9xAz GxUMWIVAOwFKprpVbdaz6YuGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6tG4Oq jrEa2hzJgSIsYtS7mFldMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9BFA/94U1lVt3tqapwKL5FuGGIA/jJRmS1GKtcgA/UcNHGMtt4qwC QZ8I3/++6QE+I3bS7kiqNdlMVsvpWC5CbScUGHWTBZg4d+kuVAMt2FTWrVJFOd6c IcIGCXb3RO1aagHNM893OOOuBcZW8HpBuz6TfOaiMs1XyDXC+bleno2dURIVo7uw JhQa/u+ITBptqcR2hwD7VpLM4l++gQZhwz6DtCaoBfQ+pe8hwJRN3oA4hKvR/vpL GfkdDUooyY5QQMRUdcER7rMGv+QvNSuXErMBfNtt/G3CKiLAGO0zHF+1vVYoD6MX Iiz2x1M+xT4Bm+bmWrNIwm7ct+009X8g -----END CERTIFICATE-----Generated at Thu May 15 18:11:31 2025 by rpki-client