$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json) Hash identifier: Qq/D4Hdf8GvBdxlqFh4xWRIMC+rjrwn2FHPb+pB3q0Y= Subject key identifier: AD:D5:46:E1:2C:87:2C:66:0D:C9:12:FE:C4:9E:AE:67:DF:E1:43:1F Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Certificate serial: 080E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft Manifest number: 1330 Signing time: Wed 14 May 2025 19:17:25 +0000 Manifest this update: Wed 14 May 2025 19:17:24 +0000 Manifest next update: Wed 21 May 2025 19:17:24 +0000 Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: mQilEeR79NN7MA9CZzMGpIJe6Tcx912tJap672cRwx8=) 2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: 5zkE6RPNVvetKuzik8vsy3mHeLDd3Wj/ciaGchVH9po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062 (0x80e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Validity Not Before: May 14 19:17:24 2025 GMT Not After : May 21 19:17:24 2025 GMT Subject: CN=6824ec45-d980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:67:89:19:3d:65:a6:ca:ec:ef:87:e2:57: a9:5d:7f:47:63:d6:cc:95:fe:74:95:79:70:b1:a3: 64:c0:dd:6f:7e:09:ba:ba:f5:a8:e2:27:0c:c1:e1: 87:75:f6:0f:3a:1e:a2:5b:2b:ce:3b:cd:2d:cc:12: ee:4a:d4:1b:85:7e:50:a4:54:01:bb:9d:31:7b:4c: 37:f1:ac:3b:80:1d:38:ee:34:31:5a:db:f6:8b:68: 97:b8:42:ad:74:80:48:62:48:b0:7c:1d:8c:54:8d: a2:2d:40:f4:e3:38:9a:83:7c:1b:67:6b:c2:67:67: 63:d5:5b:d8:4d:94:b0:8b:c8:34:25:80:27:f3:f4: ca:86:ca:0d:6c:c1:93:48:26:02:32:1a:25:78:d3: e4:9f:df:d6:9a:15:fb:bc:4f:90:35:31:1d:45:8d: 7c:db:2e:f6:b1:7e:42:d3:20:c6:04:25:aa:7b:7f: 6a:74:b6:de:87:ee:97:ca:27:ca:be:fa:f6:e7:c3: 60:44:9e:62:fc:61:88:10:68:70:7c:63:a6:4e:09: 8b:2f:af:af:78:ec:9b:03:57:51:f2:e8:f9:57:4b: 9b:05:c5:a5:ad:17:fc:fa:a3:96:78:47:80:13:a1: 10:db:c6:55:61:e4:bb:e8:dd:09:f8:41:fe:4e:fd: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:46:E1:2C:87:2C:66:0D:C9:12:FE:C4:9E:AE:67:DF:E1:43:1F X509v3 Authority Key Identifier: keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:06:e8:aa:fe:b3:ef:6e:06:8d:6b:c7:86:13:d8:94:81:ad: 2a:35:59:ff:11:94:fc:48:94:a8:22:b9:92:ec:ad:2f:9b:23: 60:cc:e0:1d:a5:b7:3d:9c:97:64:dd:3e:0f:c4:ef:41:eb:11: 25:c0:25:e2:ea:24:d5:c9:ef:c6:a6:fe:b1:88:5d:fd:21:6d: 85:65:6b:01:7d:24:29:e6:de:79:f3:8d:ba:ab:a2:b9:88:76: 4d:72:b8:4d:b7:bd:b6:9d:ba:a8:2a:0c:27:dc:57:6f:aa:6d: 0e:8c:d2:6e:eb:17:25:ba:57:6d:57:9b:54:ff:e6:dd:da:e8: c0:e8:66:b2:a1:7b:0b:43:5b:1a:ce:41:36:58:bd:69:8e:df: 9c:d8:14:99:36:dd:91:5a:5d:44:35:22:1b:e2:ed:7e:68:bd: fb:4b:08:48:9e:3b:e9:4f:36:f5:42:dc:92:e7:41:1b:4a:5c: 9e:47:e7:f1:f2:35:f7:eb:5f:04:e8:68:ed:02:bd:48:23:07: ab:87:2f:1f:c9:8e:bb:27:d5:1d:4c:18:d7:58:dc:f6:b4:be: d6:04:cc:11:0e:8c:72:8e:cb:2c:2d:7c:45:c7:9f:43:77:6b: 9d:af:8f:77:a3:ca:03:dd:24:64:08:0f:cd:9a:e2:9a:31:4d: 11:52:f4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD RjUwQzI0RjkwHhcNMjUwNTE0MTkxNzI0WhcNMjUwNTIxMTkxNzI0WjAYMRYwFAYD VQQDEw02ODI0ZWM0NS1kOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn9niRk9ZabK7O+H4lepXX9HY9bMlf50lXlwsaNkwN1vfgm6uvWo4icMweGH dfYPOh6iWyvOO80tzBLuStQbhX5QpFQBu50xe0w38aw7gB047jQxWtv2i2iXuEKt dIBIYkiwfB2MVI2iLUD04ziag3wbZ2vCZ2dj1VvYTZSwi8g0JYAn8/TKhsoNbMGT SCYCMholeNPkn9/WmhX7vE+QNTEdRY182y72sX5C0yDGBCWqe39qdLbeh+6XyifK vvr258NgRJ5i/GGIEGhwfGOmTgmLL6+veOybA1dR8uj5V0ubBcWlrRf8+qOWeEeA E6EQ28ZVYeS76N0J+EH+Tv25NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3VRuEs hyxmDckS/sSermff4UMfMB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNG REp5RWlHcXBUT2pQVU1KUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeBuiq/rPvbgaNa8eGE9iUga0qNVn/EZT8SJSoIrmS7K0vmyNgzOAd pbc9nJdk3T4PxO9B6xElwCXi6iTVye/Gpv6xiF39IW2FZWsBfSQp5t558426q6K5 iHZNcrhNt722nbqoKgwn3Fdvqm0OjNJu6xcluldtV5tU/+bd2ujA6GayoXsLQ1sa zkE2WL1pjt+c2BSZNt2RWl1ENSIb4u1+aL37SwhInjvpTzb1QtyS50EbSlyeR+fx 8jX3618E6GjtAr1IIwerhy8fyY67J9UdTBjXWNz2tL7WBMwRDoxyjsssLXxFx59D d2udr493o8oD3SRkCA/NmuKaMU0RUvS8 -----END CERTIFICATE-----Generated at Fri May 16 14:29:29 2025 by rpki-client