$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: vg8WJYqbhrMpJ7a8j8v4T3nEVcCHRXT7+CEnzed5zd0= Subject key identifier: 15:16:26:47:32:8A:CB:FB:E2:D7:78:7C:7D:56:44:33:42:32:44:A0 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 044C Signing time: Sun 04 May 2025 23:52:07 +0000 Manifest this update: Sun 04 May 2025 23:52:06 +0000 Manifest next update: Sun 11 May 2025 23:52:06 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: aZDyPe0KnoZV25y3MYTGCWc985CF4og0xzq+5f2dQPI=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: May 4 23:52:06 2025 GMT Not After : May 11 23:52:06 2025 GMT Subject: CN=6817fda7-ca2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:5f:68:9d:bc:71:68:fd:90:26:08:b1:58: 68:06:bd:ad:73:ca:26:d3:6a:6a:fd:23:bf:9d:8c: b4:25:84:a5:58:77:d9:b4:e6:65:82:79:66:05:12: bc:9b:43:13:46:54:6a:32:02:72:2b:f1:20:87:7d: f8:47:34:cd:d7:05:30:57:b6:df:fc:21:bc:64:35: 79:c8:6e:fc:3b:a8:0b:ab:d0:52:c5:ac:e5:cd:cf: 03:6e:26:20:3c:4e:04:5f:12:c4:fe:bc:1b:c1:54: e9:e7:5b:82:35:24:98:36:00:52:b0:d6:c5:7c:23: 7f:98:9a:d6:7d:bb:37:26:d4:de:63:9a:38:d0:90: a9:a1:d7:23:be:9f:d8:7f:b8:22:04:12:fd:84:3e: 30:7a:a8:9f:fc:9c:04:45:32:ff:de:f9:aa:a9:73: ea:4e:a3:53:38:ea:44:4e:2f:7f:0e:9d:bb:24:83: 09:f2:b5:19:45:c4:60:51:94:12:82:b0:cc:5d:39: 74:de:76:a9:f0:b4:82:06:d3:e4:60:ce:e1:e1:db: c9:db:31:39:e5:bf:2b:38:ae:cc:4c:b3:50:52:93: f0:d0:f3:96:65:56:9e:fb:cc:b1:2b:20:5f:7b:00: 00:54:05:b1:8e:6f:5b:3f:87:48:04:a9:56:cf:3d: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:16:26:47:32:8A:CB:FB:E2:D7:78:7C:7D:56:44:33:42:32:44:A0 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e7:1b:8b:30:5e:c3:43:c1:7d:2d:a9:57:d3:4e:08:4f:0a: e1:c9:d3:3c:c4:b5:be:64:ec:a2:bd:a4:fa:91:e2:0e:22:f7: 87:8e:ca:73:02:99:48:98:fb:83:ae:42:27:f7:3a:1d:cc:19: 47:b2:cc:b9:a1:ba:60:59:85:0f:0d:d0:3e:7a:2c:d8:67:ec: 00:88:1b:d2:c6:d7:83:03:11:7e:a5:e5:d4:e2:04:8f:14:d8: c1:af:f8:36:bf:4e:54:ad:e0:77:73:60:85:ca:d2:9b:9a:4d: 9d:cf:9e:22:94:c1:b4:8f:e3:ce:ce:9c:94:8d:cb:d0:58:1e: 9a:5a:80:45:f5:4e:a3:b4:c2:aa:5a:c4:de:a5:b8:9e:44:13: 61:06:b6:35:4a:98:66:4d:dd:65:21:56:96:85:33:28:f2:b1: e3:57:59:20:d6:d3:8f:51:2a:4a:03:6d:02:a7:61:68:dd:06: fd:a4:5d:49:01:7f:38:c3:1e:1c:e0:55:07:06:f5:6d:62:d4: 38:17:36:ef:07:d3:9b:ab:05:f3:25:15:8a:49:09:2c:88:52: 90:79:cc:9d:44:06:32:70:e7:85:00:bd:e5:90:72:09:5a:a0: 4d:32:33:59:9c:31:71:ae:99:77:5a:89:f0:42:2e:0a:82:f3: 5d:e7:b0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUwNTA0MjM1MjA2WhcNMjUwNTExMjM1MjA2WjAYMRYwFAYD VQQDEw02ODE3ZmRhNy1jYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VpfaJ28cWj9kCYIsVhoBr2tc8om02pq/SO/nYy0JYSlWHfZtOZlgnlmBRK8 m0MTRlRqMgJyK/Egh334RzTN1wUwV7bf/CG8ZDV5yG78O6gLq9BSxazlzc8DbiYg PE4EXxLE/rwbwVTp51uCNSSYNgBSsNbFfCN/mJrWfbs3JtTeY5o40JCpodcjvp/Y f7giBBL9hD4weqif/JwERTL/3vmqqXPqTqNTOOpETi9/Dp27JIMJ8rUZRcRgUZQS grDMXTl03nap8LSCBtPkYM7h4dvJ2zE55b8rOK7MTLNQUpPw0POWZVae+8yxKyBf ewAAVAWxjm9bP4dIBKlWzz3CjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUWJkcy isv74td4fH1WRDNCMkSgMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH5xuLMF7DQ8F9LalX004ITwrhydM8xLW+ZOyivaT6keIOIveHjspz AplImPuDrkIn9zodzBlHssy5obpgWYUPDdA+eizYZ+wAiBvSxteDAxF+peXU4gSP FNjBr/g2v05UreB3c2CFytKbmk2dz54ilMG0j+POzpyUjcvQWB6aWoBF9U6jtMKq WsTepbieRBNhBrY1SphmTd1lIVaWhTMo8rHjV1kg1tOPUSpKA20Cp2Fo3Qb9pF1J AX84wx4c4FUHBvVtYtQ4FzbvB9ObqwXzJRWKSQksiFKQecydRAYycOeFAL3lkHIJ WqBNMjNZnDFxrpl3WonwQi4KgvNd57CQ -----END CERTIFICATE-----Generated at Mon May 5 17:40:02 2025 by rpki-client