$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json) Hash identifier: F8ohDjsIVUDGVkij68qdhuI812ocKwnFTm0KNbSkfTw= Subject key identifier: 78:F6:03:D7:92:4E:E4:18:81:9D:1B:30:3E:6B:FB:84:10:DB:32:63 Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft Manifest number: 0119 Signing time: Thu 15 May 2025 04:09:07 +0000 Manifest this update: Thu 15 May 2025 04:09:07 +0000 Manifest next update: Thu 22 May 2025 04:09:07 +0000 Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: sEHWqIYoVLqx+z/5alo+FEtcpUn4KH6xgypB2NJxhU4=) 2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: +vHH0mUjaHjNGLcgyypJ8y/RcZMmCEJZHVNAnsairms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Validity Not Before: May 15 04:09:07 2025 GMT Not After : May 22 04:09:07 2025 GMT Subject: CN=682568e3-8a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:d7:bd:bb:fa:34:6f:85:62:64:85:5a:a0: 93:5d:7b:f6:9f:9e:d0:a7:71:36:9d:16:ef:43:3c: 75:ff:cd:f4:7b:b0:2b:af:11:05:93:9c:15:93:31: 53:4e:a9:25:74:9f:f6:94:a9:d7:64:00:8b:3e:c7: 8b:e3:e7:d0:2e:b0:7f:dc:3b:8c:b3:8c:6e:dc:c6: 75:b1:5e:c5:07:f5:25:92:51:4b:55:66:73:d6:79: 9c:c9:af:6f:92:b4:6b:e7:60:bb:2e:cf:5e:d1:34: 72:68:43:40:cb:98:c4:40:8d:ed:85:48:3b:22:fb: 9f:45:09:02:3c:60:70:14:68:ef:60:ad:c3:ec:48: d5:00:39:86:7c:46:4d:8a:47:1e:71:5d:16:50:f1: f7:3d:6f:63:19:82:3f:3b:be:80:38:e9:39:73:81: fc:7b:41:a5:7b:58:ca:68:10:3a:ee:be:8f:13:82: b2:47:f5:08:88:70:e7:67:a2:a0:76:de:07:03:ff: f8:8d:b6:f0:d9:fa:b4:f8:c4:29:6b:34:d2:e5:9d: 2c:02:97:2f:8f:f3:39:a0:b1:8f:0b:6d:53:3d:52: 9f:a9:a1:5b:a6:8c:0f:b2:73:dc:50:0a:ea:87:04: 48:cd:63:5e:f1:bf:ed:c4:55:fb:9f:55:9c:5c:17: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F6:03:D7:92:4E:E4:18:81:9D:1B:30:3E:6B:FB:84:10:DB:32:63 X509v3 Authority Key Identifier: keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:5e:1f:54:d6:69:64:59:82:17:40:1b:92:72:b1:63:e3:aa: 79:d2:93:50:fb:1b:ec:61:89:88:74:ec:8b:d3:bc:e3:2f:e1: df:f8:01:74:e4:69:23:01:79:d8:05:0f:7b:1a:43:f1:bd:85: 84:07:02:ef:cd:78:35:5c:0d:97:74:6f:3c:59:44:a8:86:9f: 0e:4b:21:03:83:d0:34:5d:e2:61:10:13:84:bd:d8:73:5b:08: 50:ef:8e:80:14:28:5d:4c:9d:f5:7f:ee:df:5b:27:b2:f4:d3: 8a:09:2e:82:07:2a:e9:54:e7:60:22:b9:99:b4:6d:0e:37:d3: 6b:8e:a9:24:3a:f5:c0:ac:eb:6a:e3:49:2c:37:1a:61:2b:fd: 20:d2:1e:e3:cf:66:da:f0:8c:ec:75:b1:57:3c:f6:97:ea:ae: 63:79:7b:a6:d6:39:1a:0f:66:55:7c:24:f2:04:39:24:9f:c4: 19:89:e5:30:7d:86:c0:15:50:5b:b8:5e:47:85:2d:63:69:43: 71:ba:13:b0:1e:82:6d:af:c4:5d:26:5e:74:75:39:fb:e4:05: 9d:06:7a:80:c0:87:c8:9a:1d:b0:d3:d1:71:47:18:51:3f:16: f2:13:8a:43:04:a2:03:7a:59:10:ec:a1:a1:b4:8e:5a:a6:ae: 1d:c4:44:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3QjExMTAvBgNVBAUTKDQzMkEzNkU2RDU3MDBCMEJDQUNDRTBGNDE1NzZBRTZC MTNDQUQzQzAwHhcNMjUwNTE1MDQwOTA3WhcNMjUwNTIyMDQwOTA3WjAYMRYwFAYD VQQDEw02ODI1NjhlMy04YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZTXvbv6NG+FYmSFWqCTXXv2n57Qp3E2nRbvQzx1/830e7ArrxEFk5wVkzFT TqkldJ/2lKnXZACLPseL4+fQLrB/3DuMs4xu3MZ1sV7FB/UlklFLVWZz1nmcya9v krRr52C7Ls9e0TRyaENAy5jEQI3thUg7IvufRQkCPGBwFGjvYK3D7EjVADmGfEZN ikcecV0WUPH3PW9jGYI/O76AOOk5c4H8e0Gle1jKaBA67r6PE4KyR/UIiHDnZ6Kg dt4HA//4jbbw2fq0+MQpazTS5Z0sApcvj/M5oLGPC21TPVKfqaFbpowPsnPcUArq hwRIzWNe8b/txFX7n1WcXBeJ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj2A9eS TuQYgZ0bMD5r+4QQ2zJjMB8GA1UdIwQYMBaAFEMqNubVcAsLyszg9BV2rmsTytPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdCMS84RkFGMkJERTgy QTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3dkt6T0QwRlhhdWF4UEsw OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5bzI1dFZ3Q3d2S3pPRDBGWGF1YXhQSzA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdCMS84RkFGMkJERTgyQTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3 dkt6T0QwRlhhdWF4UEswOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUXh9U1mlkWYIXQBuScrFj46p50pNQ+xvsYYmIdOyL07zjL+Hf+AF0 5GkjAXnYBQ97GkPxvYWEBwLvzXg1XA2XdG88WUSohp8OSyEDg9A0XeJhEBOEvdhz WwhQ746AFChdTJ31f+7fWyey9NOKCS6CByrpVOdgIrmZtG0ON9NrjqkkOvXArOtq 40ksNxphK/0g0h7jz2ba8IzsdbFXPPaX6q5jeXum1jkaD2ZVfCTyBDkkn8QZieUw fYbAFVBbuF5HhS1jaUNxuhOwHoJtr8RdJl50dTn75AWdBnqAwIfImh2w09FxRxhR PxbyE4pDBKIDelkQ7KGhtI5apq4dxETq -----END CERTIFICATE-----Generated at Sat May 17 01:40:05 2025 by rpki-client