$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json) Hash identifier: zPGnQABnWZC2rgFUdltjmvKSrKg2vEwNIQKxnX/WRRo= Subject key identifier: 3F:28:9D:11:BD:19:A0:76:A3:72:4D:DC:D7:8E:0D:66:D0:88:68:56 Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Certificate serial: 0E8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft Manifest number: 0E6B Signing time: Mon 12 May 2025 17:37:54 +0000 Manifest this update: Mon 12 May 2025 17:37:54 +0000 Manifest next update: Mon 19 May 2025 17:37:54 +0000 Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: t0qhtGaKsG/2oKLd96zTa69z60epIV0x333iQ7PvH0A=) 2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=) 3: 42629FDADD9511EEAA0F2324C4F9AE02.roa (hash: +hn7T4kOPQRiT4pAI5U0s2X9XGmZExacuKpk1xJzme8=) 4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=) 5: 34DCFB18C94E11E9A4F6FE21C4F9AE02.roa (hash: PQRWtI7uNa0DrowLXSGG8eKzHjE+mScrhL8bc6GhWo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3725 (0xe8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Validity Not Before: May 12 17:37:54 2025 GMT Not After : May 19 17:37:54 2025 GMT Subject: CN=682231f2-51a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:67:13:7f:7c:a1:f6:59:5c:e4:3a:f5:49: 5d:40:71:4a:76:07:b0:2b:7a:ee:ef:87:9a:b5:85: 35:05:b2:25:ea:32:b0:35:ae:72:13:88:f2:1b:67: 2f:f9:3f:01:e0:f0:37:cc:67:5a:60:b4:b2:37:f0: 22:b2:29:16:fb:18:e9:b1:4a:49:35:1a:8f:06:50: 29:dd:4e:b8:8a:a0:09:a4:1f:74:e1:40:f1:2a:a5: ed:1e:f8:98:24:32:7e:33:bd:9f:ae:66:0b:9b:43: 3f:ba:14:d0:ec:fa:15:3a:a4:e2:37:17:7e:94:0b: f5:09:95:12:fc:ee:85:60:6c:8f:03:53:f0:d4:e5: 9c:da:d5:c7:8a:ff:9c:38:00:8f:76:6a:63:b9:ce: e4:2e:f0:a9:83:96:40:ed:c2:99:c4:fc:22:83:e0: 8f:b6:53:60:20:63:4f:70:60:6c:cc:89:ad:e2:64: 33:6a:f7:b7:33:b3:b8:18:84:e4:e5:63:c2:ff:80: 04:ed:07:88:2e:91:ed:69:a2:7f:45:2f:3a:10:35: c0:62:4a:92:88:e8:c5:f9:e6:7c:77:d8:88:0c:ab: 65:a5:ea:16:78:83:4a:8c:c6:6f:94:f4:b3:30:b3: 96:06:c5:be:34:c7:92:a9:2b:0d:2c:0a:4f:48:e2: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:28:9D:11:BD:19:A0:76:A3:72:4D:DC:D7:8E:0D:66:D0:88:68:56 X509v3 Authority Key Identifier: keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:55:2e:a3:e8:4a:42:f0:a4:a4:1c:70:39:0d:97:93:31:bb: ae:a7:0d:0f:04:26:98:55:58:ff:7d:d7:36:8d:b2:e3:6b:0e: 71:e2:9c:6c:0b:18:48:13:e9:5f:6f:13:86:0b:a1:9f:49:73: d2:57:e7:50:d8:d6:f1:d7:19:3e:1b:0b:1b:99:02:b6:2e:7c: 4d:92:4e:92:30:db:68:44:6b:04:5d:bb:78:f6:11:e2:66:7e: f6:ce:45:92:e4:13:7c:83:80:3d:0c:ff:57:a2:36:22:76:40: e8:e0:f5:19:a7:ce:17:92:52:0e:ad:dc:15:69:26:de:ff:f7: c4:4b:61:bc:5d:ce:91:c2:5c:c3:a4:9c:e0:58:54:f5:3b:62: e5:b8:d7:3f:ed:eb:6c:d0:0c:97:24:56:77:ca:10:d5:01:d9: 63:e3:40:19:1a:77:55:4e:b6:b6:43:a6:2d:50:e5:20:cf:7a: 60:43:e9:7e:f8:1d:47:a1:8c:b9:7f:33:18:d9:23:8d:c8:f7: c8:83:35:d7:e8:5d:ee:66:c6:10:b9:80:05:52:16:48:37:28: 59:de:73:92:1a:af:07:24:1f:0f:37:76:cb:74:70:60:56:64: ab:fd:d3:fe:f9:73:21:b0:89:d0:bb:3d:e7:6c:07:16:44:3a: ad:eb:fe:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyOUYxMTAvBgNVBAUTKEFBODVDQ0QyREQzRTFDMDAzQkY3MkZGNTNFNThDNzIw MEU3Q0YwQTgwHhcNMjUwNTEyMTczNzU0WhcNMjUwNTE5MTczNzU0WjAYMRYwFAYD VQQDEw02ODIyMzFmMi01MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0t1nE398ofZZXOQ69UldQHFKdgewK3ru74eatYU1BbIl6jKwNa5yE4jyG2cv +T8B4PA3zGdaYLSyN/AisikW+xjpsUpJNRqPBlAp3U64iqAJpB904UDxKqXtHviY JDJ+M72frmYLm0M/uhTQ7PoVOqTiNxd+lAv1CZUS/O6FYGyPA1Pw1OWc2tXHiv+c OACPdmpjuc7kLvCpg5ZA7cKZxPwig+CPtlNgIGNPcGBszImt4mQzave3M7O4GITk 5WPC/4AE7QeILpHtaaJ/RS86EDXAYkqSiOjF+eZ8d9iIDKtlpeoWeINKjMZvlPSz MLOWBsW+NMeSqSsNLApPSOL1NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8onRG9 GaB2o3JN3NeODWbQiGhWMB8GA1UdIwQYMBaAFKqFzNLdPhwAO/cv9T5YxyAOfPCo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDI5Ri82OTFGNzRDNDk4 ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhBQTc5eV8xUGxqSElBNTg4 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvWE0wdDAtSEFBNzl5XzFQbGpISUE1ODhLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDI5Ri82OTFGNzRDNDk4ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhB QTc5eV8xUGxqSElBNTg4S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3VS6j6EpC8KSkHHA5DZeTMbuupw0PBCaYVVj/fdc2jbLjaw5x4pxs CxhIE+lfbxOGC6GfSXPSV+dQ2Nbx1xk+GwsbmQK2LnxNkk6SMNtoRGsEXbt49hHi Zn72zkWS5BN8g4A9DP9XojYidkDo4PUZp84XklIOrdwVaSbe//fES2G8Xc6RwlzD pJzgWFT1O2LluNc/7ets0AyXJFZ3yhDVAdlj40AZGndVTra2Q6YtUOUgz3pgQ+l+ +B1HoYy5fzMY2SONyPfIgzXX6F3uZsYQuYAFUhZINyhZ3nOSGq8HJB8PN3bLdHBg VmSr/dP++XMhsInQuz3nbAcWRDqt6/7p -----END CERTIFICATE-----Generated at Wed May 14 01:14:14 2025 by rpki-client