$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json) Hash identifier: N4x+wnUe6iIDFObjJeJUh44y5MAgq7RmC90XvyiunCk= Subject key identifier: DA:62:F7:23:E8:BF:EC:78:E8:C5:91:6D:6F:F0:39:05:C6:00:F1:AE Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft Manifest number: 0245 Signing time: Tue 01 Jul 2025 02:33:45 +0000 Manifest this update: Tue 01 Jul 2025 02:33:44 +0000 Manifest next update: Tue 08 Jul 2025 02:33:44 +0000 Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: 0YpscBkEBCg2IBIe5fijzNFiNPIYoDU0h8Y7KEi8MBA=) 2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: DvV5HozP+sR1ACB5NUpTfiC/G52OiXFRlLclsmTMjHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Validity Not Before: Jul 1 02:33:44 2025 GMT Not After : Jul 8 02:33:44 2025 GMT Subject: CN=68634909-2df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:ba:20:3f:86:24:d7:48:64:11:56:41:c1: 08:01:83:c7:78:6a:55:71:0a:a0:09:5d:bd:14:67: 64:df:67:21:57:6b:7a:7e:a3:42:d7:df:9e:68:d2: 4f:30:6e:81:44:34:a9:98:73:f9:2b:1f:11:7d:f5: 78:74:46:e7:b1:63:ff:be:9a:c4:ba:06:cf:b9:2d: bc:b6:09:71:f3:b3:0c:c9:f8:5f:ed:c4:45:60:f9: 1a:a4:4c:72:a6:ac:20:2e:23:ed:5d:b8:12:70:ee: ed:3b:a1:ee:0c:d2:26:0e:4e:48:96:9c:8f:ab:8e: 2a:80:df:0e:c8:e5:6b:a2:3f:3d:66:9f:13:60:f7: 9a:47:d6:51:4f:ad:af:55:46:34:3b:34:1f:38:c2: 04:d0:7c:4e:d7:2a:47:e6:c6:37:e5:5c:7f:df:9a: 3e:1e:6a:20:d3:18:eb:76:20:f4:0c:84:78:dd:5e: d7:aa:42:b4:15:a0:3e:63:9c:93:fe:c3:bf:29:ce: 31:6d:f0:6a:f9:72:af:8c:f9:3b:07:ab:fd:7b:a1: 6e:2f:67:33:44:f7:51:34:10:28:9c:57:98:a5:05: fa:47:7d:61:9d:85:be:d2:d4:db:1a:53:e2:b1:62: ce:df:45:40:ab:c0:c4:63:5a:e2:a9:af:ce:f8:3d: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:62:F7:23:E8:BF:EC:78:E8:C5:91:6D:6F:F0:39:05:C6:00:F1:AE X509v3 Authority Key Identifier: keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:52:62:95:6d:7b:6e:2b:aa:ea:1f:11:b0:f6:32:bd:5f:b7: 77:f5:11:d9:97:83:83:b3:91:7c:2b:23:8a:73:5a:16:3f:cb: f4:c7:1d:d9:77:52:80:84:f5:d1:9e:94:b2:74:38:f8:e4:9f: 16:0c:88:3a:9b:2c:70:6b:6e:ce:51:70:55:94:39:27:18:31: d5:0b:cc:cc:7b:06:2a:82:7f:07:48:b2:6c:83:2a:b8:65:98: 6e:c0:b0:28:78:ce:2c:3e:2b:6d:d0:8b:57:09:22:1d:f0:5f: a0:a1:af:30:51:66:52:56:b4:28:a8:44:03:3d:1e:52:11:89: 1c:1a:22:45:7d:f2:ee:dd:ed:87:ed:72:36:60:4f:1c:f0:b1: 7a:80:fb:64:2b:80:77:12:2e:f3:b1:85:d9:2b:6e:a2:23:5a: 15:1a:fd:6c:49:2e:9f:0d:1e:2d:f3:b4:7c:39:0c:7c:b1:4b: c2:57:10:02:2c:a6:08:af:ad:dc:c7:61:72:56:9d:2e:f1:d4: 80:73:7f:03:e1:e9:75:6c:10:83:b7:2e:ef:ab:19:3e:60:0a: 9c:dc:39:1c:97:a5:04:4d:be:dd:f4:16:d9:16:d3:90:05:3b: 80:1f:bc:cc:d5:7c:9e:35:be:20:30:3b:ab:1f:c9:51:86:43: d1:f8:a6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3RjkxMTAvBgNVBAUTKEFBNTc5MEIwRjdENzYyQkU5MzJCOURDNjExQjdENjlC OTA2ODVBNEUwHhcNMjUwNzAxMDIzMzQ0WhcNMjUwNzA4MDIzMzQ0WjAYMRYwFAYD VQQDEw02ODYzNDkwOS0yZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtle6ID+GJNdIZBFWQcEIAYPHeGpVcQqgCV29FGdk32chV2t6fqNC19+eaNJP MG6BRDSpmHP5Kx8RffV4dEbnsWP/vprEugbPuS28tglx87MMyfhf7cRFYPkapExy pqwgLiPtXbgScO7tO6HuDNImDk5IlpyPq44qgN8OyOVroj89Zp8TYPeaR9ZRT62v VUY0OzQfOMIE0HxO1ypH5sY35Vx/35o+Hmog0xjrdiD0DIR43V7XqkK0FaA+Y5yT /sO/Kc4xbfBq+XKvjPk7B6v9e6FuL2czRPdRNBAonFeYpQX6R31hnYW+0tTbGlPi sWLO30VAq8DEY1riqa/O+D3BjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpi9yPo v+x46MWRbW/wOQXGAPGuMB8GA1UdIwQYMBaAFKpXkLD312K+kyudxhG31puQaFpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdGOS8yQUVDRTY2QTI3 QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFlyNlRLNTNHRWJmV201Qm9X azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FsZVFzUGZYWXI2VEs1M0dFYmZXbTVCb1drNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdGOS8yQUVDRTY2QTI3QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFly NlRLNTNHRWJmV201Qm9XazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDUmKVbXtuK6rqHxGw9jK9X7d39RHZl4ODs5F8KyOKc1oWP8v0xx3Z d1KAhPXRnpSydDj45J8WDIg6myxwa27OUXBVlDknGDHVC8zMewYqgn8HSLJsgyq4 ZZhuwLAoeM4sPitt0ItXCSId8F+goa8wUWZSVrQoqEQDPR5SEYkcGiJFffLu3e2H 7XI2YE8c8LF6gPtkK4B3Ei7zsYXZK26iI1oVGv1sSS6fDR4t87R8OQx8sUvCVxAC LKYIr63cx2FyVp0u8dSAc38D4el1bBCDty7vqxk+YAqc3Dkcl6UETb7d9BbZFtOQ BTuAH7zM1XyeNb4gMDurH8lRhkPR+Kb0 -----END CERTIFICATE-----Generated at Tue Jul 1 21:04:04 2025 by rpki-client