$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: OACOGZSvr7yZoE+zDKW7H7semk9z0y8UQxSiKpnNwS4= Subject key identifier: E5:58:0B:6D:C2:2C:B5:DF:11:F3:6C:47:65:03:9D:0B:24:35:9F:90 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 30 Signing time: Sun 11 May 2025 06:23:12 +0000 Manifest this update: Sun 11 May 2025 06:23:12 +0000 Manifest next update: Sun 18 May 2025 06:23:12 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: Zo4zW1fNJE8ujThbXfJrf2vOCSmRwpzNle90G7cMwxU=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: May 11 06:23:12 2025 GMT Not After : May 18 06:23:12 2025 GMT Subject: CN=68204250-4b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:16:c3:02:95:71:ff:8a:08:f7:8b:b5:7f: bc:09:82:20:71:32:fd:09:45:89:0c:82:c0:9a:0c: 81:9d:8a:33:43:6e:78:5a:2d:10:ea:e6:5d:b4:ef: 5e:0a:c2:a4:bc:47:94:42:07:c6:a7:cc:cf:ed:5c: 8d:62:54:d9:2d:4a:8c:63:39:9a:47:ea:31:d6:a4: ad:64:40:ed:7d:0a:4d:92:3e:f0:da:17:64:26:f7: 5e:00:2b:bf:c8:30:4a:d2:54:38:a6:d2:f0:e7:3d: 33:14:b4:4a:56:00:d7:de:31:bd:b6:16:7d:0b:7d: 41:0a:04:37:8c:25:40:ca:81:42:09:46:49:76:45: 21:8d:9e:46:7f:17:eb:cc:93:3e:bb:2a:7d:55:b5: da:98:55:b2:77:f7:39:de:d5:06:ab:70:e6:0a:e2: 36:d0:9a:07:6c:fb:96:88:f0:a4:b7:f4:32:35:15: 45:17:af:90:1b:ba:ee:d8:c6:03:54:0c:87:4f:57: 50:32:84:0c:bf:72:7c:28:73:58:f6:92:eb:0a:e0: 3e:c0:bc:fe:ed:ce:24:24:b3:3d:9a:34:2a:a0:72: 5d:ea:8a:85:44:05:57:5e:e9:80:3f:58:08:46:2f: fe:ee:b8:d8:7f:51:23:5f:6e:32:76:f8:b1:51:ff: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:0B:6D:C2:2C:B5:DF:11:F3:6C:47:65:03:9D:0B:24:35:9F:90 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:32:43:ce:83:16:87:14:fb:2b:7c:4f:61:ea:a0:5f:31:7a: 85:c2:8c:82:05:f7:62:64:94:e5:45:aa:41:05:b6:0b:ce:11: c7:c9:50:9e:51:13:ae:8e:64:0b:9a:2b:e3:7c:44:82:67:77: 24:07:d7:88:fd:b2:9c:95:f4:8f:ab:b6:57:2a:7f:ba:03:44: 92:85:07:73:d0:4d:01:3c:aa:6f:82:33:3a:79:b8:38:cf:94: 17:d2:52:3b:c2:06:75:c0:66:e4:d8:13:27:83:0f:b1:c9:eb: 11:f2:c5:23:55:64:92:83:bf:5a:58:ba:34:26:fb:bd:2d:14: 14:d7:b2:35:88:3e:e6:79:22:8d:9a:63:9f:46:03:fe:84:94: 91:cc:0c:e3:d2:3c:1f:f6:aa:76:b7:14:eb:e6:23:07:96:a2: 6f:f5:fd:65:75:1f:4a:6b:61:99:13:27:7d:e7:12:2e:de:47: 9b:53:a9:44:f4:25:6a:07:7f:1d:4f:a2:8d:8d:a4:95:b0:d4: 43:9a:ab:cf:9f:e5:97:cd:0f:19:f1:91:48:bd:3b:f9:61:0c: be:51:07:63:da:4c:08:33:1e:16:c5:de:6d:45:f9:03:e0:36: 67:e5:f3:32:e5:51:0c:f6:e8:6f:0e:af:ac:2b:58:c6:40:c4: 42:9d:f5:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoMDkwNjc4ODJDREMwMjAzNDkxNjFFMDkzQkYzNDczMUIz RjgyMkJENzAeFw0yNTA1MTEwNjIzMTJaFw0yNTA1MTgwNjIzMTJaMBgxFjAUBgNV BAMTDTY4MjA0MjUwLTRiMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/gBbDApVx/4oI94u1f7wJgiBxMv0JRYkMgsCaDIGdijNDbnhaLRDq5l20714K wqS8R5RCB8anzM/tXI1iVNktSoxjOZpH6jHWpK1kQO19Ck2SPvDaF2Qm914AK7/I MErSVDim0vDnPTMUtEpWANfeMb22Fn0LfUEKBDeMJUDKgUIJRkl2RSGNnkZ/F+vM kz67Kn1VtdqYVbJ39zne1QarcOYK4jbQmgds+5aI8KS39DI1FUUXr5Abuu7YxgNU DIdPV1AyhAy/cnwoc1j2kusK4D7AvP7tziQksz2aNCqgcl3qioVEBVde6YA/WAhG L/7uuNh/USNfbjJ2+LFR/98NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5VgLbcIs td8R82xHZQOdCyQ1n5AwHwYDVR0jBBgwFoAUCQZ4gs3AIDSRYeCTvzRzGz+CK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0YzRDIyQzJDRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1FaNGdzM0FJRFNSWWVDVHZ6UnpHei1DSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0YzRDIyQzJDRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURT UlllQ1R2elJ6R3otQ0s5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUyQ86DFocU+yt8T2HqoF8xeoXCjIIF92JklOVFqkEFtgvOEcfJUJ5R E66OZAuaK+N8RIJndyQH14j9spyV9I+rtlcqf7oDRJKFB3PQTQE8qm+CMzp5uDjP lBfSUjvCBnXAZuTYEyeDD7HJ6xHyxSNVZJKDv1pYujQm+70tFBTXsjWIPuZ5Io2a Y59GA/6ElJHMDOPSPB/2qna3FOvmIweWom/1/WV1H0prYZkTJ33nEi7eR5tTqUT0 JWoHfx1Poo2NpJWw1EOaq8+f5ZfNDxnxkUi9O/lhDL5RB2PaTAgzHhbF3m1F+QPg Nmfl8zLlUQz26G8Or6wrWMZAxEKd9Ug= -----END CERTIFICATE-----Generated at Mon May 12 16:32:23 2025 by rpki-client