$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: Fh5vwhCji4FVU0XbFcXzTvgpaz2VENAx4Hkhch/QYAo= Subject key identifier: 4A:7D:B7:5A:E5:29:0D:95:9F:48:9D:F5:A0:AC:50:AC:CB:41:E0:8A Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0216 Signing time: Mon 05 May 2025 01:33:12 +0000 Manifest this update: Mon 05 May 2025 01:33:12 +0000 Manifest next update: Mon 12 May 2025 01:33:12 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: x7SCNTHeckvi3LE35QkubrPJVWZLrn1XEBiJSroy2po=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: MlSWr+baoX0iIeudBnt/7RnQIgEalzKtR7VxANOwdB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: May 5 01:33:12 2025 GMT Not After : May 12 01:33:12 2025 GMT Subject: CN=68181558-8d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:71:18:2f:3f:50:67:04:ce:dd:d5:81:4a: 76:a8:bb:b1:b3:c0:1a:66:a4:b2:b5:59:2d:90:22: 55:5f:51:ad:21:d1:59:34:5e:e8:6a:b0:48:40:49: b5:68:e6:c7:e9:c9:81:33:f5:c3:b5:8b:3f:c0:95: d5:a8:79:dd:b6:68:a0:b5:b8:63:b2:31:4b:75:b4: 27:e4:24:98:f7:16:5b:9f:5e:07:fe:e6:8d:b1:87: 98:d4:39:eb:92:3b:12:0b:f3:e9:e8:bd:34:fe:73: 51:33:3b:bd:d4:ce:c0:52:a4:4f:28:50:6a:50:5f: a7:f1:77:58:7d:8d:55:45:3a:e3:b1:bd:0f:1a:64: cc:65:31:3c:d4:57:ca:ec:aa:1d:27:7c:af:6c:3e: 2a:fd:aa:bb:3e:b7:c8:a3:35:0d:18:bb:72:b5:5a: 52:c9:73:40:63:8d:0b:68:89:36:e3:3a:dc:fd:75: 5f:20:ed:8b:bf:6f:b5:2c:b8:5e:30:e6:1c:f1:19: af:07:27:6b:ea:c7:14:ad:e9:48:f7:6a:46:35:55: 2d:e9:99:20:08:0b:d7:3e:23:62:9c:34:2b:a0:cf: 9f:2b:bb:f3:fd:4a:83:db:4e:64:da:38:89:9a:e0: 31:65:f1:0c:95:1f:ae:6a:02:9e:bf:ab:af:c9:ff: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7D:B7:5A:E5:29:0D:95:9F:48:9D:F5:A0:AC:50:AC:CB:41:E0:8A X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:7f:d9:d7:47:35:8a:2a:80:0d:e4:ec:95:7f:1a:5c:b4:bb: b5:48:27:d3:11:e1:8c:6c:1f:e9:21:c4:b7:43:c1:50:77:03: c0:f5:d1:a8:dc:06:e0:47:f9:4e:9c:b2:cf:b3:60:3e:e9:a7: b6:26:e4:9b:ad:a2:b7:fc:dd:43:5f:80:a6:da:e7:67:e2:42: 9a:19:e1:39:2a:bf:5d:92:04:79:a1:4e:46:99:b4:c6:3c:2b: f9:5e:d2:fc:28:db:52:44:85:fc:0f:38:9b:ee:61:2d:77:7c: e8:d7:f5:6d:af:7d:b6:b0:e3:79:60:8c:fa:f5:bf:40:ec:77: 3b:d1:36:14:f5:2a:09:73:3c:d1:4b:c8:2d:fb:42:15:f0:1a: c3:1b:6f:97:bd:17:01:22:80:10:6d:e4:c6:4d:94:bf:1f:65: f3:cd:c2:d5:b4:1f:db:a1:ca:40:11:e2:b7:97:7d:ea:2e:e5: cd:9f:9a:45:70:39:04:c6:45:65:30:34:8b:01:fc:c2:d9:22: ef:94:ff:61:e2:7f:1a:04:64:4e:d1:ff:08:0f:cf:9b:cd:68: 13:bb:d0:16:55:00:14:33:2d:f7:03:ff:94:c1:3e:8a:0b:0b: 05:a3:15:79:f1:39:c2:6f:6c:2b:bf:fa:85:68:ce:3a:b6:bf: 73:36:e0:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUwNTA1MDEzMzEyWhcNMjUwNTEyMDEzMzEyWjAYMRYwFAYD VQQDEw02ODE4MTU1OC04ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJZxGC8/UGcEzt3VgUp2qLuxs8AaZqSytVktkCJVX1GtIdFZNF7oarBIQEm1 aObH6cmBM/XDtYs/wJXVqHndtmigtbhjsjFLdbQn5CSY9xZbn14H/uaNsYeY1Dnr kjsSC/Pp6L00/nNRMzu91M7AUqRPKFBqUF+n8XdYfY1VRTrjsb0PGmTMZTE81FfK 7KodJ3yvbD4q/aq7PrfIozUNGLtytVpSyXNAY40LaIk24zrc/XVfIO2Lv2+1LLhe MOYc8RmvBydr6scUrelI92pGNVUt6ZkgCAvXPiNinDQroM+fK7vz/UqD205k2jiJ muAxZfEMlR+uagKev6uvyf9AywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp9t1rl KQ2Vn0id9aCsUKzLQeCKMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmf9nXRzWKKoAN5OyVfxpctLu1SCfTEeGMbB/pIcS3Q8FQdwPA9dGo 3AbgR/lOnLLPs2A+6ae2JuSbraK3/N1DX4Cm2udn4kKaGeE5Kr9dkgR5oU5GmbTG PCv5XtL8KNtSRIX8Dzib7mEtd3zo1/Vtr322sON5YIz69b9A7Hc70TYU9SoJczzR S8gt+0IV8BrDG2+XvRcBIoAQbeTGTZS/H2XzzcLVtB/bocpAEeK3l33qLuXNn5pF cDkExkVlMDSLAfzC2SLvlP9h4n8aBGRO0f8ID8+bzWgTu9AWVQAUMy33A/+UwT6K CwsFoxV58TnCb2wrv/qFaM46tr9zNuBE -----END CERTIFICATE-----Generated at Mon May 5 23:04:38 2025 by rpki-client