$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: 9bVpD8SKYvYtPinU9nPL8dDgwgKncQDwlVdQy6lo5Ik= Subject key identifier: 48:4B:65:7E:5E:F0:94:41:8E:17:23:0B:9B:4D:8C:C1:9E:AC:C5:88 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C11 Signing time: Mon 12 May 2025 18:31:47 +0000 Manifest this update: Mon 12 May 2025 18:31:46 +0000 Manifest next update: Mon 19 May 2025 18:31:46 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: Cy4GZUEfbgZEU7AcWt83DlS06EFw2uQQMvOHHb6EpBY=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: OPUUUSp5hb82PWfJ3qDCUj2m9VDIT8DwMp28XglHALE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: May 12 18:31:46 2025 GMT Not After : May 19 18:31:46 2025 GMT Subject: CN=68223e93-acdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:28:2b:3d:ed:bb:5d:9c:c4:79:1f:43:51: 43:8c:f6:8f:e9:b6:eb:5c:aa:67:f6:41:11:1d:87: c6:20:9b:44:75:cf:1b:51:a6:c3:ef:2f:25:96:be: 1b:72:1a:af:62:db:a9:5d:8a:b4:5c:3e:bf:d6:08: 42:b3:6b:c8:c8:85:2d:65:34:cd:62:7f:bb:09:96: 76:de:b3:3e:66:f3:13:ed:80:61:f9:1a:bf:98:6d: ed:1e:11:21:35:6a:9d:39:4f:8b:2d:85:f3:01:d5: d1:d7:3e:89:ca:70:3a:1c:84:2d:c9:96:2d:94:4a: 84:64:ec:44:c1:f1:c7:b5:c6:ae:80:f9:ce:aa:95: 63:08:40:bf:65:2e:7a:b3:c3:e1:54:78:78:8b:5a: 68:a2:1f:a8:7a:fd:ee:6c:9f:97:3d:82:be:76:aa: 34:6b:42:f0:50:97:b5:7f:ca:8c:68:ad:94:7d:3f: b5:45:13:2a:34:5b:79:5d:c6:a9:75:bd:2e:85:c4: 4d:82:21:35:c4:c8:6e:a1:e2:85:c9:17:0d:bc:5e: 00:2d:96:eb:4d:f6:23:05:75:9d:f7:70:88:26:af: ad:d6:2f:46:02:76:55:da:8c:b8:38:59:2d:cb:90: 21:d7:63:88:64:0f:dd:3c:16:75:ad:04:08:19:dd: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:65:7E:5E:F0:94:41:8E:17:23:0B:9B:4D:8C:C1:9E:AC:C5:88 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:69:21:c8:e7:95:e1:a5:5b:a8:b9:5b:e2:42:71:6d:24:6c: c1:bc:a9:ba:6d:fd:98:fc:fd:7a:e7:da:b9:f0:f0:44:2d:d1: f0:83:8a:be:18:b1:a1:c4:a2:5e:5d:b7:54:c0:c9:fe:62:c6: 22:f6:12:32:cc:ad:5f:a9:1c:87:18:5e:3f:de:3c:0a:30:cf: ff:4c:4a:53:76:8c:ba:95:13:b3:f2:dd:c6:22:41:90:82:28: 75:c4:1c:5a:46:aa:8b:c2:2a:15:1d:14:b4:54:4c:98:b4:aa: 3c:09:c8:1e:9d:23:88:6a:3d:98:36:ac:32:43:17:34:a1:a3: 35:cf:7d:33:4f:72:e5:a2:7f:0b:9c:eb:22:6d:0b:6c:78:39: aa:7b:53:67:da:d0:5e:1f:61:97:e1:d7:31:fe:bc:16:69:0e: 7a:e5:70:54:5f:39:7f:e4:8d:69:35:79:20:59:25:6e:7d:6b: 4c:85:77:b1:f0:a2:62:37:be:8c:e8:04:54:07:50:ce:05:3f: db:5c:d3:44:9c:66:53:8e:24:2c:f0:86:52:f2:11:a1:96:96: 1e:bc:a2:fe:f7:c0:09:42:5b:8a:5d:6d:da:2b:b3:8d:7e:7b: ba:5a:ba:2d:42:d2:45:33:1a:0a:1d:02:e4:bf:2d:f8:da:e0: 4b:ce:3d:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwNTEyMTgzMTQ2WhcNMjUwNTE5MTgzMTQ2WjAYMRYwFAYD VQQDEw02ODIyM2U5My1hY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgkoKz3tu12cxHkfQ1FDjPaP6bbrXKpn9kERHYfGIJtEdc8bUabD7y8llr4b chqvYtupXYq0XD6/1ghCs2vIyIUtZTTNYn+7CZZ23rM+ZvMT7YBh+Rq/mG3tHhEh NWqdOU+LLYXzAdXR1z6JynA6HIQtyZYtlEqEZOxEwfHHtcaugPnOqpVjCEC/ZS56 s8PhVHh4i1pooh+oev3ubJ+XPYK+dqo0a0LwUJe1f8qMaK2UfT+1RRMqNFt5Xcap db0uhcRNgiE1xMhuoeKFyRcNvF4ALZbrTfYjBXWd93CIJq+t1i9GAnZV2oy4OFkt y5Ah12OIZA/dPBZ1rQQIGd3gbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhLZX5e 8JRBjhcjC5tNjMGerMWIMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+aSHI55XhpVuouVviQnFtJGzBvKm6bf2Y/P1659q58PBELdHwg4q+ GLGhxKJeXbdUwMn+YsYi9hIyzK1fqRyHGF4/3jwKMM//TEpTdoy6lROz8t3GIkGQ gih1xBxaRqqLwioVHRS0VEyYtKo8CcgenSOIaj2YNqwyQxc0oaM1z30zT3Llon8L nOsibQtseDmqe1Nn2tBeH2GX4dcx/rwWaQ565XBUXzl/5I1pNXkgWSVufWtMhXex 8KJiN76M6ARUB1DOBT/bXNNEnGZTjiQs8IZS8hGhlpYevKL+98AJQluKXW3aK7ON fnu6WrotQtJFMxoKHQLkvy342uBLzj3S -----END CERTIFICATE-----Generated at Tue May 13 19:34:51 2025 by rpki-client