$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: pOaSquUQ7OBbPKT7bmAoPJNZeOPF1bZaeJpyf0zsII8= Subject key identifier: 92:F1:C0:E9:82:9F:EA:5B:FF:76:3B:A0:BA:D9:91:B6:E5:DE:92:6F Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B53 Signing time: Wed 14 May 2025 19:17:41 +0000 Manifest this update: Wed 14 May 2025 19:17:40 +0000 Manifest next update: Wed 21 May 2025 19:17:40 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: /0JBG66EPzMDkf9wDYKVs0o9VXWL68zNyYHZojTmGy4=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: May 14 19:17:40 2025 GMT Not After : May 21 19:17:40 2025 GMT Subject: CN=6824ec55-67cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:65:dd:0a:8a:5a:bf:4f:7e:fa:82:16:92: 4b:5a:96:8c:b4:23:e6:a9:b7:d3:ed:50:d0:43:7b: e8:3a:d5:df:6a:6e:0c:2d:e7:4e:da:7a:74:1b:5b: 96:f7:6b:ab:37:0b:7a:5c:23:b5:83:d6:0a:44:d8: 85:3d:1e:56:3b:e0:fc:74:fe:57:ee:96:f6:fb:6d: 0a:85:f9:e7:c5:d6:3d:d4:93:f2:91:dc:fd:9e:dd: 65:1b:02:ba:00:8d:23:f3:b7:86:da:e3:f7:7d:84: 09:e4:b3:8a:e4:f5:49:c4:4b:6a:3b:ed:5f:41:a0: f6:d2:4f:6e:48:f0:95:d1:be:0f:3b:de:4c:fc:0f: cb:4c:bf:75:b6:82:01:3a:05:d7:ef:cb:e4:cf:75: dc:62:ee:c8:7c:e6:7b:f8:e4:b3:69:ac:19:c1:a4: 41:0f:da:90:b5:1b:d0:fb:fd:5d:e4:23:ca:a8:78: 93:f4:6e:02:bc:61:6d:4d:19:c7:dd:94:76:72:eb: cd:cf:aa:d5:37:aa:7c:de:9b:2c:2c:2e:e5:0a:08: c8:9f:72:89:4c:da:0c:7c:04:ff:39:5a:40:9a:f5: d7:a5:e9:41:ac:d2:43:7c:a9:20:46:40:47:a6:c8: 7d:2c:e3:55:ee:22:3a:90:69:db:03:9a:29:5d:b6: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F1:C0:E9:82:9F:EA:5B:FF:76:3B:A0:BA:D9:91:B6:E5:DE:92:6F X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ec:1f:74:d7:c8:7d:38:a4:d2:27:e5:f0:7a:50:3c:af:3f: 49:7e:f8:07:c0:f3:c0:5b:42:d9:b2:b0:44:3d:df:90:d7:a9: ef:f7:e9:be:1a:16:03:6d:b2:49:06:41:0b:3a:c9:f6:06:ba: b2:b5:cc:a5:9a:e8:90:91:07:df:ba:ca:1b:d6:d3:61:03:06: 1e:0f:c5:b2:79:f2:d3:d8:af:b1:69:c2:60:3c:65:53:da:ee: 53:aa:8b:47:31:f1:29:13:09:4f:05:71:96:d0:95:36:26:a7: fb:6e:60:b9:22:58:7a:48:67:ed:e0:d7:52:27:b6:44:cc:28: 14:c7:e7:b2:68:0b:fa:bd:5b:33:cf:a9:d7:5f:89:c1:38:22: 36:bd:92:45:d2:50:45:ae:a1:18:9f:57:cd:12:b8:01:e3:6c: ea:6b:38:d8:3f:85:99:02:8d:8e:cc:cb:23:ef:f2:d3:cd:1e: 9e:39:61:3e:29:fa:16:aa:dc:19:72:2c:4a:49:c6:ba:81:75: 09:b3:09:c3:a8:05:bc:d9:69:c0:5d:5d:af:32:93:71:9e:8a: d1:26:21:36:f2:bc:77:8d:88:ff:72:88:c7:7c:0b:cc:98:d9: 96:dd:84:0f:05:9c:34:fc:40:c5:67:d6:b6:14:68:9a:4d:9f: 8f:b3:ae:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwNTE0MTkxNzQwWhcNMjUwNTIxMTkxNzQwWjAYMRYwFAYD VQQDEw02ODI0ZWM1NS02N2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57Bl3QqKWr9PfvqCFpJLWpaMtCPmqbfT7VDQQ3voOtXfam4MLedO2np0G1uW 92urNwt6XCO1g9YKRNiFPR5WO+D8dP5X7pb2+20KhfnnxdY91JPykdz9nt1lGwK6 AI0j87eG2uP3fYQJ5LOK5PVJxEtqO+1fQaD20k9uSPCV0b4PO95M/A/LTL91toIB OgXX78vkz3XcYu7IfOZ7+OSzaawZwaRBD9qQtRvQ+/1d5CPKqHiT9G4CvGFtTRnH 3ZR2cuvNz6rVN6p83pssLC7lCgjIn3KJTNoMfAT/OVpAmvXXpelBrNJDfKkgRkBH psh9LONV7iI6kGnbA5opXbbhEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLxwOmC n+pb/3Y7oLrZkbbl3pJvMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe7B9018h9OKTSJ+XwelA8rz9JfvgHwPPAW0LZsrBEPd+Q16nv9+m+ GhYDbbJJBkELOsn2BrqytcylmuiQkQffusob1tNhAwYeD8WyefLT2K+xacJgPGVT 2u5TqotHMfEpEwlPBXGW0JU2Jqf7bmC5Ilh6SGft4NdSJ7ZEzCgUx+eyaAv6vVsz z6nXX4nBOCI2vZJF0lBFrqEYn1fNErgB42zqazjYP4WZAo2OzMsj7/LTzR6eOWE+ KfoWqtwZcixKSca6gXUJswnDqAW82WnAXV2vMpNxnorRJiE28rx3jYj/cojHfAvM mNmW3YQPBZw0/EDFZ9a2FGiaTZ+Ps671 -----END CERTIFICATE-----Generated at Thu May 15 19:25:36 2025 by rpki-client