$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: 9sgnJQ73PrqHuD5sulAh3a4zAWYFP7j04Czn7AhZuDc= Subject key identifier: F3:AF:98:95:39:35:6B:A4:6C:91:20:7F:CA:B1:E4:4F:EF:30:3B:24 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 021E Signing time: Sun 11 May 2025 01:32:45 +0000 Manifest this update: Sun 11 May 2025 01:32:44 +0000 Manifest next update: Sun 18 May 2025 01:32:44 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: Co05eYo1wBdOuZTbnP41VStbZrNydVYEdEkORv+aIx8=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: IN+H6LUETq8W/dLs0PZX77bed7F0mQsx+AWJPeSHLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: May 11 01:32:44 2025 GMT Not After : May 18 01:32:44 2025 GMT Subject: CN=681ffe3c-f062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:61:25:2f:9d:be:ca:53:95:43:dc:14:73: 1f:2f:7c:48:78:a7:68:14:d4:a6:a0:1a:d2:de:c4: 67:b4:e2:0c:d3:be:43:34:2f:b0:9c:13:b6:39:da: b1:13:07:96:31:a4:a0:b9:c2:8e:f1:d9:0e:68:77: da:70:f1:83:0f:db:97:d9:f1:f2:b5:71:2f:2e:89: 36:49:24:75:77:85:c2:32:73:76:68:11:e3:e1:69: 28:cd:fc:34:f6:c1:40:42:53:99:de:c1:c1:26:89: df:4e:84:f4:56:0d:51:b5:8e:96:7d:71:42:f8:91: fa:cc:83:17:2e:b3:fa:48:cd:04:cc:e3:2f:59:e3: d6:76:a2:37:d2:79:3d:0c:33:ec:16:1e:9a:ce:a1: ea:b0:b6:0d:1a:2f:5d:aa:4d:1e:33:06:e2:17:b4: 21:f6:6e:12:53:8b:80:b8:0d:be:c1:bd:94:9a:70: 06:2b:29:2f:0e:67:15:60:2a:8f:38:5a:fa:fe:5c: b1:ce:85:64:d1:30:99:5b:72:af:41:c6:f7:1e:39: 70:cc:57:37:98:30:76:68:73:3d:bc:99:55:44:ff: 8a:3c:ce:f5:be:66:9b:88:06:02:d5:44:53:41:77: 24:c8:30:95:6f:fd:8a:71:94:7b:f2:b9:51:37:55: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:98:95:39:35:6B:A4:6C:91:20:7F:CA:B1:E4:4F:EF:30:3B:24 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a3:45:c7:ea:b0:46:1b:fa:b1:97:45:1a:4b:6b:62:73:b0: 5a:72:2a:ed:ff:bc:62:bd:cd:2d:cd:09:49:ea:29:f9:2e:22: 3f:4b:58:bd:30:16:a4:13:63:11:cc:15:46:87:e9:da:f2:27: d8:bb:32:b7:fa:d8:ec:54:09:af:e7:1d:54:c4:4f:f0:0d:2f: c8:05:5c:9c:8d:5d:f6:cb:aa:74:5a:02:d6:5b:5f:d6:35:93: fd:cb:d8:17:f2:a5:f3:23:88:8d:11:66:36:27:23:3c:f6:9f: cf:5f:bb:24:c8:3b:2c:99:01:99:0f:b7:44:d2:16:31:60:97: 79:d8:ce:55:35:14:f7:3e:5c:55:68:37:00:27:94:20:35:0d: b7:b9:7e:40:08:b9:f9:fd:e3:ec:83:04:55:56:54:e3:3c:22: fd:c4:1d:95:11:88:f5:5b:07:4b:4f:eb:e2:33:3f:e1:d8:17: ef:f7:17:f2:18:5a:66:4c:de:7c:38:f2:46:62:5b:31:18:12: 02:bb:89:93:85:d8:0e:c5:fe:e8:b8:86:f3:5f:ba:1f:be:88: eb:d4:4d:4d:21:04:d9:ed:bb:a2:04:79:60:e1:b5:3a:1b:2e: b6:1f:48:f2:be:9c:9e:ab:fb:4a:9c:5e:08:0f:ad:81:0b:88: 56:cd:ea:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwNTExMDEzMjQ0WhcNMjUwNTE4MDEzMjQ0WjAYMRYwFAYD VQQDEw02ODFmZmUzYy1mMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPdhJS+dvspTlUPcFHMfL3xIeKdoFNSmoBrS3sRntOIM075DNC+wnBO2Odqx EweWMaSgucKO8dkOaHfacPGDD9uX2fHytXEvLok2SSR1d4XCMnN2aBHj4Wkozfw0 9sFAQlOZ3sHBJonfToT0Vg1RtY6WfXFC+JH6zIMXLrP6SM0EzOMvWePWdqI30nk9 DDPsFh6azqHqsLYNGi9dqk0eMwbiF7Qh9m4SU4uAuA2+wb2UmnAGKykvDmcVYCqP OFr6/lyxzoVk0TCZW3KvQcb3HjlwzFc3mDB2aHM9vJlVRP+KPM71vmabiAYC1URT QXckyDCVb/2KcZR78rlRN1WqUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOvmJU5 NWukbJEgf8qx5E/vMDskMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/o0XH6rBGG/qxl0UaS2tic7Bacirt/7xivc0tzQlJ6in5LiI/S1i9 MBakE2MRzBVGh+na8ifYuzK3+tjsVAmv5x1UxE/wDS/IBVycjV32y6p0WgLWW1/W NZP9y9gX8qXzI4iNEWY2JyM89p/PX7skyDssmQGZD7dE0hYxYJd52M5VNRT3PlxV aDcAJ5QgNQ23uX5ACLn5/ePsgwRVVlTjPCL9xB2VEYj1WwdLT+viMz/h2Bfv9xfy GFpmTN58OPJGYlsxGBICu4mThdgOxf7ouIbzX7ofvojr1E1NIQTZ7buiBHlg4bU6 Gy62H0jyvpyeq/tKnF4ID62BC4hWzeqk -----END CERTIFICATE-----Generated at Mon May 12 22:47:32 2025 by rpki-client