$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: 3rltKMYfwkFToX60LvaMdQ7Z2+nLKLK0ov2DIaf+FvQ= Subject key identifier: 8E:5D:27:DA:80:07:EF:E9:A8:3C:12:F4:CD:33:67:38:7F:E0:E2:A2 Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 0995 Signing time: Wed 14 May 2025 20:13:36 +0000 Manifest this update: Wed 14 May 2025 20:13:36 +0000 Manifest next update: Wed 21 May 2025 20:13:36 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: jvL+4aQtyra+27IOmNPhkpZW9qlG0BNVSNkjfOK6Cxc=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: tLBsV4g2bMzhVFiX/6V4C27n2kArFIEOkUcBuZutWVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: May 14 20:13:36 2025 GMT Not After : May 21 20:13:36 2025 GMT Subject: CN=6824f970-e350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:cf:c5:d6:f9:ce:21:eb:8c:63:74:e1:8d: d9:46:a6:e6:e0:78:61:07:6a:0d:7b:55:ad:5d:8b: 72:35:98:75:65:32:32:51:c0:82:27:94:7b:a1:ac: 6e:59:38:24:94:03:62:0a:ae:d0:8d:e7:78:d7:6b: d3:14:75:ce:04:df:e9:f7:e7:45:df:e3:9d:ab:2c: c2:e3:04:d7:f4:2d:ec:48:0e:91:90:d7:45:0c:74: 72:2a:d3:bd:7a:e1:3c:18:b0:63:08:9e:50:3e:1e: d5:8f:da:7f:b6:31:72:c8:72:16:6a:30:2f:a3:c4: 55:8f:2f:23:81:3b:5e:ab:81:26:47:38:a5:37:e9: c7:46:25:7b:0f:d4:14:59:a6:36:0c:05:50:dd:f3: 4e:0a:f6:be:80:05:09:9f:25:4d:a8:32:7a:b0:08: 9e:12:cd:eb:a7:b5:99:ca:09:08:cb:e8:f3:d1:fd: 44:4f:08:9e:c9:39:49:f3:79:f4:e1:de:eb:b0:95: cc:00:79:db:0d:9e:d4:97:42:34:bf:2f:fd:ed:42: 30:b8:66:0b:fa:2c:d4:bf:d0:f6:07:be:f9:97:be: 3a:57:8c:1e:42:be:67:09:9a:a0:3f:bc:c3:b9:a7: df:95:71:21:39:01:a3:13:6b:59:d6:f2:28:c6:33: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:27:DA:80:07:EF:E9:A8:3C:12:F4:CD:33:67:38:7F:E0:E2:A2 X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:1c:eb:05:d7:0e:4e:af:d1:d7:0c:5a:6a:49:06:ce:5c: b0:8e:78:f3:c1:b3:93:3e:be:f0:45:e0:73:ba:92:8b:02:5c: 04:c0:e6:24:2c:4c:25:79:94:41:2a:99:19:27:3d:1a:57:2d: 46:49:16:d4:a8:ea:35:7f:1a:2c:64:ab:ed:8c:5f:7f:35:ff: 35:cb:38:0c:2c:28:76:ce:e2:11:e3:d2:fd:ee:6c:d6:45:e2: ee:4c:6f:af:78:20:db:d3:41:5f:fa:5a:82:ae:3e:84:dc:3c: e0:cc:fd:1f:ae:79:aa:81:7c:1d:3f:91:28:53:d0:34:4c:e4: a8:0a:2c:0d:02:ac:3e:bb:d3:26:b8:ff:3e:77:82:7d:0e:0f: ac:36:6e:0b:a8:b5:f6:5d:f2:ff:e7:a7:e2:b1:39:91:53:40: f0:4a:75:45:cd:ba:69:1d:d3:63:52:84:9e:46:bb:58:64:24: b6:84:55:ca:71:fc:e9:50:eb:d6:55:48:27:45:d3:cb:8b:cd: 26:eb:82:38:1c:9e:36:05:b7:31:6c:2c:30:f7:71:fe:cd:b4: 0c:35:49:fc:a6:fb:6c:c1:76:ae:cb:77:18:5a:e9:17:7d:7d: 96:32:7c:68:b4:bb:0a:c1:bf:14:0e:10:c9:f2:c0:7c:23:d1: 65:35:de:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjUwNTE0MjAxMzM2WhcNMjUwNTIxMjAxMzM2WjAYMRYwFAYD VQQDEw02ODI0Zjk3MC1lMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7HPxdb5ziHrjGN04Y3ZRqbm4HhhB2oNe1WtXYtyNZh1ZTIyUcCCJ5R7oaxu WTgklANiCq7Qjed412vTFHXOBN/p9+dF3+OdqyzC4wTX9C3sSA6RkNdFDHRyKtO9 euE8GLBjCJ5QPh7Vj9p/tjFyyHIWajAvo8RVjy8jgTteq4EmRzilN+nHRiV7D9QU WaY2DAVQ3fNOCva+gAUJnyVNqDJ6sAieEs3rp7WZygkIy+jz0f1ETwieyTlJ83n0 4d7rsJXMAHnbDZ7Ul0I0vy/97UIwuGYL+izUv9D2B775l746V4weQr5nCZqgP7zD uafflXEhOQGjE2tZ1vIoxjNY+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5dJ9qA B+/pqDwS9M0zZzh/4OKiMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKiRzrBdcOTq/R1wxaakkGzlywjnjzwbOTPr7wReBzupKLAlwEwOYk LEwleZRBKpkZJz0aVy1GSRbUqOo1fxosZKvtjF9/Nf81yzgMLCh2zuIR49L97mzW ReLuTG+veCDb00Ff+lqCrj6E3DzgzP0frnmqgXwdP5EoU9A0TOSoCiwNAqw+u9Mm uP8+d4J9Dg+sNm4LqLX2XfL/56fisTmRU0DwSnVFzbppHdNjUoSeRrtYZCS2hFXK cfzpUOvWVUgnRdPLi80m64I4HJ42BbcxbCww93H+zbQMNUn8pvtswXauy3cYWukX fX2WMnxotLsKwb8UDhDJ8sB8I9FlNd5N -----END CERTIFICATE-----Generated at Fri May 16 18:56:58 2025 by rpki-client