$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft File: QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json) Hash identifier: 5JcWPG8cfpY5WsVDfHGm4XBd9dYA3HjkodP4PJRUwxs= Subject key identifier: 4D:23:94:4B:A3:CB:B6:7A:C9:1E:15:34:7E:4F:37:AA:0E:CB:E0:41 Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft Manifest number: 0C44 Signing time: Mon 12 May 2025 21:23:16 +0000 Manifest this update: Mon 12 May 2025 21:23:15 +0000 Manifest next update: Mon 19 May 2025 21:23:15 +0000 Files and hashes: 1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: q0S3Bedmm/TtaJffLsKsxtW9eTa5tC3C1xuOh8F+N9g=) 2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: 1xVLNQlNrVwrhPb266jUjImDeI1JBJLkEMDQeKUBnFI=) 3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: c9XW6vjr9ZRxN55xmeXFihDxkfyhr1D0e4wxYGC5e+I=) 4: A291634816B711ECBD752D47C4F9AE02.roa (hash: Ctq7IqjnfC2JklzmQsi0+l8pKomLg5k/LbwaF/nwW84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Validity Not Before: May 12 21:23:15 2025 GMT Not After : May 19 21:23:15 2025 GMT Subject: CN=682266c4-4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:87:06:08:8a:a1:d5:72:68:86:9d:3e:11: 8f:62:d1:53:84:59:c5:2f:d8:48:67:99:58:d5:56: b0:8f:42:52:06:3f:3c:c2:23:21:3b:57:46:51:23: ab:0f:16:4c:b3:09:6a:f6:09:6d:67:37:87:58:49: d0:7b:92:31:61:5e:6e:f8:50:89:5b:9c:b4:27:0b: d9:7f:f8:6c:08:2c:d5:b6:57:71:5f:b7:81:60:ea: 12:42:f4:79:76:c5:5c:4b:d4:ee:98:4e:cd:c5:35: 82:99:51:fa:44:18:dd:b0:17:7b:9e:81:a0:49:bc: d0:28:a4:f1:21:e7:00:8c:eb:8c:1f:79:e4:7f:9b: 3f:1b:9a:bc:6b:b7:b4:2b:73:88:52:06:6f:23:4e: 8a:ab:d1:19:9f:1b:02:20:49:00:c0:d6:e5:a2:85: ef:a3:69:3a:1a:aa:9b:fb:70:c0:53:2f:7b:49:dd: 42:32:d5:c1:71:9f:bc:b9:2a:98:de:bf:9f:db:50: 82:3f:d6:f2:8e:15:75:57:d2:f7:1f:ed:81:1d:8a: 98:0c:8b:f6:46:d6:64:f4:d1:94:75:01:1f:75:0a: 2f:60:04:6f:ee:e6:cd:c7:c0:54:2c:08:aa:78:41: 0b:df:58:c0:c6:4c:f0:d0:ae:e4:f0:fd:03:96:63: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:94:4B:A3:CB:B6:7A:C9:1E:15:34:7E:4F:37:AA:0E:CB:E0:41 X509v3 Authority Key Identifier: keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:d1:e7:13:b2:a0:58:f8:b2:b8:7f:92:98:59:ed:1c:ef:80: e0:c2:56:3a:ea:4d:37:c8:0e:39:05:c6:67:43:0b:20:79:67: 31:38:a2:7f:30:d0:1a:32:28:6f:2f:10:f6:6b:80:b4:9a:b5: 60:f0:21:01:08:ca:49:f3:08:fb:9b:03:04:3a:2d:e4:bd:de: a9:2d:d9:7a:0b:28:66:ee:b2:e5:3a:74:6c:9a:2e:21:64:29: aa:d0:95:20:0e:b7:4f:d8:2d:cd:9d:3c:35:2b:df:b3:6f:b3: 61:22:f9:39:af:07:dd:65:64:16:66:f8:56:d8:2d:a1:67:2e: 83:34:2a:f5:12:0a:a4:ab:e9:f6:11:68:25:8e:25:a4:f2:5d: 3a:3c:64:44:b3:01:43:83:74:7a:6d:3d:13:bc:52:f5:21:43: a3:39:71:0e:d5:02:66:b6:46:4b:e7:33:34:8f:8b:3f:47:1e: 74:21:71:0d:1d:fd:e8:f1:08:52:28:24:81:f2:bd:a3:86:9f: 0c:21:ab:27:d9:a6:3b:a8:76:dd:a7:eb:13:c2:20:19:99:0f: 95:ff:e1:13:5e:ea:17:8f:7f:f4:55:ae:24:9e:b5:ea:96:b6: 8f:1d:5c:0f:d5:29:9e:d1:6a:2a:bb:90:2b:e3:1c:1f:b6:ee: f3:f5:80:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz RkU4NTU1RjcwHhcNMjUwNTEyMjEyMzE1WhcNMjUwNTE5MjEyMzE1WjAYMRYwFAYD VQQDEw02ODIyNjZjNC00MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpWHBgiKodVyaIadPhGPYtFThFnFL9hIZ5lY1Vawj0JSBj88wiMhO1dGUSOr DxZMswlq9gltZzeHWEnQe5IxYV5u+FCJW5y0JwvZf/hsCCzVtldxX7eBYOoSQvR5 dsVcS9TumE7NxTWCmVH6RBjdsBd7noGgSbzQKKTxIecAjOuMH3nkf5s/G5q8a7e0 K3OIUgZvI06Kq9EZnxsCIEkAwNblooXvo2k6Gqqb+3DAUy97Sd1CMtXBcZ+8uSqY 3r+f21CCP9byjhV1V9L3H+2BHYqYDIv2RtZk9NGUdQEfdQovYARv7ubNx8BULAiq eEEL31jAxkzw0K7k8P0DlmNNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0jlEuj y7Z6yR4VNH5PN6oOy+BBMB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgt MTdGenQ0RGdGLTBfNkZWZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDh0ecTsqBY+LK4f5KYWe0c74DgwlY66k03yA45BcZnQwsgeWcxOKJ/ MNAaMihvLxD2a4C0mrVg8CEBCMpJ8wj7mwMEOi3kvd6pLdl6Cyhm7rLlOnRsmi4h ZCmq0JUgDrdP2C3NnTw1K9+zb7NhIvk5rwfdZWQWZvhW2C2hZy6DNCr1Egqkq+n2 EWgljiWk8l06PGREswFDg3R6bT0TvFL1IUOjOXEO1QJmtkZL5zM0j4s/Rx50IXEN Hf3o8QhSKCSB8r2jhp8MIasn2aY7qHbdp+sTwiAZmQ+V/+ETXuoXj3/0Va4knrXq lraPHVwP1Sme0Woqu5Ar4xwftu7z9YAD -----END CERTIFICATE-----Generated at Tue May 13 14:14:55 2025 by rpki-client