$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: R6D/8KOs9xxvOL8SK3wepGR7p24aAEmRI7cZDxgAPFo= Subject key identifier: 80:38:FC:72:3E:85:96:ED:5A:BB:69:40:C9:AF:5A:4A:43:46:60:C9 Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: E7 Signing time: Sun 11 May 2025 04:17:44 +0000 Manifest this update: Sun 11 May 2025 04:17:44 +0000 Manifest next update: Sun 18 May 2025 04:17:44 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: x1SRx7W731642zHuqphMRyvQixYVZvrg6wzl8JGwvw4=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: May 11 04:17:44 2025 GMT Not After : May 18 04:17:44 2025 GMT Subject: CN=682024e8-8396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:0c:63:24:37:f7:17:98:31:05:8f:90:c3: e4:a6:20:85:ed:26:0a:27:9e:7d:51:a8:cb:86:ab: 22:b7:a4:e5:50:11:29:22:2a:53:82:cf:e1:04:d8: 67:ed:b0:1c:bc:9c:d7:1e:65:c9:9b:b2:43:2a:95: 88:ca:9e:19:ac:5c:a2:54:ea:64:cd:37:0c:63:a8: 2f:bd:bb:54:91:80:7c:d9:fa:bc:cc:0d:c8:34:34: 18:db:ae:79:a7:cc:1b:60:a7:97:48:ec:1f:33:7c: 73:3b:83:83:d5:62:68:9c:46:c5:db:23:d9:ee:c7: 7d:d9:1c:f6:9f:fa:17:2a:09:b7:83:f7:82:31:71: 8a:41:97:9d:10:8c:ce:82:a8:8f:44:f2:81:2d:e8: f1:81:9d:d4:69:34:1e:4a:f4:a0:67:9f:ad:59:21: 2d:f0:59:a4:92:23:02:07:2b:25:2b:ed:47:6e:6d: ea:3c:ec:ca:b8:66:de:ff:36:92:43:7e:07:d3:41: 2a:08:20:ce:1e:88:df:f8:f1:81:c3:c3:9c:90:99: 0a:58:0c:98:1d:0c:5f:38:d9:eb:75:be:a5:c4:15: 0b:3e:54:73:6a:cc:b5:ce:95:42:40:9d:f2:df:43: 7a:91:32:78:27:c6:81:35:96:ab:83:43:54:5d:b9: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:38:FC:72:3E:85:96:ED:5A:BB:69:40:C9:AF:5A:4A:43:46:60:C9 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:af:65:7f:40:6b:bf:79:4c:81:ba:3d:c2:52:59:71:f4:c3: b9:5f:59:ee:04:b6:dc:5c:46:f6:33:47:e1:55:5e:49:38:c5: 36:93:1a:4e:8e:c3:24:e5:03:19:43:59:73:ba:3b:93:c7:57: 96:6d:ea:53:5f:cc:5d:59:b7:28:bf:8b:00:94:1e:f8:fd:e0: c3:02:3e:63:33:4c:60:56:95:1f:a4:a9:af:de:2f:e4:c5:13: 9d:c7:55:ca:13:dd:f7:8a:a5:86:9b:e0:08:1d:9f:fc:90:d8: 3d:df:75:0c:ff:be:0b:e5:8b:03:79:d9:c8:7e:41:24:13:a5: 92:2e:44:97:3e:54:98:17:44:5c:14:d5:f5:8f:ec:74:84:8a: 13:c9:92:5e:cc:2e:d3:23:64:2c:91:d8:00:3b:0c:74:87:53: 69:c1:c6:75:ed:37:9c:cd:b1:80:d8:fe:c8:5a:5a:40:20:5e: 9f:08:66:35:8c:eb:0e:21:3b:a7:d2:2a:64:f1:8b:d0:b1:19: 0e:f4:a8:76:01:8b:64:ac:f6:21:ec:92:3a:d6:5d:26:ed:a5: 86:e3:91:a6:44:15:14:b2:c4:0c:12:5a:97:0b:08:8e:af:5a: 82:05:e9:c2:fc:87:15:1f:9e:00:5b:1f:59:ea:81:14:97:f2: db:e2:3b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwNTExMDQxNzQ0WhcNMjUwNTE4MDQxNzQ0WjAYMRYwFAYD VQQDEw02ODIwMjRlOC04Mzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bkMYyQ39xeYMQWPkMPkpiCF7SYKJ559UajLhqsit6TlUBEpIipTgs/hBNhn 7bAcvJzXHmXJm7JDKpWIyp4ZrFyiVOpkzTcMY6gvvbtUkYB82fq8zA3INDQY2655 p8wbYKeXSOwfM3xzO4OD1WJonEbF2yPZ7sd92Rz2n/oXKgm3g/eCMXGKQZedEIzO gqiPRPKBLejxgZ3UaTQeSvSgZ5+tWSEt8FmkkiMCByslK+1Hbm3qPOzKuGbe/zaS Q34H00EqCCDOHojf+PGBw8OckJkKWAyYHQxfONnrdb6lxBULPlRzasy1zpVCQJ3y 30N6kTJ4J8aBNZarg0NUXbmNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIA4/HI+ hZbtWrtpQMmvWkpDRmDJMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCr2V/QGu/eUyBuj3CUllx9MO5X1nuBLbcXEb2M0fhVV5JOMU2kxpO jsMk5QMZQ1lzujuTx1eWbepTX8xdWbcov4sAlB74/eDDAj5jM0xgVpUfpKmv3i/k xROdx1XKE933iqWGm+AIHZ/8kNg933UM/74L5YsDednIfkEkE6WSLkSXPlSYF0Rc FNX1j+x0hIoTyZJezC7TI2QskdgAOwx0h1NpwcZ17TeczbGA2P7IWlpAIF6fCGY1 jOsOITun0ipk8YvQsRkO9Kh2AYtkrPYh7JI61l0m7aWG45GmRBUUssQMElqXCwiO r1qCBenC/IcVH54AWx9Z6oEUl/Lb4jtW -----END CERTIFICATE-----Generated at Mon May 12 23:19:35 2025 by rpki-client