$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: 4Sz5Vn3HmBUUSicLDKFM3FMszA8xksADyFp2AAlBL8w= Subject key identifier: 2C:85:F0:06:D8:B5:78:9D:91:0A:3E:52:3D:C4:DF:9A:80:D9:99:AD Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 06FA Signing time: Wed 14 May 2025 22:01:20 +0000 Manifest this update: Wed 14 May 2025 22:01:19 +0000 Manifest next update: Wed 21 May 2025 22:01:19 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: CaX39Pv27K6NZjcUNznvveH8SX4UJfUGBqAK8IEY9l8=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: May 14 22:01:19 2025 GMT Not After : May 21 22:01:19 2025 GMT Subject: CN=682512b0-5b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:64:da:42:f4:78:b8:62:e2:2e:97:1a:a4: de:ae:83:19:5f:2e:7d:67:48:59:30:62:dc:e0:ee: 03:3b:99:42:ed:f3:16:bd:14:cf:15:ff:4e:96:b8: e0:f9:05:e2:2c:dd:82:88:02:99:88:6f:a3:32:26: 44:7f:cb:0c:a5:ac:27:9f:66:c1:17:74:d8:80:3d: df:a1:12:5e:c3:fa:f5:8c:cb:cf:d4:27:04:b2:4d: 01:6f:50:f2:50:52:05:13:48:c2:c0:2e:53:2d:10: 7d:d9:ca:49:0b:3b:3a:aa:f4:3e:95:4d:c8:54:c1: d4:70:4e:e8:fd:0f:ec:57:6c:ea:e1:66:63:4e:28: aa:a8:ee:94:1c:2a:e6:2a:b0:d6:f0:f4:13:e1:9a: dd:07:53:f0:06:02:34:88:be:a4:04:dc:9e:1f:a4: 66:95:44:07:ea:4c:67:f3:74:9a:4b:9f:ec:24:e0: 84:3b:63:28:ba:8e:ff:78:ae:90:db:00:3f:53:01: 45:6a:2e:74:c1:8c:41:74:fa:ba:7c:75:9f:a3:f1: 2d:32:c4:c2:bf:cf:18:85:f0:1d:46:40:fa:db:43: 00:fc:4d:09:95:3d:1f:f1:4c:be:a8:dd:ad:1e:e6: 61:a0:25:2a:14:dd:26:5a:90:c8:9c:01:28:18:0d: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:85:F0:06:D8:B5:78:9D:91:0A:3E:52:3D:C4:DF:9A:80:D9:99:AD X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a1:98:a4:24:ba:c0:cf:d0:11:4e:79:67:19:2c:9f:f1:1b: da:ac:ef:7a:43:d3:86:89:3b:9e:6e:4b:eb:e8:76:09:3d:43: d1:55:45:10:72:60:11:d9:ed:24:b2:61:41:24:15:4a:ec:c8: 6a:61:0f:92:db:84:23:6f:d6:f9:1f:22:fd:51:39:44:e4:a0: 47:6f:93:33:b0:5c:ab:71:da:be:55:fd:a0:7a:60:2b:e8:0b: 11:e8:ca:f8:c6:fb:27:70:4f:aa:cd:00:a6:48:a3:86:75:65: 2c:13:5a:f8:ed:ad:26:7d:c0:cc:b9:1a:0c:6e:32:61:15:7d: e8:7a:a8:fa:dd:eb:ee:65:2b:65:cb:b8:41:8e:55:bc:cf:88: ac:82:a0:2c:ff:3a:fd:87:81:43:ba:c8:93:41:74:4f:43:64: e4:ae:e7:e5:35:ef:b9:70:11:cc:68:c9:4c:75:20:29:77:6f: cb:82:b5:32:59:31:92:19:f5:24:c6:55:4a:44:20:e8:bf:ad: 09:ba:81:38:05:c8:ab:99:1d:b4:1e:41:ab:b2:2e:94:a3:ec: b6:5a:9a:2c:73:de:00:5a:69:77:3d:2a:92:2a:b5:87:16:c5: 78:6e:64:a1:12:f1:71:36:74:8d:17:d9:42:9c:ff:95:ac:95: a7:0d:20:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUwNTE0MjIwMTE5WhcNMjUwNTIxMjIwMTE5WjAYMRYwFAYD VQQDEw02ODI1MTJiMC01YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGtk2kL0eLhi4i6XGqTeroMZXy59Z0hZMGLc4O4DO5lC7fMWvRTPFf9Olrjg +QXiLN2CiAKZiG+jMiZEf8sMpawnn2bBF3TYgD3foRJew/r1jMvP1CcEsk0Bb1Dy UFIFE0jCwC5TLRB92cpJCzs6qvQ+lU3IVMHUcE7o/Q/sV2zq4WZjTiiqqO6UHCrm KrDW8PQT4ZrdB1PwBgI0iL6kBNyeH6RmlUQH6kxn83SaS5/sJOCEO2Mouo7/eK6Q 2wA/UwFFai50wYxBdPq6fHWfo/EtMsTCv88YhfAdRkD620MA/E0JlT0f8Uy+qN2t HuZhoCUqFN0mWpDInAEoGA0XOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyF8AbY tXidkQo+Uj3E35qA2ZmtMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWoZikJLrAz9ARTnlnGSyf8RvarO96Q9OGiTuebkvr6HYJPUPRVUUQ cmAR2e0ksmFBJBVK7MhqYQ+S24Qjb9b5HyL9UTlE5KBHb5MzsFyrcdq+Vf2gemAr 6AsR6Mr4xvsncE+qzQCmSKOGdWUsE1r47a0mfcDMuRoMbjJhFX3oeqj63evuZStl y7hBjlW8z4isgqAs/zr9h4FDusiTQXRPQ2TkruflNe+5cBHMaMlMdSApd2/LgrUy WTGSGfUkxlVKRCDov60JuoE4BcirmR20HkGrsi6Uo+y2Wposc94AWml3PSqSKrWH FsV4bmShEvFxNnSNF9lCnP+VrJWnDSAF -----END CERTIFICATE-----Generated at Thu May 15 22:26:54 2025 by rpki-client