$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: N98WVceQb3cx7WGVsuU2ZLJ9z7si03aWQc7cXRCEr2E= Subject key identifier: 5F:EB:88:6B:63:DA:AB:18:C6:23:6C:63:15:F9:A5:16:3D:79:CD:A1 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 347E Signing time: Mon 12 May 2025 15:00:16 +0000 Manifest this update: Mon 12 May 2025 15:00:15 +0000 Manifest next update: Mon 19 May 2025 15:00:15 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: X9GjxnnkIvFzCFcETLl51C2/nKI9nWkCEH+nLcwoeUE=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: wrgTGY4Zg1HcHZCDO+hkBCrj/kSRgwBrHyd97B10p9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: May 12 15:00:15 2025 GMT Not After : May 19 15:00:15 2025 GMT Subject: CN=68220cff-64ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:53:e1:b3:0d:f5:45:d0:22:6c:a0:f4:50:4a: 8b:1b:a5:95:d2:cb:13:d9:26:cd:ad:f1:cf:77:10: 6b:81:f0:b9:50:99:14:e0:49:d4:b8:f2:a8:b3:15: 54:76:d5:9a:0e:2b:62:72:cc:4f:87:bf:a7:c3:15: 5f:36:a7:33:06:cd:89:e5:12:00:cd:09:5b:9c:61: e8:53:9a:b9:bb:ad:d6:b8:7b:67:ef:dc:53:0e:ee: 87:6a:3e:49:06:d1:e0:87:c3:18:25:c2:a5:48:19: cd:ee:dc:06:8a:4c:6c:7d:69:15:7d:32:04:e2:26: c8:b0:17:bb:55:ab:e4:ad:b5:95:f1:4a:82:a7:6c: 96:c1:cc:7d:08:d7:10:ff:ba:73:7f:4a:ee:ab:3c: d0:91:f3:aa:70:f2:25:9c:e2:9a:af:20:c9:c0:16: dd:0a:3b:27:f4:6d:52:07:48:08:a3:aa:32:6f:7c: ff:cb:b4:78:c2:be:e8:fb:1f:8e:15:62:a7:1a:18: 07:9e:6e:59:84:80:61:ee:d6:e9:d8:7a:b7:11:5e: 7f:aa:42:17:b7:40:10:54:62:bb:96:bd:6f:66:a5: bb:fe:7a:4c:8e:97:49:2e:66:52:50:15:9d:df:79: 60:c4:b1:93:4f:38:c8:f1:db:01:dd:f1:ba:ee:2a: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:88:6B:63:DA:AB:18:C6:23:6C:63:15:F9:A5:16:3D:79:CD:A1 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2f:cf:3d:98:9f:aa:84:be:cb:f7:95:5d:94:7d:41:98:0e: 25:a9:80:a1:d6:97:85:3e:33:9a:24:07:ce:80:d9:73:5d:d9: 53:3a:ad:9f:8b:19:82:e4:58:2c:21:92:09:64:20:40:fa:ea: bf:20:5a:92:eb:fa:fb:f7:a3:c6:b7:55:01:64:72:95:db:bb: c6:05:5c:45:5f:55:65:9c:a6:0f:f9:d0:da:42:11:70:d6:de: c0:8a:f2:7d:5d:21:18:e5:fa:28:ad:65:13:c7:59:43:a1:c1: 3d:6f:fa:6c:16:1a:12:be:3a:71:26:67:27:e0:de:64:fd:b2: d6:84:9f:a3:26:45:31:d7:22:6c:f7:a8:cd:71:66:c1:17:69: ed:84:3d:d2:25:4d:3e:a7:39:55:09:92:53:b6:08:f2:e9:f2: ea:ba:4f:be:d7:90:00:5f:75:4d:1f:ef:73:ac:f7:36:80:a2: d8:bd:cd:5f:6d:45:7a:9d:27:dc:ae:db:9e:4c:89:cd:68:b9: c9:17:cf:fb:ed:1a:3a:d3:54:09:b4:e9:17:d8:d1:d7:7c:88: 9c:79:0b:9e:08:ec:60:da:25:12:45:f6:2c:c2:f9:3d:58:e1: 71:45:b7:f3:d2:3c:32:6c:8c:e6:47:08:8c:70:6d:64:1a:76: 50:50:3d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjUwNTEyMTUwMDE1WhcNMjUwNTE5MTUwMDE1WjAYMRYwFAYD VQQDEw02ODIyMGNmZi02NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VPhsw31RdAibKD0UEqLG6WV0ssT2SbNrfHPdxBrgfC5UJkU4EnUuPKosxVU dtWaDiticsxPh7+nwxVfNqczBs2J5RIAzQlbnGHoU5q5u63WuHtn79xTDu6Haj5J BtHgh8MYJcKlSBnN7twGikxsfWkVfTIE4ibIsBe7VavkrbWV8UqCp2yWwcx9CNcQ /7pzf0ruqzzQkfOqcPIlnOKaryDJwBbdCjsn9G1SB0gIo6oyb3z/y7R4wr7o+x+O FWKnGhgHnm5ZhIBh7tbp2Hq3EV5/qkIXt0AQVGK7lr1vZqW7/npMjpdJLmZSUBWd 33lgxLGTTzjI8dsB3fG67ipJiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/riGtj 2qsYxiNsYxX5pRY9ec2hMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcL889mJ+qhL7L95VdlH1BmA4lqYCh1peFPjOaJAfOgNlzXdlTOq2f ixmC5FgsIZIJZCBA+uq/IFqS6/r796PGt1UBZHKV27vGBVxFX1VlnKYP+dDaQhFw 1t7AivJ9XSEY5foorWUTx1lDocE9b/psFhoSvjpxJmcn4N5k/bLWhJ+jJkUx1yJs 96jNcWbBF2nthD3SJU0+pzlVCZJTtgjy6fLquk++15AAX3VNH+9zrPc2gKLYvc1f bUV6nSfcrtueTInNaLnJF8/77Ro601QJtOkX2NHXfIiceQueCOxg2iUSRfYswvk9 WOFxRbfz0jwybIzmRwiMcG1kGnZQUD0i -----END CERTIFICATE-----Generated at Tue May 13 02:25:02 2025 by rpki-client