$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: TzejBMXatCm5c7UfM8tPPj7bNYFz/BJqjdHtcLP16fo= Subject key identifier: C2:1F:43:15:EF:F8:AA:5B:17:00:99:AA:F7:B3:BD:56:E3:49:14:8D Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: D5 Signing time: Sun 11 May 2025 04:27:59 +0000 Manifest this update: Sun 11 May 2025 04:27:59 +0000 Manifest next update: Sun 18 May 2025 04:27:59 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: 6Vx3Gd5HPicDUAKQnz7zJf1Tmb3gcsevPW9lgyV3rtM=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: May 11 04:27:59 2025 GMT Not After : May 18 04:27:59 2025 GMT Subject: CN=6820274f-b182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:cc:b1:2c:8e:86:73:4e:cb:eb:5a:58:24: 1e:d7:ff:f1:1a:f7:b5:d3:75:0f:89:51:a7:b3:bb: ea:74:b1:7f:aa:d6:59:29:e7:94:5b:34:0b:b1:aa: 6c:da:c0:2d:bf:4b:0d:35:7c:92:c7:1a:c1:75:dc: 4a:8f:ae:ff:f7:be:98:aa:0a:cd:77:a9:da:eb:41: da:56:2c:56:91:f0:bd:65:23:58:ae:a9:4b:2c:33: 7a:e7:a7:f2:ff:ae:a4:aa:08:8f:69:d0:a8:35:d8: a7:df:91:2c:6e:a1:01:d7:14:8b:7d:41:57:02:8c: 47:ac:67:48:3c:bc:ab:c7:1f:3c:a2:bc:96:ae:b7: 8b:6c:20:eb:55:75:da:4e:b3:b7:47:22:c0:fd:7e: 87:2a:e2:ad:84:2d:a0:98:49:1d:6e:72:f2:ac:0f: 8d:8b:89:61:1f:4e:38:c4:3b:35:84:cf:ad:f9:29: d6:69:9b:46:91:dc:0c:37:a9:9e:4f:a0:15:34:8b: 84:cb:99:bf:88:19:db:b1:53:51:51:bd:3a:5c:01: 7a:df:ae:c5:d5:8e:6f:df:0d:e0:00:0d:1e:b0:c0: c4:51:6f:27:67:9c:c3:5a:ed:a4:b8:03:40:82:42: 3c:f7:72:ff:59:82:d9:d9:41:2d:af:f6:80:b1:07: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1F:43:15:EF:F8:AA:5B:17:00:99:AA:F7:B3:BD:56:E3:49:14:8D X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:aa:28:66:cd:3a:8a:e6:2d:3c:af:e1:ba:57:20:0f:8e:38: a3:e0:42:97:e4:1e:36:01:9f:94:aa:3b:1c:10:d2:e3:9c:19: ec:a6:b1:50:ed:b9:2b:56:46:af:f9:25:d2:b2:46:0b:b3:14: ac:f2:53:0b:1e:d1:95:72:7a:5b:ad:09:59:e2:d7:09:88:4d: d9:a9:23:3c:0e:84:d3:7b:df:95:cd:e6:01:d9:8e:7f:b1:8d: 1e:4f:fc:bd:7b:cc:2b:8b:87:ab:99:fb:b0:fe:b5:0c:25:22: ef:b8:d4:0c:a7:02:dc:3c:e3:51:48:d0:05:91:ce:d7:ad:6f: 8b:4b:65:3c:9c:cb:ea:a1:e4:53:3a:6a:f9:c2:14:24:35:37: 67:2d:13:88:e4:dd:64:15:8d:23:78:3a:5f:48:04:ba:6c:a0: 03:3f:15:f7:d1:a6:35:bd:e3:c9:30:4c:a2:9d:8b:88:8e:ba: 18:59:bb:7b:40:6a:ec:57:b3:de:fa:16:19:1c:38:c3:df:be: bd:2a:00:10:11:dc:2e:fa:87:cb:73:c9:cd:45:30:bb:5f:a3: 48:6f:ce:68:9b:7d:60:c0:b3:97:0b:2b:75:37:32:da:8c:c1: 04:cd:09:e1:7f:69:96:2d:26:7d:8a:62:fa:51:04:2a:fd:fa: 39:d6:51:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUwNTExMDQyNzU5WhcNMjUwNTE4MDQyNzU5WjAYMRYwFAYD VQQDEw02ODIwMjc0Zi1iMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdzMsSyOhnNOy+taWCQe1//xGve103UPiVGns7vqdLF/qtZZKeeUWzQLsaps 2sAtv0sNNXySxxrBddxKj67/976YqgrNd6na60HaVixWkfC9ZSNYrqlLLDN656fy /66kqgiPadCoNdin35EsbqEB1xSLfUFXAoxHrGdIPLyrxx88oryWrreLbCDrVXXa TrO3RyLA/X6HKuKthC2gmEkdbnLyrA+Ni4lhH044xDs1hM+t+SnWaZtGkdwMN6me T6AVNIuEy5m/iBnbsVNRUb06XAF6367F1Y5v3w3gAA0esMDEUW8nZ5zDWu2kuANA gkI893L/WYLZ2UEtr/aAsQdOTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIfQxXv +KpbFwCZqvezvVbjSRSNMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlqihmzTqK5i08r+G6VyAPjjij4EKX5B42AZ+UqjscENLjnBnsprFQ 7bkrVkav+SXSskYLsxSs8lMLHtGVcnpbrQlZ4tcJiE3ZqSM8DoTTe9+VzeYB2Y5/ sY0eT/y9e8wri4ermfuw/rUMJSLvuNQMpwLcPONRSNAFkc7XrW+LS2U8nMvqoeRT Omr5whQkNTdnLROI5N1kFY0jeDpfSAS6bKADPxX30aY1vePJMEyinYuIjroYWbt7 QGrsV7Pe+hYZHDjD3769KgAQEdwu+ofLc8nNRTC7X6NIb85om31gwLOXCyt1NzLa jMEEzQnhf2mWLSZ9imL6UQQq/fo51lEX -----END CERTIFICATE-----Generated at Tue May 13 01:45:54 2025 by rpki-client