$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: Xu9MPVO/6DOUTzn1BHqs+pcXBgUjLVtWHTkzb1xy5j0= Subject key identifier: 40:1B:07:46:D1:C6:66:0D:14:DF:49:01:E6:80:23:22:5B:8F:06:3E Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 5E Signing time: Thu 15 May 2025 06:23:44 +0000 Manifest this update: Thu 15 May 2025 06:23:44 +0000 Manifest next update: Thu 22 May 2025 06:23:44 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: w5q9LoVlS0i5l+mrhuplnha0SdpKoEStEnU58g0nPZE=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: May 15 06:23:44 2025 GMT Not After : May 22 06:23:44 2025 GMT Subject: CN=68258870-9a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:eb:24:dd:36:ca:54:f5:55:42:f4:63:a8: f2:46:11:c9:d8:15:97:67:63:28:3d:73:69:c2:8f: 61:bc:69:01:9f:dd:92:8b:ba:c1:53:dd:59:fd:14: 15:00:b5:63:fb:c5:d5:44:ee:c9:db:99:72:f6:df: b5:2e:03:88:69:0c:47:36:65:af:59:fd:a7:7b:c1: 54:9f:8b:b8:d1:16:39:e5:a9:6d:0e:ff:ee:1d:27: ee:f1:2f:12:d8:b7:fc:89:f1:82:28:56:27:ec:52: 93:72:8a:51:a3:be:7d:55:29:3f:e5:f3:04:a0:45: 4d:fe:e3:d1:4f:b9:f3:d4:29:9e:18:96:d4:53:e3: 3b:72:57:60:c2:04:de:e9:6d:d8:0b:89:e2:c5:36: 00:af:81:62:b9:9f:de:84:c2:e5:d3:9c:53:66:54: 67:d4:ed:0e:07:2e:ac:3d:18:b2:2f:ba:d8:be:80: 7d:49:bd:b2:12:31:45:40:95:9f:cb:52:87:32:9b: 7a:94:65:3a:0e:2b:7c:66:60:2c:64:bb:7c:34:bc: b1:b9:46:8a:a4:9b:ee:af:56:0f:f1:1b:d4:06:19: 32:0a:16:0e:bf:4c:86:b9:83:d0:db:dc:12:cf:9e: c0:9f:16:d4:d6:30:cf:03:a6:6f:35:d9:8d:55:4c: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:07:46:D1:C6:66:0D:14:DF:49:01:E6:80:23:22:5B:8F:06:3E X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:55:86:6d:7f:7c:7a:4b:da:57:e1:f4:23:44:e5:a7:6a:f4: 02:7d:fc:2a:69:fc:76:66:b3:49:03:ca:28:1d:fe:b5:88:d0: 81:12:d0:b4:97:34:19:77:62:4d:13:19:dd:3d:ef:db:ec:3a: 3d:2b:45:03:48:bf:07:15:1f:32:33:77:86:65:6d:9c:83:df: 0f:c2:cd:6c:c9:d0:df:49:3a:7a:59:49:e9:48:48:9c:16:c1: a8:91:31:a8:2e:c0:68:45:ac:33:06:fb:b1:cc:4d:12:1f:49: d3:07:17:0d:41:2a:e6:77:f0:5b:54:ba:96:ac:40:30:54:d4: 6c:75:17:0f:df:67:e2:70:c0:d0:9a:7d:9e:3a:de:17:00:fd: ce:d3:7f:aa:5b:bf:d8:7d:ca:9f:25:37:07:07:a3:d4:65:c7: 7d:2b:a5:00:83:3d:e6:d2:a5:f0:bd:dc:8c:3e:12:83:1d:4b: 29:bf:06:83:9c:38:9d:cc:b1:f8:53:01:34:42:1b:eb:41:aa: d7:9e:43:1f:0a:6a:e6:10:c7:de:83:be:08:e8:f8:66:d8:1f: 6e:a9:14:ab:53:99:31:23:83:55:5c:27:02:9d:02:f8:3c:9d: 8b:db:b9:2b:3d:2f:b5:ab:24:da:03:a3:0d:ed:c4:61:ad:18: 32:d4:bc:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNTA1MTUwNjIzNDRaFw0yNTA1MjIwNjIzNDRaMBgxFjAUBgNV BAMTDTY4MjU4ODcwLTlhMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvwusk3TbKVPVVQvRjqPJGEcnYFZdnYyg9c2nCj2G8aQGf3ZKLusFT3Vn9FBUA tWP7xdVE7snbmXL237UuA4hpDEc2Za9Z/ad7wVSfi7jRFjnlqW0O/+4dJ+7xLxLY t/yJ8YIoVifsUpNyilGjvn1VKT/l8wSgRU3+49FPufPUKZ4YltRT4ztyV2DCBN7p bdgLieLFNgCvgWK5n96EwuXTnFNmVGfU7Q4HLqw9GLIvuti+gH1JvbISMUVAlZ/L Uocym3qUZToOK3xmYCxku3w0vLG5Roqkm+6vVg/xG9QGGTIKFg6/TIa5g9Db3BLP nsCfFtTWMM8Dpm812Y1VTDWHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQBsHRtHG Zg0U30kB5oAjIluPBj4wHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQx NUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZVhm1/fHpL2lfh9CNE5adq9AJ9/Cpp/HZms0kDyigd/rWI0IES0LSX NBl3Yk0TGd0979vsOj0rRQNIvwcVHzIzd4ZlbZyD3w/CzWzJ0N9JOnpZSelISJwW waiRMaguwGhFrDMG+7HMTRIfSdMHFw1BKuZ38FtUupasQDBU1Gx1Fw/fZ+JwwNCa fZ463hcA/c7Tf6pbv9h9yp8lNwcHo9Rlx30rpQCDPebSpfC93Iw+EoMdSym/BoOc OJ3MsfhTATRCG+tBqteeQx8KauYQx96Dvgjo+GbYH26pFKtTmTEjg1VcJwKdAvg8 nYvbuSs9L7WrJNoDow3txGGtGDLUvNA= -----END CERTIFICATE-----Generated at Sat May 17 08:29:58 2025 by rpki-client