$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json) Hash identifier: 8Ws5UiTkJB/y4eRI5+GE8ESbzzo9Mj/nOWEkAmoy4i4= Subject key identifier: 98:1F:52:F3:A3:95:27:62:39:06:DF:23:55:CE:07:CB:67:01:CE:8B Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48 Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48 Certificate serial: 1E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft Manifest number: 3284 Signing time: Fri 04 Apr 2025 15:43:49 +0000 Manifest this update: Fri 04 Apr 2025 15:43:48 +0000 Manifest next update: Fri 11 Apr 2025 15:43:48 +0000 Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: k/u3moeU7Oqmrfld3JU3+kZ9ggucjxvJMDifDw5p4X4=) 2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: zBYE/5fRTCQSO3jWk1oOmSo/Ul1q1Praa4fc7ng9+AE=) 3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: X2qav5EFr+Ua635VH9BvI7EhV1owUod2CiDjBop2am4=) 4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: LAARyCxmzy516MHC0uw5Kfkv56HjOBgenKPezXUQvg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7696 (0x1e10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABDD Validity Not Before: Apr 4 15:43:48 2025 GMT Not After : Apr 11 15:43:48 2025 GMT Subject: CN=67effe34-32a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:6e:4b:25:8c:c1:2f:6d:00:2f:d8:60:5b: fc:09:6a:ab:a1:3b:73:dd:e4:b7:8a:11:bd:0f:d7: e5:fe:81:db:53:33:80:e8:67:c4:bb:0e:64:d4:bf: 1d:0d:fb:62:a9:79:08:56:ad:f2:08:a5:5b:fb:cf: 89:f0:85:82:3e:29:f6:49:92:f6:89:9e:46:f8:34: 10:51:32:56:ee:7f:8c:9f:a4:b9:fb:a2:a0:25:56: af:3a:2e:3a:59:90:50:bc:0b:8f:8d:2e:d3:96:a8: 4f:9c:67:80:0a:15:b3:e0:45:c1:a6:2f:66:0a:66: 0d:87:8e:98:11:27:38:c8:b2:6b:f4:3b:15:ee:60: bd:3f:53:69:d5:1a:25:30:73:51:41:46:9d:1b:c5: c3:49:01:49:6b:5d:ac:9d:84:87:f6:a5:10:fe:f3: dd:95:74:8e:58:2f:42:a9:20:97:11:e2:63:fb:6d: ec:d1:6e:0a:c7:10:71:b0:f5:1d:29:df:98:a5:77: 42:ff:fe:31:53:ce:89:97:39:b6:d1:41:25:88:1a: c1:43:ef:f9:42:95:de:46:47:84:3c:55:27:e1:7b: fa:17:00:1c:79:6b:61:fc:e3:f5:b2:ca:9a:6b:0f: 00:2d:b2:a3:91:68:12:21:0f:52:2b:31:f7:17:a7: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:52:F3:A3:95:27:62:39:06:DF:23:55:CE:07:CB:67:01:CE:8B X509v3 Authority Key Identifier: keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:c1:55:25:4b:fd:c6:34:0f:a3:6d:0a:13:71:1a:9d:1c:87: 8b:1c:4f:32:05:6f:c3:0f:30:2d:c5:21:4e:9f:8f:c4:7e:df: 27:7f:29:4a:05:9f:43:62:3b:f4:3b:17:75:58:4a:5f:86:a6: 50:44:39:4b:75:50:5c:06:4e:75:61:64:9e:98:ce:ab:be:21: 3f:6d:f8:84:ef:ba:49:fe:ff:16:68:8f:46:c7:5b:7a:3f:42: 69:d8:a5:b6:0e:00:e4:f6:b1:d7:5c:7b:53:9b:78:14:d2:43: b5:5b:bb:76:f5:fc:a4:e7:a3:5f:a2:8d:aa:90:8f:b6:c9:e9: 7d:b0:59:e9:a3:73:cd:54:8d:e6:1b:af:ad:a2:ce:98:fa:d3: 86:0d:6d:b0:f8:8d:47:ef:ea:0f:cf:7e:af:d9:28:ca:6c:9c: 8e:17:4e:d3:a7:e4:c5:de:b2:63:1b:d1:91:23:9f:01:3e:e4: e9:5e:22:81:8b:b4:e5:61:97:01:e9:df:10:ca:3a:4a:c5:0c: 43:5b:5b:ed:f9:d6:09:63:c3:58:8c:fd:01:f1:a8:3f:4d:f2: d9:aa:55:23:ca:51:bc:4b:04:ba:0e:bd:83:ab:be:75:f8:aa: 71:3e:50:4a:4d:d1:a1:25:9a:d2:26:95:7f:ab:45:13:40:72: ed:f8:b5:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCREQxMTAvBgNVBAUTKDQyODdCMzMzMjE3NkRCNDg2QTJDQkM0MjU0MDJGQTlD ODZCNkRDNDgwHhcNMjUwNDA0MTU0MzQ4WhcNMjUwNDExMTU0MzQ4WjAYMRYwFAYD VQQDEw02N2VmZmUzNC0zMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqluSyWMwS9tAC/YYFv8CWqroTtz3eS3ihG9D9fl/oHbUzOA6GfEuw5k1L8d DftiqXkIVq3yCKVb+8+J8IWCPin2SZL2iZ5G+DQQUTJW7n+Mn6S5+6KgJVavOi46 WZBQvAuPjS7TlqhPnGeAChWz4EXBpi9mCmYNh46YESc4yLJr9DsV7mC9P1Np1Rol MHNRQUadG8XDSQFJa12snYSH9qUQ/vPdlXSOWC9CqSCXEeJj+23s0W4KxxBxsPUd Kd+YpXdC//4xU86Jlzm20UEliBrBQ+/5QpXeRkeEPFUn4Xv6FwAceWth/OP1ssqa aw8ALbKjkWgSIQ9SKzH3F6fOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgfUvOj lSdiOQbfI1XOB8tnAc6LMB8GA1UdIwQYMBaAFEKHszMhdttIaiy8QlQC+pyGttxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJERC8zQUUwMDRCNEQ3 NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIwaHFMTHhDVkFMNm5JYTIz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FvZXpNeUYyMjBocUxMeENWQUw2bklhMjNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJERC8zQUUwMDRCNEQ3NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIw aHFMTHhDVkFMNm5JYTIzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFwVUlS/3GNA+jbQoTcRqdHIeLHE8yBW/DDzAtxSFOn4/Eft8nfylK BZ9DYjv0Oxd1WEpfhqZQRDlLdVBcBk51YWSemM6rviE/bfiE77pJ/v8WaI9Gx1t6 P0Jp2KW2DgDk9rHXXHtTm3gU0kO1W7t29fyk56Nfoo2qkI+2yel9sFnpo3PNVI3m G6+tos6Y+tOGDW2w+I1H7+oPz36v2SjKbJyOF07Tp+TF3rJjG9GRI58BPuTpXiKB i7TlYZcB6d8QyjpKxQxDW1vt+dYJY8NYjP0B8ag/TfLZqlUjylG8SwS6Dr2Dq751 +KpxPlBKTdGhJZrSJpV/q0UTQHLt+LVq -----END CERTIFICATE-----Generated at Sat Apr 5 16:55:28 2025 by rpki-client