$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: 2nse7KY7tg5tJSBVp4kIbKALztPpNEepHE6rSrI9dgQ= Subject key identifier: BA:90:75:3C:40:12:85:70:B7:BA:5F:BA:03:FB:F6:13:F9:AB:DA:A8 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 0128 Signing time: Sat 29 Mar 2025 04:05:57 +0000 Manifest this update: Sat 29 Mar 2025 04:05:56 +0000 Manifest next update: Sat 05 Apr 2025 04:05:56 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: fCEmXr9oTwicR0vZcQOl5eB5/dNAkfC1Qxmf1z5wJcM=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: ZZYkG0rN+pICOhz09TrHJ/M/KfssTlJ7hgwatztFUEg=) 3: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: C5/o5aDwWxMI021UTT3+Muuzc6BZ58/1ktFFSh5UflU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E Validity Not Before: Mar 29 04:05:56 2025 GMT Not After : Apr 5 04:05:56 2025 GMT Subject: CN=67e771a4-7e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6e:a8:7f:54:83:12:d5:9f:c4:47:0c:03:10: 2d:77:6c:b7:62:02:f4:1c:e8:45:63:59:d3:56:44: c5:26:f2:2a:ce:68:ba:48:7e:11:ea:7a:3d:ac:c8: fe:71:eb:0d:c4:39:22:31:02:d0:9e:51:e5:6a:66: bc:db:48:23:2c:3d:86:e5:2e:df:cd:fb:09:d1:a9: 1f:7d:8b:a1:69:f3:4c:df:bc:af:fa:ee:67:f2:5e: c5:37:b7:5a:4d:ce:fc:33:11:ac:65:99:e8:a6:e4: 54:53:e6:32:58:f3:23:c5:20:b9:8a:d4:e8:12:8a: 52:ea:64:cf:d8:e1:de:d0:b7:3a:e2:64:41:47:27: 6f:4d:8b:89:56:7c:5f:77:f3:04:c4:48:b9:e2:7e: 1d:87:a7:c0:2d:21:8d:04:94:d7:44:a9:5e:e3:d0: e2:e6:0c:c8:f8:07:d5:5c:45:5c:e4:b7:9f:e5:a9: 14:c9:d6:af:3e:12:db:ab:9f:1d:b8:fb:93:dd:a4: 01:25:2c:28:34:a2:6a:dd:21:0d:99:d4:7a:77:60: d9:d0:e1:ce:55:58:31:9f:c6:74:67:d4:43:50:45: 6e:fe:4b:2f:ca:cf:cb:c0:d8:ed:92:1a:6c:3d:60: 0e:16:62:46:90:6d:b9:e7:7a:12:79:4a:69:c2:77: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:75:3C:40:12:85:70:B7:BA:5F:BA:03:FB:F6:13:F9:AB:DA:A8 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d3:75:96:96:71:d5:4c:2d:26:9c:c9:ec:92:e8:f9:c7:87: fd:08:e4:dd:db:e5:20:6c:bc:c8:86:8d:74:f4:16:de:cd:67: 79:81:b6:8e:7b:ce:2c:de:d9:bc:8e:df:9a:91:86:d4:c4:76: 6b:19:a3:c1:55:8d:78:19:07:e0:52:c3:6c:ae:59:3a:94:bc: b9:2c:28:0f:ad:84:b8:14:59:fe:9f:5d:a0:26:81:42:06:31: 03:ed:63:d7:5c:45:46:55:2a:56:f8:2f:f4:a0:11:a2:68:36: e1:8d:87:5a:67:81:ac:7a:ca:cc:bf:d3:d5:a7:ba:d3:11:0d: 3c:9c:e8:0d:31:26:d0:ff:cd:e9:c6:bc:75:31:a5:f4:96:1f: 24:2e:ca:8c:67:96:f7:12:77:6c:f5:3a:48:37:56:eb:dc:cb: db:cc:8e:64:8e:d5:2e:ec:ea:c5:bd:20:60:e5:4e:9f:1d:f1: e2:81:7f:d5:78:40:67:6e:8d:4f:9d:f0:6a:75:00:5d:cc:ec: 7d:28:31:dd:71:19:4b:bc:a5:d7:ef:2d:0a:78:9f:3a:53:65: 62:63:54:e6:7b:f3:12:c1:ba:a0:a4:be:d4:e5:94:b6:9b:f6: ce:72:b1:b8:3e:f9:98:6d:41:3c:93:c6:10:bb:34:20:08:8d: b3:f1:ff:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjUwMzI5MDQwNTU2WhcNMjUwNDA1MDQwNTU2WjAYMRYwFAYD VQQDEw02N2U3NzFhNC03ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7G6of1SDEtWfxEcMAxAtd2y3YgL0HOhFY1nTVkTFJvIqzmi6SH4R6no9rMj+ cesNxDkiMQLQnlHlama820gjLD2G5S7fzfsJ0akffYuhafNM37yv+u5n8l7FN7da Tc78MxGsZZnopuRUU+YyWPMjxSC5itToEopS6mTP2OHe0Lc64mRBRydvTYuJVnxf d/MExEi54n4dh6fALSGNBJTXRKle49Di5gzI+AfVXEVc5Lef5akUydavPhLbq58d uPuT3aQBJSwoNKJq3SENmdR6d2DZ0OHOVVgxn8Z0Z9RDUEVu/ksvys/LwNjtkhps PWAOFmJGkG2553oSeUppwnfzaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqQdTxA EoVwt7pfugP79hP5q9qoMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo03WWlnHVTC0mnMnskuj5x4f9COTd2+UgbLzIho109BbezWd5gbaO e84s3tm8jt+akYbUxHZrGaPBVY14GQfgUsNsrlk6lLy5LCgPrYS4FFn+n12gJoFC BjED7WPXXEVGVSpW+C/0oBGiaDbhjYdaZ4GsesrMv9PVp7rTEQ08nOgNMSbQ/83p xrx1MaX0lh8kLsqMZ5b3Ends9TpIN1br3MvbzI5kjtUu7OrFvSBg5U6fHfHigX/V eEBnbo1PnfBqdQBdzOx9KDHdcRlLvKXX7y0KeJ86U2ViY1Tme/MSwbqgpL7U5ZS2 m/bOcrG4PvmYbUE8k8YQuzQgCI2z8f/o -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:14 2025 by rpki-client