$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: NxjpuLKic0zi5aAdholNJoZYhheuAPOUPqdGonQmLSo= Subject key identifier: 44:07:D3:D7:B6:A2:26:78:9D:8D:E0:3A:90:1F:0E:3B:FA:4D:7D:F1 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 35F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3543 Signing time: Fri 04 Apr 2025 14:27:52 +0000 Manifest this update: Fri 04 Apr 2025 14:27:51 +0000 Manifest next update: Fri 11 Apr 2025 14:27:51 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: EdFfIx89gNUS4hmGw4ea+YroLO4sGSdiuOnaGyBlifY=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: NTDwpkNkDHYvPlbXgriI89H0onb/SkI96RAfrzWAkp8=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: qhnG18/aMLm+bgbad5pzVpZ66jdrVbEJIQGuGTdYEbI=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: 20lxG5YaQGKYCeNDIccsMuS2DiiyPh+IbwNarzaaMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13815 (0x35f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5 Validity Not Before: Apr 4 14:27:51 2025 GMT Not After : Apr 11 14:27:51 2025 GMT Subject: CN=67efec68-6c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:8a:dc:5a:ae:ff:73:dd:47:38:77:8c:fa: 8d:25:05:ee:fe:1f:95:af:10:25:82:48:9b:21:99: 07:3e:d6:e7:db:77:ba:76:d8:aa:d0:e7:b3:a5:49: 5e:f5:a2:42:5c:11:9c:32:61:42:02:a6:1b:8b:84: 18:89:78:14:11:75:39:ff:a7:d9:d5:a3:47:7b:45: 4d:22:2c:53:f2:fe:9b:a2:95:73:eb:c8:01:77:ed: c2:0d:74:ea:17:5f:1f:59:49:3f:63:db:ef:b8:51: 28:3b:2d:a9:90:f2:3f:d8:5e:6d:15:c1:08:f6:d5: a0:19:6d:33:53:d5:35:22:51:be:3b:b7:2e:7c:15: 7f:9b:3a:3a:25:4c:21:94:2e:45:c7:d8:e3:b7:0d: a5:0f:7a:ae:34:38:80:2b:62:37:93:f0:63:41:f2: 72:ec:f5:c6:61:16:34:10:a3:b3:69:2e:12:f1:c0: 26:df:91:e2:7a:9a:9a:5e:b8:4a:f4:56:72:4f:c9: c6:97:90:02:b9:72:c4:c1:2d:f5:38:83:67:0b:0b: d0:92:21:86:95:2c:4d:de:eb:89:7c:28:5f:ac:a0: e0:1a:54:90:7e:92:93:28:39:e7:2e:73:7b:48:37: e3:c4:18:cd:41:c8:3b:e8:80:20:08:1d:7a:d7:44: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:07:D3:D7:B6:A2:26:78:9D:8D:E0:3A:90:1F:0E:3B:FA:4D:7D:F1 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e9:a5:48:33:71:b3:e3:f0:1c:6f:71:fd:06:8a:e0:f6:2e: 32:d9:de:e3:18:43:61:e5:8f:8a:b8:11:ad:aa:3d:59:a8:fa: a3:ad:24:02:aa:13:64:23:46:d6:50:99:92:b7:01:f9:e2:37: 2a:7c:02:10:aa:f5:43:00:17:4d:99:e4:ca:36:89:17:50:f4: 78:90:69:27:04:3f:5d:12:b3:a1:d8:4c:a4:99:82:f1:62:ec: 51:8a:22:0e:08:5a:1b:59:ab:84:71:08:b2:2e:98:6b:f0:87: 30:b2:f1:13:a8:b6:11:0f:96:07:06:1e:f0:88:c9:89:ec:6a: df:3d:10:71:6e:60:a0:de:a1:5b:c5:fe:30:74:ff:39:41:61: 07:f0:19:3c:28:b4:6c:4f:e7:0f:41:16:6b:f4:67:f7:ae:2a: c7:33:ca:da:8e:99:c1:90:2f:4a:cb:68:06:15:50:19:8d:39: 01:14:d0:f8:ac:4e:a1:1d:9a:91:17:33:26:44:a7:f5:22:ef: f7:f0:d4:00:c8:53:51:42:07:be:dc:0a:b5:89:39:3e:f0:0d: 6e:59:76:fc:0e:e2:30:4a:d8:fe:32:6e:31:8a:6f:90:99:ed: 00:14:90:68:40:40:10:d6:73:ff:67:93:6f:26:d8:22:cf:ec: 4c:04:fe:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwNDA0MTQyNzUxWhcNMjUwNDExMTQyNzUxWjAYMRYwFAYD VQQDEw02N2VmZWM2OC02YzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlaK3Fqu/3PdRzh3jPqNJQXu/h+VrxAlgkibIZkHPtbn23e6dtiq0OezpUle 9aJCXBGcMmFCAqYbi4QYiXgUEXU5/6fZ1aNHe0VNIixT8v6bopVz68gBd+3CDXTq F18fWUk/Y9vvuFEoOy2pkPI/2F5tFcEI9tWgGW0zU9U1IlG+O7cufBV/mzo6JUwh lC5Fx9jjtw2lD3quNDiAK2I3k/BjQfJy7PXGYRY0EKOzaS4S8cAm35HiepqaXrhK 9FZyT8nGl5ACuXLEwS31OINnCwvQkiGGlSxN3uuJfChfrKDgGlSQfpKTKDnnLnN7 SDfjxBjNQcg76IAgCB1610TeDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQH09e2 oiZ4nY3gOpAfDjv6TX3xMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh6aVIM3Gz4/Acb3H9Borg9i4y2d7jGENh5Y+KuBGtqj1ZqPqjrSQC qhNkI0bWUJmStwH54jcqfAIQqvVDABdNmeTKNokXUPR4kGknBD9dErOh2EykmYLx YuxRiiIOCFobWauEcQiyLphr8IcwsvETqLYRD5YHBh7wiMmJ7GrfPRBxbmCg3qFb xf4wdP85QWEH8Bk8KLRsT+cPQRZr9Gf3rirHM8rajpnBkC9Ky2gGFVAZjTkBFND4 rE6hHZqRFzMmRKf1Iu/38NQAyFNRQge+3Aq1iTk+8A1uWXb8DuIwStj+Mm4xim+Q me0AFJBoQEAQ1nP/Z5NvJtgiz+xMBP4u -----END CERTIFICATE-----Generated at Sat Apr 5 11:33:03 2025 by rpki-client