$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json) Hash identifier: Qu4BRffh+qwZ7p0skVwmruaMMe/IMNgqEffJl0NcPY4= Subject key identifier: EC:5C:1E:FE:35:FA:00:A9:2B:E1:93:2B:9F:F7:EE:42:E5:26:F1:40 Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Certificate serial: 0AD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft Manifest number: 0ACF Signing time: Fri 30 May 2025 19:38:01 +0000 Manifest this update: Fri 30 May 2025 19:38:00 +0000 Manifest next update: Fri 06 Jun 2025 19:38:00 +0000 Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: yRoej/yUtYxDqjsRIcjEZ8DW+NoUAhDfAlFAU7PN3Xk=) 2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: AtiHUqqiSc5seLUNoB/SjIutv6okcY16FsBOaprHkwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2774 (0xad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Validity Not Before: May 30 19:38:00 2025 GMT Not After : Jun 6 19:38:00 2025 GMT Subject: CN=683a0919-3ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:99:13:0f:ad:39:cc:ab:e2:d1:06:77:66: 8e:0a:37:f1:da:0d:be:4a:3b:6e:05:8d:3a:fa:bc: f8:f9:a6:2c:c6:dc:0d:45:5e:64:5c:92:ea:ea:25: 95:e7:0b:77:4b:9e:6a:98:04:8e:c3:38:94:ad:68: e6:a9:4a:5b:6e:3d:55:35:0c:5d:cd:01:08:57:c3: e6:7d:f6:30:b6:da:e1:1d:f1:a4:1d:37:cc:ac:79: 10:71:88:2f:18:dd:96:29:d1:5f:62:7c:be:19:ef: 58:6a:05:9a:74:9e:ea:ba:07:a5:e7:cc:b6:d4:a4: fc:d2:d6:3e:0b:7a:09:78:47:5a:ef:48:3b:54:4f: f5:75:61:83:6a:3a:68:77:88:86:8d:6c:16:e7:97: e4:b5:30:d4:d8:f7:73:a0:47:7e:4c:22:d6:aa:2a: 47:57:99:f9:9f:22:8a:fe:e0:d9:74:c9:d8:25:31: 14:e2:b0:d7:dc:32:d6:3f:a6:ba:6d:ef:02:77:66: 0a:3b:06:b9:c0:7e:63:19:f5:e8:ab:0c:e5:57:60: 50:3c:28:bf:33:1f:8a:e8:87:94:d2:d6:e2:05:31: ed:90:f7:8f:cf:57:55:e5:1d:4a:d5:db:ba:37:70: 70:3a:2f:4d:20:1d:aa:cb:61:16:71:14:0e:70:a1: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5C:1E:FE:35:FA:00:A9:2B:E1:93:2B:9F:F7:EE:42:E5:26:F1:40 X509v3 Authority Key Identifier: keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:80:9f:6a:a8:25:18:67:9e:ea:bb:29:82:00:09:6e:56:b3: be:cc:c0:ef:e4:d9:be:f3:09:a8:da:b0:15:31:10:d2:a1:59: 3a:e9:80:6e:04:39:5c:1b:e1:68:d5:c5:7a:c8:e2:77:b1:bd: 77:5b:ba:8f:71:fb:49:74:9a:26:c6:5c:c7:71:a8:ba:7a:61: fa:27:95:0b:84:7d:ac:cb:e1:8e:ca:ab:7e:95:ca:d6:37:13: 95:f8:df:a9:86:de:fc:91:48:e6:19:1b:f5:1b:e2:f4:8e:8e: 28:07:9a:a3:2a:9d:87:4b:41:46:be:41:d9:fd:3b:9e:f0:a1: 07:2d:55:bc:ff:06:53:ec:01:30:38:c8:8b:f5:8b:b1:a4:cc: 14:00:73:b3:08:8f:5e:75:ef:df:e2:5a:62:c9:fe:44:25:93: cd:ae:53:33:28:74:58:68:20:38:6a:14:23:88:65:eb:4d:a3: 41:31:2e:d2:c2:3b:98:bf:06:e1:dc:d2:a7:c7:b1:84:3d:74: a2:59:7a:ff:73:0a:72:c4:07:8d:fc:0c:90:85:9b:d1:77:41: 15:46:a7:44:b2:5d:b3:a1:3c:dc:ac:29:fe:4d:f9:d1:b8:39: 0a:53:64:59:83:fc:13:c6:85:65:73:78:9f:68:34:0b:f2:e5: 7e:89:53:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4 MTU3OEVDQjUwHhcNMjUwNTMwMTkzODAwWhcNMjUwNjA2MTkzODAwWjAYMRYwFAYD VQQDEw02ODNhMDkxOS0zYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5aZEw+tOcyr4tEGd2aOCjfx2g2+SjtuBY06+rz4+aYsxtwNRV5kXJLq6iWV 5wt3S55qmASOwziUrWjmqUpbbj1VNQxdzQEIV8PmffYwttrhHfGkHTfMrHkQcYgv GN2WKdFfYny+Ge9YagWadJ7qugel58y21KT80tY+C3oJeEda70g7VE/1dWGDajpo d4iGjWwW55fktTDU2PdzoEd+TCLWqipHV5n5nyKK/uDZdMnYJTEU4rDX3DLWP6a6 be8Cd2YKOwa5wH5jGfXoqwzlV2BQPCi/Mx+K6IeU0tbiBTHtkPePz1dV5R1K1du6 N3BwOi9NIB2qy2EWcRQOcKGh/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxcHv41 +gCpK+GTK5/37kLlJvFAMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4gJ9qqCUYZ57quymCAAluVrO+zMDv5Nm+8wmo2rAVMRDSoVk66YBu BDlcG+Fo1cV6yOJ3sb13W7qPcftJdJomxlzHcai6emH6J5ULhH2sy+GOyqt+lcrW NxOV+N+pht78kUjmGRv1G+L0jo4oB5qjKp2HS0FGvkHZ/Tue8KEHLVW8/wZT7AEw OMiL9YuxpMwUAHOzCI9ede/f4lpiyf5EJZPNrlMzKHRYaCA4ahQjiGXrTaNBMS7S wjuYvwbh3NKnx7GEPXSiWXr/cwpyxAeN/AyQhZvRd0EVRqdEsl2zoTzcrCn+TfnR uDkKU2RZg/wTxoVlc3ifaDQL8uV+iVOX -----END CERTIFICATE-----Generated at Sat May 31 15:29:58 2025 by rpki-client