$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft File: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json) Hash identifier: sOHvHcjIwYl5LOssIo5phXF+O95y0c2Ls7WNqwpKDaw= Subject key identifier: 2C:55:A9:76:02:BE:33:B3:C3:29:47:7F:EB:BD:94:14:61:6E:9F:C5 Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD Certificate issuer: /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft Manifest number: 011C Signing time: Mon 09 Jun 2025 03:50:39 +0000 Manifest this update: Mon 09 Jun 2025 03:50:39 +0000 Manifest next update: Mon 16 Jun 2025 03:50:39 +0000 Files and hashes: 1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: 9tMVqOGqaZ03X1qxZiULVjW9kP4l9s76m40WteNsYWg=) 2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: qMb5p2DafyW8EWL0hOaIMJWbQyW8PlH7p5vaUcSXFyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Validity Not Before: Jun 9 03:50:39 2025 GMT Not After : Jun 16 03:50:39 2025 GMT Subject: CN=68465a0f-df66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:2c:da:fb:6c:4c:df:6e:e5:94:90:98:b4: 2a:67:bc:19:ca:58:56:2b:df:40:5b:ff:d5:93:56: f8:6d:8c:59:29:8b:39:e6:45:0e:4f:d6:7a:f3:d1: 17:75:7b:0d:7d:3e:80:a1:b5:0c:da:59:45:8f:47: d2:27:0f:91:bd:bd:0b:ad:c2:10:64:69:2f:6f:e2: 7b:29:cd:b6:4a:95:ea:6f:97:ec:e0:2c:be:57:62: 52:d7:58:b0:b3:34:4c:93:19:7f:38:85:e5:3c:57: fc:54:6d:09:09:61:4f:05:1e:ae:e2:d8:04:fd:ee: 91:f0:0d:a6:c1:02:f4:59:85:03:75:72:88:ea:26: 21:90:c0:25:42:79:d4:ea:6e:58:5e:99:9c:ef:fe: ff:ef:f9:6d:56:8f:db:99:b3:a5:c1:ed:95:ef:9b: 7d:38:ba:19:3a:4d:e8:af:61:19:ea:9c:45:b2:fa: 50:c6:df:c0:bc:59:9e:ab:aa:75:d4:4d:04:c5:98: b2:d8:c7:bb:d7:0a:0b:e2:25:29:b5:ef:0f:fa:a6: de:e8:df:ec:b7:03:e5:3d:8b:2e:1e:30:33:18:1f: 63:70:3b:5e:ac:02:7e:8b:a2:24:8a:df:7d:c7:21: 46:2a:65:f3:5f:2a:04:3d:55:98:6f:8b:83:d2:96: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:55:A9:76:02:BE:33:B3:C3:29:47:7F:EB:BD:94:14:61:6E:9F:C5 X509v3 Authority Key Identifier: keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:82:7d:21:82:15:e5:62:38:b7:8d:4f:91:d8:d7:f1:2c: 8c:ce:0c:ad:5b:32:77:27:4d:ed:35:b6:ff:90:ea:0a:d6:7b: 14:28:e7:cd:73:9d:02:c7:a9:47:a2:8d:e7:e7:df:3c:e4:0a: b3:c1:6e:4d:01:4c:2c:a3:73:3c:70:43:a7:7d:be:fc:3c:8c: 6e:01:eb:a1:51:16:9e:5a:b8:b2:f2:01:d4:5c:8b:16:db:75: 28:cd:73:5c:b5:4f:24:62:d9:fc:1f:59:37:c1:54:58:17:97: 64:d6:da:d2:7e:9a:22:02:3c:d6:3e:9a:06:90:a0:41:e1:cc: 75:5e:be:ab:d5:c1:46:26:b6:c3:0e:23:7a:8d:33:0f:3d:5b: 09:83:94:4d:0e:05:4e:23:14:97:a3:da:80:4f:37:dc:0c:7b: 62:b7:db:ee:29:75:8a:01:d3:a9:40:dc:a9:ef:37:9c:c2:bc: 8a:09:af:0a:a5:7c:31:5f:4d:ee:83:63:f2:9a:47:01:42:1d: aa:ee:34:fb:11:4e:4c:3a:32:d8:4c:59:31:35:8c:1e:4e:d8: 9f:2b:e8:2c:57:6c:71:09:01:77:7b:66:db:a9:eb:bd:9a:82: d4:e9:e6:a7:d2:46:d1:49:e2:30:d4:3c:be:60:17:df:d6:0e: 60:d7:d6:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3QTIxMTAvBgNVBAUTKDQzODJGOUFBMzAxNkZDQkYzMUY5MjRDRjEzMkU5NUJG OTI3MDlBREQwHhcNMjUwNjA5MDM1MDM5WhcNMjUwNjE2MDM1MDM5WjAYMRYwFAYD VQQDEw02ODQ2NWEwZi1kZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQAs2vtsTN9u5ZSQmLQqZ7wZylhWK99AW//Vk1b4bYxZKYs55kUOT9Z689EX dXsNfT6AobUM2llFj0fSJw+Rvb0LrcIQZGkvb+J7Kc22SpXqb5fs4Cy+V2JS11iw szRMkxl/OIXlPFf8VG0JCWFPBR6u4tgE/e6R8A2mwQL0WYUDdXKI6iYhkMAlQnnU 6m5YXpmc7/7/7/ltVo/bmbOlwe2V75t9OLoZOk3or2EZ6pxFsvpQxt/AvFmeq6p1 1E0ExZiy2Me71woL4iUpte8P+qbe6N/stwPlPYsuHjAzGB9jcDterAJ+i6Ikit99 xyFGKmXzXyoEPVWYb4uD0pbqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxVqXYC vjOzwylHf+u9lBRhbp/FMB8GA1UdIwQYMBaAFEOC+aowFvy/MfkkzxMulb+ScJrd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzdBMi80OUU2RTNENjkz M0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19MOHgtU1RQRXk2VnY1Sndt dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0TDVxakFXX0w4eC1TVFBFeTZWdjVKd210MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzdBMi80OUU2RTNENjkzM0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19M OHgtU1RQRXk2VnY1SndtdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIEYJ9IYIV5WI4t41PkdjX8SyMzgytWzJ3J03tNbb/kOoK1nsUKOfN c50Cx6lHoo3n59885AqzwW5NAUwso3M8cEOnfb78PIxuAeuhURaeWriy8gHUXIsW 23UozXNctU8kYtn8H1k3wVRYF5dk1trSfpoiAjzWPpoGkKBB4cx1Xr6r1cFGJrbD DiN6jTMPPVsJg5RNDgVOIxSXo9qATzfcDHtit9vuKXWKAdOpQNyp7zecwryKCa8K pXwxX03ug2PymkcBQh2q7jT7EU5MOjLYTFkxNYweTtifK+gsV2xxCQF3e2bbqeu9 moLU6ean0kbRSeIw1Dy+YBff1g5g19a/ -----END CERTIFICATE-----Generated at Mon Jun 9 21:47:08 2025 by rpki-client