$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json) Hash identifier: TP5/s+wT1JncEYrEikLnIA/6U/tEZOShoQiAhgHTwxw= Subject key identifier: B3:04:9C:7A:F8:C5:6D:C4:5F:47:9F:0A:A5:4B:A2:77:D7:9B:D6:7D Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft Manifest number: 0E Signing time: Sun 11 May 2025 06:48:32 +0000 Manifest this update: Sun 11 May 2025 06:48:31 +0000 Manifest next update: Sun 18 May 2025 06:48:31 +0000 Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: /b9ZUexWdT0d6zZHd8+c5dYBGD0o4dEY0MwB705+/50=) 2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Validity Not Before: May 11 06:48:31 2025 GMT Not After : May 18 06:48:31 2025 GMT Subject: CN=6820483f-ffaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:68:ac:b3:f8:16:91:3c:ad:01:76:7c:4d: 4f:b9:c4:5a:60:31:fd:5a:38:c4:f3:06:a6:19:12: 4b:26:1e:bd:95:74:7c:b4:d1:26:bf:14:a4:d2:3b: 92:3d:bf:ee:93:df:32:17:ad:25:70:bb:40:a0:dd: ad:f8:f2:d6:2f:2f:6e:42:25:7f:f6:17:3e:27:ad: 5a:af:93:5c:90:76:b6:80:99:55:a7:2a:04:95:5f: 46:b4:c6:12:1e:ba:ad:92:92:1a:a9:1d:e5:ed:f6: 15:bb:b6:0a:33:b4:df:0a:44:c6:d2:ea:3a:fd:45: 3e:4d:fa:72:89:35:c8:c4:9a:dc:f7:41:ff:5b:0b: 9b:75:83:6b:1e:de:63:f3:c3:30:9e:88:57:db:04: ea:e2:06:ac:20:24:15:b0:db:7c:bb:ee:4f:3c:46: ba:88:d3:a0:20:5e:3e:9a:75:e7:0b:a5:0b:61:2c: 82:fa:07:7f:10:c7:75:da:ae:d6:54:26:c0:b6:a5: 22:66:61:47:7a:f8:5d:20:f7:39:23:b7:fb:7e:5e: 2b:7a:08:f5:0c:4b:de:1a:d5:ad:d9:30:89:63:cd: fb:d4:02:f1:39:41:5b:cf:05:31:78:42:38:e3:08: ba:ea:75:f4:01:fc:c4:01:21:32:96:25:2f:72:93: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:04:9C:7A:F8:C5:6D:C4:5F:47:9F:0A:A5:4B:A2:77:D7:9B:D6:7D X509v3 Authority Key Identifier: keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:d6:3b:29:0e:ad:d0:54:07:87:e1:a9:bd:ca:ef:fd:4d:1e: 15:f8:c0:f0:c7:b2:9e:f6:8d:8e:da:58:9b:97:00:ef:e1:2a: a2:a7:ae:97:f7:5f:3d:eb:ea:72:37:6a:66:87:00:db:55:cb: a0:ab:5d:72:cd:ba:cc:89:61:d2:64:48:dd:69:d8:28:56:2b: 1e:1d:49:d8:0c:fb:dc:a6:29:fc:25:a9:26:e1:32:22:7a:df: ed:10:f3:f3:b6:3b:4c:ed:12:00:f2:1f:3f:c7:27:93:5d:13: 47:02:1d:b9:4d:13:68:f1:61:a3:d8:35:7d:00:b4:a9:58:51: 83:1b:a7:15:a0:e7:d1:48:a5:69:96:5a:2b:fe:5a:e2:5a:f8: 9a:7c:ce:a2:8f:7d:1e:8c:8f:8c:c0:7a:2f:b6:fa:16:99:7b: 56:b5:fc:09:b8:1f:f0:08:8d:15:6c:35:80:65:1f:20:71:d9: a8:4c:c0:3e:f9:12:39:6b:31:dd:f5:52:5e:bf:d4:68:1e:8b: 48:a1:cf:f6:40:12:07:cb:b3:f6:e7:11:38:6e:78:d9:c6:d6: 33:10:eb:54:8b:1a:2f:95:a1:4f:09:69:5e:b3:f4:80:60:ea: eb:11:ea:bc:aa:65:be:d6:5e:4c:d3:19:a2:74:d2:54:d7:aa: 67:69:23:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEJDMTExMC8GA1UEBRMoNDI3NzNBQTg0MUQ3MEU3M0M0RUY3RDI3Qzk4RkNCOUQ0 NDIwQzQ2QzAeFw0yNTA1MTEwNjQ4MzFaFw0yNTA1MTgwNjQ4MzFaMBgxFjAUBgNV BAMTDTY4MjA0ODNmLWZmYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeSWiss/gWkTytAXZ8TU+5xFpgMf1aOMTzBqYZEksmHr2VdHy00Sa/FKTSO5I9 v+6T3zIXrSVwu0Cg3a348tYvL25CJX/2Fz4nrVqvk1yQdraAmVWnKgSVX0a0xhIe uq2SkhqpHeXt9hW7tgoztN8KRMbS6jr9RT5N+nKJNcjEmtz3Qf9bC5t1g2se3mPz wzCeiFfbBOriBqwgJBWw23y77k88RrqI06AgXj6adecLpQthLIL6B38Qx3XartZU JsC2pSJmYUd6+F0g9zkjt/t+Xit6CPUMS94a1a3ZMIljzfvUAvE5QVvPBTF4Qjjj CLrqdfQB/MQBITKWJS9ykx5LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUswScevjF bcRfR58KpUuid9eb1n0wHwYDVR0jBBgwFoAUQnc6qEHXDnPE730nyY/LnUQgxGww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QkMxLzE1MkQ1Qzg2MUI2 OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hH dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5jNnFFSFhEblBFNzMwbnlZX0xuVVFneEd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5Q RTczMG55WV9MblVRZ3hHdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN3WOykOrdBUB4fhqb3K7/1NHhX4wPDHsp72jY7aWJuXAO/hKqKnrpf3 Xz3r6nI3amaHANtVy6CrXXLNusyJYdJkSN1p2ChWKx4dSdgM+9ymKfwlqSbhMiJ6 3+0Q8/O2O0ztEgDyHz/HJ5NdE0cCHblNE2jxYaPYNX0AtKlYUYMbpxWg59FIpWmW Wiv+WuJa+Jp8zqKPfR6Mj4zAei+2+haZe1a1/Am4H/AIjRVsNYBlHyBx2ahMwD75 EjlrMd31Ul6/1Ggei0ihz/ZAEgfLs/bnEThueNnG1jMQ61SLGi+VoU8JaV6z9IBg 6usR6ryqZb7WXkzTGaJ00lTXqmdpI54= -----END CERTIFICATE-----Generated at Sun May 11 11:51:53 2025 by rpki-client