$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft File: QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json) Hash identifier: ubIGBC/g/AGLEvqWhkEh+sfeqPpceyS8jCO5VVX4NyY= Subject key identifier: 50:BC:A2:75:6F:C1:54:A5:FE:11:FE:91:66:33:D0:6F:60:38:54:9A Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 260B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft Manifest number: 1A39 Signing time: Fri 30 May 2025 17:49:47 +0000 Manifest this update: Fri 30 May 2025 17:49:47 +0000 Manifest next update: Fri 06 Jun 2025 17:49:47 +0000 Files and hashes: 1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: XzJ3XsgGBJFX0W4gY4HDcIULqb1KjkKKRHDLc/H/Fw4=) 2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: xde9rcF7arjQKSpEl1z3GPvE6yFSAQhR41hdAHdnobY=) 3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: 7ymijPhFFrjNOoEBbG9QGUazILg2gwyz53xd9qGXZ7E=) 4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: an2OvMEZY7jpIn8qhWkz+zXkJdczOHSo4w/pfCuVCtg=) 5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: 0byjmZ6ihSM1FC2/IAcTNGJ9h4MRrSpansIbltNvY/U=) 6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: jAt/+7M8Clzxb8DrcJYXVCG7UBr2uwZCX3gVdw4Zrwk=) 7: B53FD334575411ECAA094876C4F9AE02.roa (hash: 9aWzxH45IEjXcE34e4q4CPPoVSXphSOVs+vWi0Mf79c=) 8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: 2xQSKnH/mFv+v9sFhs1Bx4fGKhwbaniIRH6+EJCsrJc=) 9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: S/V+FSIqi+kUgXCiZkiOqjGpUPU2a8XYGBOwtxaDH4w=) 10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: Whd7O0h6vLYtsYWJCJz6bRkTMOgBubGgIflVOzkj9YU=) 11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: XsCNsgirp/F7q8G+gXiobB8kBnUNk1PBpyNnvgrKBZg=) 12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: JxJpLnF2A58P7LiuOMa3qMF+uUW1f31BWjEOfa4AY0c=) 13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: LnuO0pX8BwvbmAbZ4dXFrMEQsulixDbbXmR6ahAH9XQ=) 14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: LsoEpwMYLf2Jasklfj3/l8n9ySvUmMIt+P8enVxoluY=) 15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: H84rUZ3KdPkBY7e6ffHfuRUehvtnIe+74xC7gkrHMCs=) 16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: ZSMVzkxJl+x2Ge+EyHiRlh5wNiGvkpQlAUSdvcGiDU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9739 (0x260b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: May 30 17:49:47 2025 GMT Not After : Jun 6 17:49:47 2025 GMT Subject: CN=6839efbb-aa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:3a:fa:bb:a5:2e:c5:c0:e6:03:e3:fe:3d: b7:de:bd:33:56:89:22:5c:49:d8:c4:59:f4:db:0f: b4:da:bc:8b:8f:1b:45:cd:f5:e9:89:8f:03:3b:cf: 0c:06:15:a0:3a:a4:c6:7e:ef:70:be:7d:bd:70:8b: 1c:42:1b:aa:eb:e6:86:30:15:85:ae:b8:2a:03:4a: e7:9c:b8:01:56:8d:b7:0c:45:13:35:73:b5:0c:84: ec:06:08:e1:3c:5a:9d:83:05:5e:5a:6f:7e:1a:32: de:f0:e7:67:08:db:58:56:97:f1:bb:1a:c8:c9:cc: f7:fe:90:b8:85:ad:c6:77:e0:38:42:41:24:12:05: d7:91:7c:5f:e6:91:8a:da:8c:6b:0c:85:6a:29:50: ef:1e:2e:2a:e2:8a:a4:58:14:c2:4a:f2:5d:ab:28: 20:71:d6:4b:69:74:cc:a5:da:38:af:67:fd:c9:79: c9:dc:2d:ed:03:49:60:22:09:59:58:ad:e5:17:48: 22:91:3d:3e:94:5f:e4:c2:d0:ad:df:58:c0:96:30: 3d:23:d2:83:8f:46:32:59:81:d7:9f:97:57:f1:25: 20:35:88:ac:51:10:fe:69:de:d9:c1:8e:83:86:09: 08:bb:c7:6e:cd:5f:bf:5a:6d:e4:72:40:f7:cd:ff: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:A2:75:6F:C1:54:A5:FE:11:FE:91:66:33:D0:6F:60:38:54:9A X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:60:1e:26:2e:60:92:94:69:dd:1a:15:c8:43:17:5e:18:ec: 24:9d:3c:fd:52:d8:59:16:b6:dd:c4:9f:9c:30:a5:c6:61:01: d9:70:30:b4:b7:30:19:9b:c3:4d:df:ce:c7:f0:ab:13:8a:74: 88:0a:f6:e8:32:07:ca:f8:cb:eb:59:af:11:2b:8e:ae:80:76: f3:2c:47:a9:35:e7:26:b7:cd:2e:56:ad:bd:23:3d:7f:1b:4a: 70:9a:10:0c:cb:62:cb:59:f9:e9:8c:09:19:00:d2:f7:8e:a8: 11:0c:c8:c7:9e:80:79:35:63:0c:dd:f0:2e:5b:8f:f0:e0:b9: 14:3c:2d:52:73:8c:bd:a0:15:23:46:fb:7f:9b:50:9b:9d:08: bd:f3:f4:e1:7e:43:a3:70:ba:b9:62:07:ef:34:13:f6:f4:63: 57:de:98:91:81:8d:f2:f1:68:75:e7:9a:ff:86:b6:cf:bf:d1: bd:c6:a3:63:83:20:42:84:0c:5e:49:16:0f:fa:59:d6:17:75: cb:b5:8b:e5:e6:28:8a:65:3f:67:de:c4:85:da:e0:7a:7e:ab: 50:e2:c4:a9:1f:13:11:37:cb:c3:1f:47:1b:55:4e:94:4c:4c: c8:da:0f:e7:6f:96:be:3b:41:8a:f6:3f:7d:60:13:ee:3c:15: 44:e9:7d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjUwNTMwMTc0OTQ3WhcNMjUwNjA2MTc0OTQ3WjAYMRYwFAYD VQQDEw02ODM5ZWZiYi1hYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvA6+rulLsXA5gPj/j233r0zVokiXEnYxFn02w+02ryLjxtFzfXpiY8DO88M BhWgOqTGfu9wvn29cIscQhuq6+aGMBWFrrgqA0rnnLgBVo23DEUTNXO1DITsBgjh PFqdgwVeWm9+GjLe8OdnCNtYVpfxuxrIycz3/pC4ha3Gd+A4QkEkEgXXkXxf5pGK 2oxrDIVqKVDvHi4q4oqkWBTCSvJdqyggcdZLaXTMpdo4r2f9yXnJ3C3tA0lgIglZ WK3lF0gikT0+lF/kwtCt31jAljA9I9KDj0YyWYHXn5dX8SUgNYisURD+ad7ZwY6D hgkIu8duzV+/Wm3kckD3zf9G9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFC8onVv wVSl/hH+kWYz0G9gOFSaMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgYB4mLmCSlGndGhXIQxdeGOwknTz9UthZFrbdxJ+cMKXGYQHZcDC0 tzAZm8NN387H8KsTinSICvboMgfK+MvrWa8RK46ugHbzLEepNecmt80uVq29Iz1/ G0pwmhAMy2LLWfnpjAkZANL3jqgRDMjHnoB5NWMM3fAuW4/w4LkUPC1Sc4y9oBUj Rvt/m1CbnQi98/ThfkOjcLq5YgfvNBP29GNX3piRgY3y8Wh155r/hrbPv9G9xqNj gyBChAxeSRYP+lnWF3XLtYvl5iiKZT9n3sSF2uB6fqtQ4sSpHxMRN8vDH0cbVU6U TEzI2g/nb5a+O0GK9j99YBPuPBVE6X0l -----END CERTIFICATE-----Generated at Sat May 31 17:11:26 2025 by rpki-client