$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: iZTH1vP7LcRgQ8Tqi9/ezTguzXy71NLWQ687dz4ZUzo= Subject key identifier: FB:F3:6A:69:7F:77:CE:38:E9:68:96:7C:61:45:46:D3:F2:F3:33:DC Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 05B7 Signing time: Fri 30 May 2025 23:20:33 +0000 Manifest this update: Fri 30 May 2025 23:20:33 +0000 Manifest next update: Fri 06 Jun 2025 23:20:33 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: UDlPYT65YmHMJ/ntUIwm3jPk5akBSdEjCnF9EKeYok4=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: g89YmoUlNGoW7vM9eZWI3Zges2WlbrLyhloBI6u/31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: May 30 23:20:33 2025 GMT Not After : Jun 6 23:20:33 2025 GMT Subject: CN=683a3d41-107b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:94:af:b7:66:14:d8:48:5f:20:cc:2e:dd: e3:2e:a1:c9:a9:cb:82:7c:84:27:e1:7b:6e:9b:b0: d7:24:7a:27:ef:d9:74:eb:d2:d9:e2:b4:99:54:42: 2f:b7:e0:43:6c:f6:32:aa:76:6b:d5:9d:26:04:0f: c8:e6:a5:0a:f7:a4:2d:10:ad:c3:03:25:f9:ea:50: 4b:1f:aa:ab:d7:1c:44:0f:66:8a:e6:50:ec:85:ac: 5d:db:b5:80:23:b9:e5:02:f8:3e:56:1c:5a:83:9e: 84:f7:95:f5:ad:6f:cc:07:fc:30:d6:15:91:a1:ba: f2:ca:b9:ed:c9:fd:c2:0e:ba:fb:9f:67:78:d7:de: fc:5d:af:3b:96:3c:4b:e6:ac:4c:7b:8e:4e:02:30: 41:e6:49:66:45:df:2e:d2:9c:a6:9e:e6:25:c7:ff: f0:cc:67:55:09:a5:9e:11:46:a2:2a:e7:54:70:42: 51:b6:bc:eb:00:a9:7b:e9:5f:f8:43:b4:73:bc:b9: 07:ea:32:b1:81:e6:b8:94:5b:e7:29:73:b9:41:8f: f9:43:01:e9:8a:a2:e7:b0:1f:dc:9f:a3:01:b0:75: e3:47:c3:c1:4e:18:fb:17:8a:13:7e:68:98:8b:7d: 3d:87:64:6c:e2:91:33:15:1f:b1:3b:bf:bf:f5:01: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F3:6A:69:7F:77:CE:38:E9:68:96:7C:61:45:46:D3:F2:F3:33:DC X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:50:8d:3a:60:c6:8c:dd:5b:0a:39:20:62:95:09:d5:7e:2a: 86:2b:e5:35:60:19:be:31:b5:15:1c:bd:e5:cf:ca:d7:c4:54: d2:48:d9:71:0a:39:0f:d4:e7:d3:96:cc:5f:b8:46:8d:be:3e: 0c:32:c0:fa:aa:3c:a8:8d:9a:56:da:d3:7e:ae:34:f6:25:26: db:09:0f:60:f6:f1:06:c6:54:30:62:f8:b2:aa:8b:0c:97:7c: a8:2c:88:2c:fc:9c:de:10:57:d0:29:d8:bc:f4:07:84:16:8e: f9:e9:68:f9:9d:0a:a9:49:61:1d:0a:fa:7f:24:1a:d8:bf:72: d9:b8:91:3d:be:39:44:ef:2c:87:d6:aa:ff:10:9b:da:ff:a4: 22:2d:ee:1c:b2:4e:99:b3:5c:a3:ef:15:7d:6e:cd:18:23:2f: 91:f3:80:40:19:14:ad:9d:b1:28:17:03:52:77:9b:89:6b:47: 09:0a:13:b7:84:f0:46:53:07:98:d5:d4:63:3d:cf:97:fd:55: 3f:70:99:e2:f6:57:a9:72:5d:9f:aa:68:0a:f4:6e:a7:b0:62: bb:04:05:e5:5d:19:e5:7c:da:de:77:a1:1b:57:ce:fe:3b:c5: ed:94:89:d5:44:a4:09:84:cc:ac:39:16:15:46:91:29:e5:c3: 8f:a8:a7:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUwNTMwMjMyMDMzWhcNMjUwNjA2MjMyMDMzWjAYMRYwFAYD VQQDEw02ODNhM2Q0MS0xMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutSUr7dmFNhIXyDMLt3jLqHJqcuCfIQn4Xtum7DXJHon79l069LZ4rSZVEIv t+BDbPYyqnZr1Z0mBA/I5qUK96QtEK3DAyX56lBLH6qr1xxED2aK5lDshaxd27WA I7nlAvg+Vhxag56E95X1rW/MB/ww1hWRobryyrntyf3CDrr7n2d41978Xa87ljxL 5qxMe45OAjBB5klmRd8u0pymnuYlx//wzGdVCaWeEUaiKudUcEJRtrzrAKl76V/4 Q7RzvLkH6jKxgea4lFvnKXO5QY/5QwHpiqLnsB/cn6MBsHXjR8PBThj7F4oTfmiY i309h2Rs4pEzFR+xO7+/9QFsZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvzaml/ d8446WiWfGFFRtPy8zPcMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgUI06YMaM3VsKOSBilQnVfiqGK+U1YBm+MbUVHL3lz8rXxFTSSNlx CjkP1OfTlsxfuEaNvj4MMsD6qjyojZpW2tN+rjT2JSbbCQ9g9vEGxlQwYviyqosM l3yoLIgs/JzeEFfQKdi89AeEFo756Wj5nQqpSWEdCvp/JBrYv3LZuJE9vjlE7yyH 1qr/EJva/6QiLe4csk6Zs1yj7xV9bs0YIy+R84BAGRStnbEoFwNSd5uJa0cJChO3 hPBGUweY1dRjPc+X/VU/cJni9lepcl2fqmgK9G6nsGK7BAXlXRnlfNred6EbV87+ O8XtlInVRKQJhMysORYVRpEp5cOPqKfU -----END CERTIFICATE-----Generated at Sat May 31 17:39:20 2025 by rpki-client