$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: HUz9VC9EdiG/pWxgvURgy2fUq9UzZQUAcqP6hACN7lM= Subject key identifier: 42:36:C2:98:94:42:3D:43:C6:19:D5:C6:58:44:96:D6:3F:C2:9F:55 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 0147 Signing time: Sat 31 May 2025 03:58:19 +0000 Manifest this update: Sat 31 May 2025 03:58:19 +0000 Manifest next update: Sat 07 Jun 2025 03:58:19 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: aJzAC8qkaWMpM0CyToynV2xK4WPSpVUTizNfVdGaV1Y=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: ZZYkG0rN+pICOhz09TrHJ/M/KfssTlJ7hgwatztFUEg=) 3: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: C5/o5aDwWxMI021UTT3+Muuzc6BZ58/1ktFFSh5UflU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: May 31 03:58:19 2025 GMT Not After : Jun 7 03:58:19 2025 GMT Subject: CN=683a7e5b-7f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:d6:e0:ff:5a:2e:bb:03:b0:ea:0b:60:89: ac:47:bb:ca:34:cd:f2:cd:9e:bd:92:51:67:47:06: 71:ea:84:f8:85:1d:52:00:86:bc:5b:5f:85:5f:16: ad:af:6e:cc:53:4e:83:47:91:62:49:e4:88:2a:06: d1:13:e0:76:47:98:8c:ca:0a:f7:58:f1:bf:fa:7e: 84:0c:66:f1:54:97:c9:43:a9:78:e9:35:98:68:e0: 62:2b:61:19:17:57:a0:71:01:c2:c7:64:81:bd:c6: 35:95:14:f6:4c:b4:de:c5:19:94:2a:e9:14:d6:b8: e7:3f:de:76:68:9a:43:cd:ad:c2:e0:b9:c9:84:8f: f1:6d:cd:10:5c:1c:da:31:af:88:cc:9f:a6:d5:3e: 59:88:37:b9:f6:2d:2b:bd:85:4f:cd:7b:40:6b:6b: db:5b:46:1d:af:b4:d3:60:53:01:97:91:d1:8b:60: a1:09:c0:e3:6e:91:b0:e4:fc:1b:3a:cb:10:86:57: 87:25:6a:a8:05:03:cf:8b:53:bb:75:61:c4:83:3b: af:71:61:b6:4d:f1:0a:e4:ff:89:e9:35:1b:64:18: ca:78:d2:c0:da:a4:18:91:bf:aa:50:16:12:77:8c: 40:9d:d1:d4:1f:34:07:e7:6d:1a:10:17:5c:95:1e: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:36:C2:98:94:42:3D:43:C6:19:D5:C6:58:44:96:D6:3F:C2:9F:55 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f2:cb:cc:da:5d:0b:69:50:7f:77:e1:d9:91:28:eb:ff:79: b8:57:bb:4e:fc:9a:17:28:ca:e0:6f:f2:0c:74:1e:77:32:15: 01:a4:42:3f:63:5c:3e:f1:fa:a7:89:93:53:55:e7:45:d5:7a: 9b:f8:a9:4e:12:c2:98:49:8d:80:0e:7b:76:ba:5c:92:44:52: 01:b0:34:41:c6:29:7a:15:5e:dc:60:80:28:14:02:3e:9c:8f: 37:a5:d8:37:34:02:92:61:65:aa:52:2c:ea:95:d1:6a:bc:9d: 4f:8b:84:de:8f:b6:8d:4c:81:14:6c:84:b7:90:e5:d7:cd:22: de:6b:e3:87:fb:ea:dc:17:35:ca:02:62:32:25:e0:ef:69:e3: 92:12:88:9f:9b:23:20:87:f3:d4:74:f2:9e:a9:cd:9c:db:97: 2a:f9:c4:f8:31:ea:6a:0c:52:9c:49:11:e8:b4:50:c7:c8:68: a5:cb:1a:52:f7:a5:be:c6:c2:31:97:77:4a:1a:09:d2:cf:b2: 11:a5:b1:61:20:db:bb:52:59:80:2a:5c:b1:ae:11:bc:9e:84: f5:e3:7d:9a:da:33:bf:c6:3d:72:cf:21:c9:bb:45:c2:3a:c4: 55:e8:8a:ac:e3:e4:2b:be:66:fd:60:2b:f0:ae:20:94:04:f4: 2a:d7:6e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjUwNTMxMDM1ODE5WhcNMjUwNjA3MDM1ODE5WjAYMRYwFAYD VQQDEw02ODNhN2U1Yi03ZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uTW4P9aLrsDsOoLYImsR7vKNM3yzZ69klFnRwZx6oT4hR1SAIa8W1+FXxat r27MU06DR5FiSeSIKgbRE+B2R5iMygr3WPG/+n6EDGbxVJfJQ6l46TWYaOBiK2EZ F1egcQHCx2SBvcY1lRT2TLTexRmUKukU1rjnP952aJpDza3C4LnJhI/xbc0QXBza Ma+IzJ+m1T5ZiDe59i0rvYVPzXtAa2vbW0Ydr7TTYFMBl5HRi2ChCcDjbpGw5Pwb OssQhleHJWqoBQPPi1O7dWHEgzuvcWG2TfEK5P+J6TUbZBjKeNLA2qQYkb+qUBYS d4xAndHUHzQH520aEBdclR4ALwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI2wpiU Qj1DxhnVxlhEltY/wp9VMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd8svM2l0LaVB/d+HZkSjr/3m4V7tO/JoXKMrgb/IMdB53MhUBpEI/ Y1w+8fqniZNTVedF1Xqb+KlOEsKYSY2ADnt2ulySRFIBsDRBxil6FV7cYIAoFAI+ nI83pdg3NAKSYWWqUizqldFqvJ1Pi4Tej7aNTIEUbIS3kOXXzSLea+OH++rcFzXK AmIyJeDvaeOSEoifmyMgh/PUdPKeqc2c25cq+cT4MepqDFKcSRHotFDHyGilyxpS 96W+xsIxl3dKGgnSz7IRpbFhINu7UlmAKlyxrhG8noT1432a2jO/xj1yzyHJu0XC OsRV6Iqs4+Qrvmb9YCvwriCUBPQq124q -----END CERTIFICATE-----Generated at Sat May 31 17:32:54 2025 by rpki-client