$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: FQmk//3nY+Xz8EoQlerKIwRQ4K23Hgug87NeysVEjyY= Subject key identifier: C7:D5:39:5A:23:EA:F2:B5:88:F1:45:BF:C5:8A:3C:C7:3A:73:2E:99 Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 0546 Signing time: Fri 30 May 2025 23:37:52 +0000 Manifest this update: Fri 30 May 2025 23:37:51 +0000 Manifest next update: Fri 06 Jun 2025 23:37:51 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: wBN3BjAND4jswk1VsffdisMALoQw4xnRCtIYDryyCfc=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: K0g8xWII4g0z2vzjoBYClHiJj2EJk6kk9zBp36ie6T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: May 30 23:37:51 2025 GMT Not After : Jun 6 23:37:51 2025 GMT Subject: CN=683a414f-5e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:5f:3b:46:57:14:f5:2c:28:87:7a:03:3d: e2:48:e8:81:5d:27:b4:e4:37:a3:fc:60:67:30:7d: d3:32:54:f3:08:7c:dd:61:13:93:88:2f:c9:d8:6e: 5f:99:1a:9a:85:da:1d:95:a2:1f:f9:c1:c9:e4:7e: e9:52:74:bb:ff:50:81:39:db:30:e3:0d:84:7b:f6: ea:af:a5:86:a8:b7:30:cb:ef:9b:0c:3e:4f:2c:0e: 9d:cc:5d:c9:db:bc:58:52:df:69:36:60:d6:dc:12: ce:f7:df:d8:4a:93:93:1e:bc:27:2a:b6:52:5f:cb: 36:06:48:af:d8:e2:59:16:03:f7:98:ae:b1:59:3c: 9f:cf:75:d8:ce:a0:11:05:f4:b9:22:13:d0:92:dc: 76:37:9c:57:2e:f0:14:0f:84:71:79:a2:1e:ef:05: d6:0b:8a:ad:02:15:4c:ea:b7:21:c3:c6:f2:7d:3a: 6b:c5:19:26:4c:33:a2:15:fe:29:1b:93:dd:11:e0: f5:7a:df:1a:ef:8d:48:98:cb:78:dd:82:09:d6:18: c0:2f:17:aa:ca:95:51:2a:8a:db:4f:04:7f:55:2e: a9:25:65:f8:c0:70:8d:f9:12:34:7d:88:2a:36:24: 2b:16:11:d9:94:9c:56:36:6f:c8:8f:ca:d1:ad:20: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D5:39:5A:23:EA:F2:B5:88:F1:45:BF:C5:8A:3C:C7:3A:73:2E:99 X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:40:37:35:05:46:13:c8:3b:13:83:da:a3:72:a6:55:1e:2c: b3:f2:85:46:20:4f:9b:90:3b:20:92:85:fd:a3:36:b9:2b:e2: 34:1c:e3:d7:e0:92:fa:48:cc:08:6c:39:d0:93:aa:80:ca:2f: b8:03:55:06:49:6f:63:e8:26:fe:96:5e:4f:a3:a1:ec:e7:07: cb:3d:9a:45:19:ce:8e:4e:b4:c9:b8:bd:fd:0d:3e:26:a7:c7: c5:70:10:ae:8d:96:2c:a2:0c:93:df:30:19:4e:d1:2d:2b:c0: e0:8f:7b:49:98:e2:ca:be:0d:64:bf:7d:0b:24:2f:54:04:0d: 4b:0f:a4:59:a7:9a:cc:dc:a9:15:82:71:0e:a7:f4:f3:81:df: d9:26:26:51:3f:bf:8c:2d:b3:c5:5c:35:16:6f:fb:45:ef:86: b6:4b:8d:fd:87:2e:d9:cc:77:23:e4:08:bc:29:2b:eb:55:86: 0b:d1:f2:e8:f5:c8:8a:b1:f5:bd:be:65:a3:87:5d:19:d4:99: 21:52:5e:a6:42:7f:1e:60:3d:e2:8f:65:a9:9e:95:33:4c:b2: ba:1d:f6:4e:fa:4f:5f:0b:00:2b:6e:87:f0:a6:c1:8e:6a:78: 84:73:2c:1d:0d:8e:32:b2:07:3c:e2:0c:d5:6a:64:a3:44:88: 22:9e:35:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjUwNTMwMjMzNzUxWhcNMjUwNjA2MjMzNzUxWjAYMRYwFAYD VQQDEw02ODNhNDE0Zi01ZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTRfO0ZXFPUsKId6Az3iSOiBXSe05Dej/GBnMH3TMlTzCHzdYROTiC/J2G5f mRqahdodlaIf+cHJ5H7pUnS7/1CBOdsw4w2Ee/bqr6WGqLcwy++bDD5PLA6dzF3J 27xYUt9pNmDW3BLO99/YSpOTHrwnKrZSX8s2Bkiv2OJZFgP3mK6xWTyfz3XYzqAR BfS5IhPQktx2N5xXLvAUD4RxeaIe7wXWC4qtAhVM6rchw8byfTprxRkmTDOiFf4p G5PdEeD1et8a741ImMt43YIJ1hjALxeqypVRKorbTwR/VS6pJWX4wHCN+RI0fYgq NiQrFhHZlJxWNm/Ij8rRrSDsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfVOVoj 6vK1iPFFv8WKPMc6cy6ZMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwQDc1BUYTyDsTg9qjcqZVHiyz8oVGIE+bkDsgkoX9oza5K+I0HOPX 4JL6SMwIbDnQk6qAyi+4A1UGSW9j6Cb+ll5Po6Hs5wfLPZpFGc6OTrTJuL39DT4m p8fFcBCujZYsogyT3zAZTtEtK8Dgj3tJmOLKvg1kv30LJC9UBA1LD6RZp5rM3KkV gnEOp/Tzgd/ZJiZRP7+MLbPFXDUWb/tF74a2S439hy7ZzHcj5Ai8KSvrVYYL0fLo 9ciKsfW9vmWjh10Z1JkhUl6mQn8eYD3ij2WpnpUzTLK6HfZO+k9fCwArbofwpsGO aniEcywdDY4ysgc84gzVamSjRIginjXz -----END CERTIFICATE-----Generated at Sat May 31 16:39:50 2025 by rpki-client