$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft File: quimiBHXcVavSOB4FMqP1mI9mL4.mft (raw, json) Hash identifier: ZEQEeLwaXi3NziEMOzEKQq0mrVb0kKXMK9NKrNXiRyk= Subject key identifier: 5A:89:9E:5C:76:BD:37:50:65:66:60:AB:09:6A:3D:D3:94:8E:30:0A Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft Manifest number: 0C Signing time: Sat 31 May 2025 07:38:30 +0000 Manifest this update: Sat 31 May 2025 07:38:29 +0000 Manifest next update: Sat 07 Jun 2025 07:38:29 +0000 Files and hashes: 1: quimiBHXcVavSOB4FMqP1mI9mL4.crl (hash: UqeUHsG0p6sZHGov86msswpA9Z1EOwkOjUOVP7OfTfk=) 2: E45745342AC411F0B2B1822CC4F9AE02.roa (hash: vV4viCWjAxoxyHSeBD7Bmq6t4EgnYb1F/xaDHHxFuCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Validity Not Before: May 31 07:38:29 2025 GMT Not After : Jun 7 07:38:29 2025 GMT Subject: CN=683ab1f5-afc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:85:56:f8:7f:c6:60:96:4f:69:7c:c6:74: 9d:7f:e4:5f:9d:7a:08:09:93:49:ed:8a:32:96:a0: df:63:c8:c9:47:eb:45:63:4c:82:6e:f4:97:bc:75: 04:b2:1c:c1:56:17:a0:67:91:54:8a:a1:70:87:1a: eb:7c:65:36:88:cd:96:33:f9:5c:24:99:1d:77:17: f2:21:d7:24:ee:54:ae:6d:51:44:97:0a:db:ce:64: ad:de:03:c5:be:2b:c1:64:11:83:5a:97:80:69:4b: 5a:d6:34:9e:63:03:b0:76:2b:b3:39:af:3d:5d:9f: 16:c8:18:f4:3d:e1:28:c1:3e:64:ec:da:15:d3:c4: 19:f8:fc:61:e8:4c:dd:95:93:7c:99:a2:b5:e6:3f: 30:af:8e:02:e5:65:2e:a6:6e:8d:23:07:9d:42:a3: b5:12:6d:29:80:e4:ad:f3:35:3c:5c:cc:5a:9c:3b: ae:de:2f:26:64:a9:70:bf:f6:8e:2f:96:e5:55:53: 56:f5:26:57:a3:c9:7a:25:e0:8d:38:a9:4e:a5:74: f0:83:8d:0f:e9:49:ad:3d:a0:a5:e0:f3:02:0a:8c: 64:5c:d2:40:2c:6e:ca:b9:15:67:91:08:6b:0c:ef: 5e:c8:34:4a:6f:c5:4f:a5:99:4c:fb:48:38:0c:f9: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:89:9E:5C:76:BD:37:50:65:66:60:AB:09:6A:3D:D3:94:8E:30:0A X509v3 Authority Key Identifier: keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:40:d3:6e:0d:3c:b9:64:b8:bb:a4:c4:a3:b7:9f:fb:97:35: 10:e7:bb:f2:bc:4e:ad:72:07:cc:c3:39:e0:c4:3c:f0:2b:31: eb:5a:16:34:f9:2e:aa:50:6c:21:80:df:cd:5e:ea:d8:26:11: c5:8a:ef:c1:e5:e9:95:d2:f1:b5:78:d1:96:71:14:1a:12:67: e4:fb:9d:10:24:50:c0:79:4b:a0:fc:26:cb:e9:75:81:ba:ef: f2:e5:28:5b:99:96:1c:71:42:57:42:bb:0d:17:62:1b:82:7e: 63:d5:b3:89:c5:48:dc:40:c9:c5:d4:a7:8b:7f:79:45:21:a6: be:c8:8d:18:14:dc:5a:a8:0d:f7:c0:58:9e:81:55:27:80:83: 81:43:e6:e9:f8:df:12:88:3a:df:d7:61:0f:0f:c1:d7:61:37: d7:e6:4b:13:66:7c:89:9f:49:cc:45:7e:4f:77:db:2d:b2:eb: 36:ce:7e:11:9c:1a:bf:dc:a4:44:89:e6:ba:e9:eb:12:47:3f: d7:77:d0:90:9d:1f:2d:14:d5:93:ee:52:d1:0c:c9:ca:47:b4: cb:f3:d5:4b:ce:ee:c0:0e:c0:a4:f9:37:b8:4b:a8:75:8d:de: 2b:c2:8d:92:cf:64:98:49:68:02:7d:16:2c:cc:74:8c:d6:19: d9:10:de:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0RGOTExMC8GA1UEBRMoQUFFOEE2ODgxMUQ3NzE1NkFGNDhFMDc4MTRDQThGRDY2 MjNEOThCRTAeFw0yNTA1MzEwNzM4MjlaFw0yNTA2MDcwNzM4MjlaMBgxFjAUBgNV BAMTDTY4M2FiMWY1LWFmYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi+IVW+H/GYJZPaXzGdJ1/5F+deggJk0ntijKWoN9jyMlH60VjTIJu9Je8dQSy HMFWF6BnkVSKoXCHGut8ZTaIzZYz+VwkmR13F/Ih1yTuVK5tUUSXCtvOZK3eA8W+ K8FkEYNal4BpS1rWNJ5jA7B2K7M5rz1dnxbIGPQ94SjBPmTs2hXTxBn4/GHoTN2V k3yZorXmPzCvjgLlZS6mbo0jB51Co7USbSmA5K3zNTxczFqcO67eLyZkqXC/9o4v luVVU1b1JlejyXol4I04qU6ldPCDjQ/pSa09oKXg8wIKjGRc0kAsbsq5FWeRCGsM 717INEpvxU+lmUz7SDgM+cqXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWomeXHa9 N1BlZmCrCWo905SOMAowHwYDVR0jBBgwFoAUquimiBHXcVavSOB4FMqP1mI9mL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDREY5LzAxNjQ5NzM2MkFD NDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1ZhdlNPQjRGTXFQMW1JOW1M NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVpbWlCSFhjVmF2U09CNEZNcVAxbUk5bUw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD REY5LzAxNjQ5NzM2MkFDNDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1Zh dlNPQjRGTXFQMW1JOW1MNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNA024NPLlkuLukxKO3n/uXNRDnu/K8Tq1yB8zDOeDEPPArMetaFjT5 LqpQbCGA381e6tgmEcWK78Hl6ZXS8bV40ZZxFBoSZ+T7nRAkUMB5S6D8JsvpdYG6 7/LlKFuZlhxxQldCuw0XYhuCfmPVs4nFSNxAycXUp4t/eUUhpr7IjRgU3FqoDffA WJ6BVSeAg4FD5un43xKIOt/XYQ8PwddhN9fmSxNmfImfScxFfk932y2y6zbOfhGc Gr/cpESJ5rrp6xJHP9d30JCdHy0U1ZPuUtEMycpHtMvz1UvO7sAOwKT5N7hLqHWN 3ivCjZLPZJhJaAJ9FizMdIzWGdkQ3i4= -----END CERTIFICATE-----Generated at Sat May 31 14:41:32 2025 by rpki-client