$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: 7OPNDtnmsDQYy9h5aD9I/JjPGotM3OUQMl8pbmQLGoc= Subject key identifier: 92:2B:F6:1C:73:6F:EB:8A:CC:6F:31:1E:72:3A:90:0F:06:51:D2:CB Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1C42 Signing time: Fri 30 May 2025 16:23:15 +0000 Manifest this update: Fri 30 May 2025 16:23:15 +0000 Manifest next update: Fri 06 Jun 2025 16:23:15 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: 3fXiixwX9TSWvWFd/viBWZlBD7F+1FyrHMOCx+A37Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7270 (0x1c66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: May 30 16:23:15 2025 GMT Not After : Jun 6 16:23:15 2025 GMT Subject: CN=6839db73-e36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:f8:be:e8:31:79:41:98:8c:3f:12:89:ec: 9c:e9:b0:3f:1b:c1:f0:68:d0:e7:41:c7:b6:79:08: 95:02:4e:f0:77:2a:de:f8:fa:4e:e9:08:b7:88:17: 35:4a:73:e6:e8:dc:f5:cf:0e:17:cd:7a:a9:35:0b: cb:ec:fc:28:63:fd:21:2b:06:8e:f1:01:0f:14:38: 4c:aa:a3:0b:9f:e6:9c:9a:1f:8e:eb:18:90:4c:2e: 47:63:64:3f:53:91:53:d0:b4:40:19:68:4f:e1:f0: bf:a3:a8:dd:aa:61:9a:09:60:a6:22:40:22:b3:f7: cc:f1:bf:d3:42:2f:34:4c:71:7b:87:53:87:b8:d5: dc:5b:6e:10:67:53:1c:63:bf:30:41:13:af:df:40: 72:3e:3d:fa:44:6b:f4:bc:f5:8c:12:64:55:52:ce: 37:bb:80:63:f0:ee:0c:92:5a:b7:e0:cc:6e:6a:3c: b2:00:26:68:20:f8:4e:b5:3e:fc:c6:42:49:2a:ba: 7a:ae:14:b7:05:f3:88:fc:c2:ca:64:17:40:f2:19: d0:98:2d:34:3f:ec:0c:c1:4b:6a:60:89:16:d4:cf: a0:f1:fb:0f:8a:b6:a5:8b:ee:e1:f4:53:13:9f:4b: 4e:c9:66:d1:9b:a3:69:b5:e7:7a:a6:4d:df:2d:ec: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:F6:1C:73:6F:EB:8A:CC:6F:31:1E:72:3A:90:0F:06:51:D2:CB X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:17:9b:bf:0d:73:65:78:51:c3:41:ad:ec:27:57:7f:fd:6f: 5a:46:c8:6f:e6:e4:a7:f5:80:9e:ad:4f:72:1a:62:be:8d:5b: ed:9a:6e:12:90:82:7a:c3:cd:0e:f2:16:96:f3:61:c2:27:1c: 59:0a:c2:bb:13:f4:3b:35:0e:a9:01:fe:28:85:c5:4d:04:ab: bf:f0:f4:7e:43:1d:d6:77:88:97:e1:70:db:97:92:4e:f7:e8: 62:d7:c5:2f:38:60:f6:90:89:1c:c1:86:ae:c0:1b:75:87:0f: 3e:54:6e:d2:63:e4:bf:98:1c:3e:33:b9:b9:9f:07:21:b4:cf: 50:1f:73:64:96:7a:68:79:57:b3:dd:0c:80:44:12:65:2f:04: 5c:9a:a6:ee:93:cc:ca:aa:9c:c9:51:01:65:b4:07:93:27:19: 21:1f:78:0e:e5:5c:08:ef:8a:33:a8:3c:0c:ab:78:92:99:5e: 84:4e:2e:19:7e:8a:6a:72:31:6a:14:30:18:25:87:a3:b3:3c: 8b:3d:04:cb:96:f8:31:b1:78:79:e7:bf:c9:7d:33:6b:06:3f: fe:49:99:aa:e8:c0:b1:2b:9d:13:3a:f9:9d:5f:00:05:a1:3b: 6f:fb:79:df:13:43:83:22:f8:24:ce:2b:3b:20:1d:bd:53:78: f7:59:a8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjUwNTMwMTYyMzE1WhcNMjUwNjA2MTYyMzE1WjAYMRYwFAYD VQQDEw02ODM5ZGI3My1lMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApan4vugxeUGYjD8Sieyc6bA/G8HwaNDnQce2eQiVAk7wdyre+PpO6Qi3iBc1 SnPm6Nz1zw4XzXqpNQvL7PwoY/0hKwaO8QEPFDhMqqMLn+acmh+O6xiQTC5HY2Q/ U5FT0LRAGWhP4fC/o6jdqmGaCWCmIkAis/fM8b/TQi80THF7h1OHuNXcW24QZ1Mc Y78wQROv30ByPj36RGv0vPWMEmRVUs43u4Bj8O4Mklq34MxuajyyACZoIPhOtT78 xkJJKrp6rhS3BfOI/MLKZBdA8hnQmC00P+wMwUtqYIkW1M+g8fsPirali+7h9FMT n0tOyWbRm6Npted6pk3fLewkiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIr9hxz b+uKzG8xHnI6kA8GUdLLMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvF5u/DXNleFHDQa3sJ1d//W9aRshv5uSn9YCerU9yGmK+jVvtmm4S kIJ6w80O8haW82HCJxxZCsK7E/Q7NQ6pAf4ohcVNBKu/8PR+Qx3Wd4iX4XDbl5JO 9+hi18UvOGD2kIkcwYauwBt1hw8+VG7SY+S/mBw+M7m5nwchtM9QH3NklnpoeVez 3QyARBJlLwRcmqbuk8zKqpzJUQFltAeTJxkhH3gO5VwI74ozqDwMq3iSmV6ETi4Z fopqcjFqFDAYJYejszyLPQTLlvgxsXh557/JfTNrBj/+SZmq6MCxK50TOvmdXwAF oTtv+3nfE0ODIvgkzis7IB29U3j3Wags -----END CERTIFICATE-----Generated at Sat May 31 17:37:45 2025 by rpki-client