$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json) Hash identifier: 1/HewW3DYlrwzij2M0R0LsBC3pYbt9krd3OvHNIhOYg= Subject key identifier: C0:66:28:6F:75:3D:21:9D:69:E0:A3:DF:1B:AC:AF:7B:46:2B:40:44 Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Certificate serial: 0E95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft Manifest number: 0E73 Signing time: Fri 30 May 2025 17:53:54 +0000 Manifest this update: Fri 30 May 2025 17:53:53 +0000 Manifest next update: Fri 06 Jun 2025 17:53:53 +0000 Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: aTrzV6IShdL5e0qIw3bDoDGS2tWzlSN/3wJKSIXcFzc=) 2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=) 3: 42629FDADD9511EEAA0F2324C4F9AE02.roa (hash: +hn7T4kOPQRiT4pAI5U0s2X9XGmZExacuKpk1xJzme8=) 4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=) 5: 34DCFB18C94E11E9A4F6FE21C4F9AE02.roa (hash: PQRWtI7uNa0DrowLXSGG8eKzHjE+mScrhL8bc6GhWo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3733 (0xe95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Validity Not Before: May 30 17:53:53 2025 GMT Not After : Jun 6 17:53:53 2025 GMT Subject: CN=6839f0b2-0cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:b4:c4:f6:42:2c:77:bc:7d:c2:71:8c:f3: 06:48:ae:0f:11:7e:37:ee:2e:ae:a5:9f:3c:78:44: 1e:59:81:1e:2d:10:df:1e:53:fd:84:f6:66:9f:3e: 4e:76:59:02:09:80:cf:27:be:e6:b3:ec:ed:d2:f1: c4:e7:90:6d:32:81:d7:6f:08:f5:92:27:ec:69:a0: 53:ca:c3:9c:20:3c:70:1f:d2:23:bd:13:d8:d0:40: c7:7b:56:55:3c:9c:03:17:d6:29:2e:86:e8:45:93: fc:5f:fa:8e:bd:e2:84:a3:cc:89:07:22:1d:27:9f: 41:5f:cc:12:17:86:94:71:0b:d9:b2:ce:21:ce:cb: 2e:61:7e:8f:9e:b4:a1:8a:27:d6:30:a8:f4:2b:b6: 12:3a:4e:2c:55:68:0e:cc:6b:b5:ef:9f:89:9a:87: ed:61:3d:53:dd:95:d9:17:12:3b:31:72:92:da:5d: 0a:f1:50:e0:91:1e:6b:45:c4:5c:14:f6:01:a4:31: c0:b2:48:c2:a9:a4:30:49:0e:bd:12:2b:6b:99:4e: 6a:03:a1:65:11:4b:82:44:ca:15:3b:06:89:f0:84: d2:84:7e:5e:e8:59:5c:a2:eb:93:70:a9:87:c4:6a: 02:63:77:07:53:01:7e:32:82:ec:e1:68:a2:14:fe: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:66:28:6F:75:3D:21:9D:69:E0:A3:DF:1B:AC:AF:7B:46:2B:40:44 X509v3 Authority Key Identifier: keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:cb:76:24:a3:19:17:36:1a:ca:4d:4c:70:02:ac:7f:67:1a: f7:1b:9a:94:4c:fc:65:c2:f6:27:67:c3:e4:47:48:a4:b4:40: f4:f8:bf:3a:74:c8:0a:ec:2d:7c:89:ab:11:2e:e3:e7:97:e4: 1c:90:9c:54:45:12:7a:0d:34:01:bd:20:27:27:cf:21:35:26: 76:43:0f:94:27:68:bd:d6:38:59:8c:63:24:40:29:f1:ed:0b: d4:97:93:40:fe:ca:7e:7d:30:36:de:2d:ae:61:ac:2b:37:75: 63:54:7f:96:ec:be:d6:03:df:8f:7f:0d:01:bb:d1:04:37:34: ce:7f:bc:7e:6a:84:92:4c:f2:bc:0a:4a:29:39:67:95:20:6b: 77:c5:78:10:a4:e2:35:96:d8:3c:40:5a:c0:b0:76:96:b7:db: 5a:0d:dd:e4:66:c7:ab:58:8d:0e:c9:64:79:78:6c:86:22:f5: 87:74:67:da:01:3c:1e:29:62:28:3b:ca:e8:0f:17:cb:cf:a1: f6:a6:33:69:7b:76:ea:f6:7b:c2:2a:3c:f6:0d:9f:c3:69:14: 53:f1:35:cf:ee:2e:d0:6a:27:3e:d9:78:04:64:39:02:e8:ad: 39:8a:de:85:d9:6a:89:ce:74:85:a8:83:98:82:24:2e:21:f3: d0:d3:b0:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyOUYxMTAvBgNVBAUTKEFBODVDQ0QyREQzRTFDMDAzQkY3MkZGNTNFNThDNzIw MEU3Q0YwQTgwHhcNMjUwNTMwMTc1MzUzWhcNMjUwNjA2MTc1MzUzWjAYMRYwFAYD VQQDEw02ODM5ZjBiMi0wY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNC0xPZCLHe8fcJxjPMGSK4PEX437i6upZ88eEQeWYEeLRDfHlP9hPZmnz5O dlkCCYDPJ77ms+zt0vHE55BtMoHXbwj1kifsaaBTysOcIDxwH9IjvRPY0EDHe1ZV PJwDF9YpLoboRZP8X/qOveKEo8yJByIdJ59BX8wSF4aUcQvZss4hzssuYX6PnrSh iifWMKj0K7YSOk4sVWgOzGu175+JmoftYT1T3ZXZFxI7MXKS2l0K8VDgkR5rRcRc FPYBpDHAskjCqaQwSQ69EitrmU5qA6FlEUuCRMoVOwaJ8ITShH5e6FlcouuTcKmH xGoCY3cHUwF+MoLs4WiiFP6DuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBmKG91 PSGdaeCj3xusr3tGK0BEMB8GA1UdIwQYMBaAFKqFzNLdPhwAO/cv9T5YxyAOfPCo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDI5Ri82OTFGNzRDNDk4 ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhBQTc5eV8xUGxqSElBNTg4 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvWE0wdDAtSEFBNzl5XzFQbGpISUE1ODhLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDI5Ri82OTFGNzRDNDk4ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhB QTc5eV8xUGxqSElBNTg4S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1y3YkoxkXNhrKTUxwAqx/Zxr3G5qUTPxlwvYnZ8PkR0iktED0+L86 dMgK7C18iasRLuPnl+QckJxURRJ6DTQBvSAnJ88hNSZ2Qw+UJ2i91jhZjGMkQCnx 7QvUl5NA/sp+fTA23i2uYawrN3VjVH+W7L7WA9+Pfw0Bu9EENzTOf7x+aoSSTPK8 CkopOWeVIGt3xXgQpOI1ltg8QFrAsHaWt9taDd3kZserWI0OyWR5eGyGIvWHdGfa ATweKWIoO8roDxfLz6H2pjNpe3bq9nvCKjz2DZ/DaRRT8TXP7i7Qaic+2XgEZDkC 6K05it6F2WqJznSFqIOYgiQuIfPQ07Am -----END CERTIFICATE-----Generated at Sat May 31 17:17:33 2025 by rpki-client