$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: NIPJVNVsP9QB2PUxVMdHmaLy9PUNSPog1B0opyFL7wE= Subject key identifier: AA:66:0C:2F:F1:41:9F:12:9C:3F:D4:5B:67:51:2F:23:02:C3:F5:91 Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 08B9 Signing time: Fri 30 May 2025 20:43:26 +0000 Manifest this update: Fri 30 May 2025 20:43:26 +0000 Manifest next update: Fri 06 Jun 2025 20:43:26 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: eW2T3koWvZCIOi0H5SXe9eIC/sVG1ybILnYtkTnbmmg=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: May 30 20:43:26 2025 GMT Not After : Jun 6 20:43:26 2025 GMT Subject: CN=683a186e-d85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:4c:75:eb:52:1d:db:8f:fe:79:21:7b:5a: d3:1a:44:ba:ce:06:cb:e4:f1:18:25:62:25:18:23: 2a:ea:0a:41:f8:2a:d5:c9:b5:72:8c:7d:36:a8:3e: 47:f9:79:ac:d0:aa:b5:5d:4f:21:f8:ec:cc:de:17: c2:58:c2:cd:c8:c8:81:35:84:c7:9b:ac:76:43:a2: 8f:dc:20:ec:6f:30:24:e1:46:88:bc:45:ab:89:4c: 18:9c:b1:22:f6:2e:5f:68:73:08:ef:0b:11:bb:51: c8:a8:5f:17:d3:ac:55:f9:cb:c0:23:e4:32:5d:fd: 7a:c9:9e:f9:0f:72:30:ac:ff:56:39:3c:a2:c6:f7: ce:1d:c4:d3:8b:c7:7e:3c:f9:bf:d4:64:19:af:12: 13:92:a6:b7:e9:9c:7d:c7:fd:3b:b7:1b:6d:b8:9a: 62:57:ed:15:1c:61:8b:95:fa:6d:9f:59:62:a0:be: 96:0a:bc:cc:8f:41:5a:ec:5a:2b:ee:fa:f2:f1:98: 8c:a3:ed:a1:b2:3b:d1:e8:ff:27:12:85:40:7c:4f: 39:87:3c:3f:5e:aa:dd:00:da:76:5b:2d:ec:08:de: 39:b9:8b:75:e5:c4:2d:78:3e:30:27:2a:7b:22:e4: a1:3c:7b:09:11:c4:6c:56:55:48:21:55:55:95:2d: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:0C:2F:F1:41:9F:12:9C:3F:D4:5B:67:51:2F:23:02:C3:F5:91 X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:36:f1:c5:d2:a0:3a:df:a8:3a:be:3e:1c:e8:8a:e1:77:a5: 33:d9:15:e0:96:7d:ba:1a:61:0e:c7:20:3d:6d:b5:5e:af:46: 40:28:ac:36:b6:2c:ca:dc:22:a5:b7:a6:81:83:fe:19:b2:b0: 82:7b:48:4f:ae:da:47:16:64:34:a3:f4:33:9b:34:2a:60:9d: 91:be:fc:79:a6:34:9b:ec:b8:fe:aa:6d:97:60:53:23:3f:17: f4:e4:70:c5:91:ed:0a:f6:8a:95:69:37:90:3c:1f:ca:91:17: 61:7e:e4:ec:28:6a:ba:0f:c8:ec:c8:2e:f4:13:35:8e:f2:4a: 7b:5c:3d:8c:76:1b:4c:13:d4:4d:68:fc:9d:19:fa:da:60:56: 87:f5:ff:f7:6b:5b:f4:b5:27:8f:37:ad:03:4e:24:89:c1:1b: 92:83:5d:48:85:f7:12:19:cf:86:64:c3:75:d0:95:34:68:a8: 5b:8e:92:be:21:84:3f:10:18:78:af:78:40:de:82:fd:2d:e3: 7e:1a:14:b1:a8:1e:6e:20:8c:66:2e:4b:da:af:57:3c:e3:f0: 24:1c:6e:6e:d2:97:6d:77:1e:e0:8a:98:4e:79:42:d3:b1:b2: 37:61:24:34:db:ad:78:7f:a4:7a:ab:c3:18:dd:2c:28:95:43: 99:f8:70:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjUwNTMwMjA0MzI2WhcNMjUwNjA2MjA0MzI2WjAYMRYwFAYD VQQDEw02ODNhMTg2ZS1kODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvypMdetSHduP/nkhe1rTGkS6zgbL5PEYJWIlGCMq6gpB+CrVybVyjH02qD5H +Xms0Kq1XU8h+OzM3hfCWMLNyMiBNYTHm6x2Q6KP3CDsbzAk4UaIvEWriUwYnLEi 9i5faHMI7wsRu1HIqF8X06xV+cvAI+QyXf16yZ75D3IwrP9WOTyixvfOHcTTi8d+ PPm/1GQZrxITkqa36Zx9x/07txttuJpiV+0VHGGLlfptn1lioL6WCrzMj0Fa7For 7vry8ZiMo+2hsjvR6P8nEoVAfE85hzw/XqrdANp2Wy3sCN45uYt15cQteD4wJyp7 IuShPHsJEcRsVlVIIVVVlS1cdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpmDC/x QZ8SnD/UW2dRLyMCw/WRMB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjNvHF0qA636g6vj4c6Irhd6Uz2RXgln26GmEOxyA9bbVer0ZAKKw2 tizK3CKlt6aBg/4ZsrCCe0hPrtpHFmQ0o/QzmzQqYJ2Rvvx5pjSb7Lj+qm2XYFMj Pxf05HDFke0K9oqVaTeQPB/KkRdhfuTsKGq6D8jsyC70EzWO8kp7XD2MdhtME9RN aPydGfraYFaH9f/3a1v0tSePN60DTiSJwRuSg11IhfcSGc+GZMN10JU0aKhbjpK+ IYQ/EBh4r3hA3oL9LeN+GhSxqB5uIIxmLkvar1c84/AkHG5u0pdtdx7giphOeULT sbI3YSQ02614f6R6q8MY3SwolUOZ+HB6 -----END CERTIFICATE-----Generated at Sat May 31 16:29:40 2025 by rpki-client