$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: KGyfe/rT7pKOQ0oQ1jC6juT0P183Vm7BdUuuS5Hv33A= Subject key identifier: 02:D5:29:CA:C6:65:BC:B3:0D:47:40:0F:AE:16:E0:66:0B:5B:CB:6B Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 0612 Signing time: Sat 31 May 2025 22:57:37 +0000 Manifest this update: Sat 31 May 2025 22:57:36 +0000 Manifest next update: Sat 07 Jun 2025 22:57:36 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: xGd9MbZ8v4waSfBo2bRGLh7XKlcp16/6wwKlcfazHDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: May 31 22:57:36 2025 GMT Not After : Jun 7 22:57:36 2025 GMT Subject: CN=683b8961-d471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:91:58:7a:34:7b:e8:cc:e4:2b:91:4b:64: 63:b3:e0:42:f9:c3:ae:90:d0:e9:02:ae:af:fb:4f: e1:42:8c:66:9e:ba:65:91:29:34:77:02:34:41:94: e9:62:59:a7:59:7a:0f:3c:0b:84:46:44:3a:7c:b0: 44:82:c0:ac:b1:27:14:b0:a9:3a:0b:a0:06:14:ad: 72:df:d9:14:15:95:32:26:de:de:cc:e3:ad:a7:a1: 6d:90:77:7a:f1:2e:95:74:3b:ea:c4:50:97:2b:57: 63:87:16:ff:82:dc:3e:68:b7:fc:08:31:36:a2:76: 03:22:4e:2a:dd:eb:d2:3f:51:2e:77:c5:1a:1e:d4: b0:6a:08:2a:7c:07:b4:57:a1:f6:78:f8:16:09:28: 44:35:2c:3b:74:35:7c:32:39:bf:08:9c:89:e1:e2: b4:09:15:51:93:f3:20:6a:24:9a:51:69:44:17:f9: 1d:22:ea:c1:4b:b2:11:1f:aa:a8:b4:4f:50:42:b0: d3:1c:10:c5:b7:82:10:09:8a:b4:07:26:fd:a6:93: 4b:7c:7b:de:20:41:05:3f:4d:00:1c:9e:45:0b:d4: ef:a6:18:fb:4f:7d:bb:a3:ac:1f:6e:b1:4d:1b:05: 75:ba:5f:14:d7:44:d9:ab:f2:14:e6:41:16:b7:91: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:29:CA:C6:65:BC:B3:0D:47:40:0F:AE:16:E0:66:0B:5B:CB:6B X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ef:0b:ba:88:9a:ce:c5:04:be:ff:e0:79:90:02:7a:ac:f7: 8b:8f:97:b3:94:74:d2:5d:0f:e6:19:3c:07:32:09:17:d3:c8: 8a:ed:0f:a1:77:4f:f8:ef:5c:df:79:ce:b7:fc:9a:c0:ca:1d: d3:01:68:1f:67:a3:e4:e1:0c:ee:6f:e8:35:57:1a:3a:00:7d: 1c:fc:a0:bd:33:0b:b6:29:e2:5b:77:30:36:25:0f:2b:7c:80: e1:0d:3b:c1:b8:c3:2c:3e:43:96:97:7d:50:07:e4:17:fd:8b: 29:1a:c4:3f:c6:b5:7e:93:b9:b3:08:fd:94:3d:f8:0e:4f:43: d1:f8:04:8c:4d:84:ea:1d:c4:61:08:a0:4b:cc:52:17:41:07: 6d:21:c5:d7:88:37:b3:68:30:56:f7:9a:ea:71:e7:c4:4f:51: 23:87:6d:bb:06:5b:e9:43:e3:fd:c1:70:06:74:24:17:4b:a8: 59:a7:6f:8d:73:57:39:3a:7b:e2:47:fb:db:c2:21:11:db:b6: ef:3d:d4:54:ef:35:20:92:90:55:6c:a9:cf:8f:ca:55:e9:3e: 2b:4d:15:13:25:62:38:19:9b:74:ff:fc:6c:6b:ad:32:b8:b3: dc:11:1c:a9:e3:ce:1c:2f:1c:d2:34:7a:d8:22:34:95:d5:5e: 1d:8e:99:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjUwNTMxMjI1NzM2WhcNMjUwNjA3MjI1NzM2WjAYMRYwFAYD VQQDEw02ODNiODk2MS1kNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YSRWHo0e+jM5CuRS2Rjs+BC+cOukNDpAq6v+0/hQoxmnrplkSk0dwI0QZTp YlmnWXoPPAuERkQ6fLBEgsCssScUsKk6C6AGFK1y39kUFZUyJt7ezOOtp6FtkHd6 8S6VdDvqxFCXK1djhxb/gtw+aLf8CDE2onYDIk4q3evSP1Eud8UaHtSwaggqfAe0 V6H2ePgWCShENSw7dDV8Mjm/CJyJ4eK0CRVRk/MgaiSaUWlEF/kdIurBS7IRH6qo tE9QQrDTHBDFt4IQCYq0Byb9ppNLfHveIEEFP00AHJ5FC9Tvphj7T327o6wfbrFN GwV1ul8U10TZq/IU5kEWt5ETDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALVKcrG ZbyzDUdAD64W4GYLW8trMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK7wu6iJrOxQS+/+B5kAJ6rPeLj5ezlHTSXQ/mGTwHMgkX08iK7Q+h d0/471zfec63/JrAyh3TAWgfZ6Pk4Qzub+g1Vxo6AH0c/KC9Mwu2KeJbdzA2JQ8r fIDhDTvBuMMsPkOWl31QB+QX/YspGsQ/xrV+k7mzCP2UPfgOT0PR+ASMTYTqHcRh CKBLzFIXQQdtIcXXiDezaDBW95rqcefET1Ejh227BlvpQ+P9wXAGdCQXS6hZp2+N c1c5OnviR/vbwiER27bvPdRU7zUgkpBVbKnPj8pV6T4rTRUTJWI4GZt0//xsa60y uLPcERyp484cLxzSNHrYIjSV1V4djpkP -----END CERTIFICATE-----Generated at Mon Jun 2 22:11:38 2025 by rpki-client