$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft File: QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json) Hash identifier: v1esQpaqi89WzCpib9AzFP2uTaZErfipo8jxbnCIJvQ= Subject key identifier: DA:11:1D:3F:B0:AF:8B:87:BE:87:96:30:E2:82:0E:DA:4D:BB:71:5A Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft Manifest number: 67 Signing time: Sat 31 May 2025 06:36:07 +0000 Manifest this update: Sat 31 May 2025 06:36:06 +0000 Manifest next update: Sat 07 Jun 2025 06:36:06 +0000 Files and hashes: 1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: mBXtUofGgOoYFgXyF2CyjCQvKffujkd96G9qOPWT5NQ=) 2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: j5rVzYxmjqZEY8FEsWt1qRbBmnhP9Qi2T1I55K8uP3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Validity Not Before: May 31 06:36:06 2025 GMT Not After : Jun 7 06:36:06 2025 GMT Subject: CN=683aa356-81f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:e9:a7:7f:d6:49:0b:f0:61:a9:b2:25:bf: d8:a9:1a:98:a8:d4:27:5d:58:72:8c:40:11:98:85: 00:20:e1:8a:02:90:09:d3:d7:ed:74:52:03:d6:b5: 8b:3e:1f:19:ff:6a:9e:1c:b6:de:06:85:0f:7a:f2: a5:d7:1d:fb:fe:23:db:a5:ea:28:ae:9a:ea:88:40: b5:59:56:93:91:1f:6d:79:43:b7:2b:2f:19:2a:76: 2d:f3:24:f6:66:68:66:13:b5:12:e1:59:2f:8b:39: 4a:d1:23:d0:41:3c:ef:9e:26:9a:38:9b:f9:a8:de: e4:15:ea:f8:16:9d:70:57:5a:6a:90:91:30:d8:94: 33:dc:10:09:64:91:de:46:e2:a1:33:13:8b:41:c5: e8:90:56:cd:cc:70:0d:18:8d:3e:54:b2:7b:1f:c2: b1:06:a7:2b:5f:58:cb:c1:1e:d4:1f:16:fd:90:d9: 17:16:e2:b3:71:d4:7a:9c:4a:85:71:04:2a:da:29: fd:9e:7e:8f:67:72:b7:c0:fa:15:17:ef:73:4f:4b: 76:b3:4b:43:79:44:29:02:d7:df:8c:f3:1a:7c:92: 3b:aa:78:69:8b:13:36:ba:c8:9a:95:ea:c6:a5:87: 55:5d:b8:ec:42:cb:2e:e6:db:0c:bc:e3:6b:59:de: 0f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:1D:3F:B0:AF:8B:87:BE:87:96:30:E2:82:0E:DA:4D:BB:71:5A X509v3 Authority Key Identifier: keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:87:63:06:71:84:b3:b7:b8:32:41:60:ba:f2:e4:75:57:87: af:fb:29:8f:98:8a:30:05:cc:e4:7e:b8:4b:38:c3:a0:b3:c6: f1:36:20:a0:28:20:76:fa:7c:fa:76:ba:88:ee:fd:ad:6a:45: 2a:a1:0d:18:db:5b:98:75:52:76:2f:4f:5c:68:a1:b3:4f:cd: ac:78:c5:ba:85:6e:11:21:01:63:a1:3a:d8:97:b6:2d:5c:79: fb:d8:0b:2d:24:9c:d3:d6:ab:05:1e:48:e4:88:88:28:37:93: 81:5a:3d:43:f7:31:ba:91:91:f4:53:c6:19:b4:55:ca:d5:34: ba:29:69:2a:de:af:00:7a:77:8f:65:ad:49:7c:e4:c9:62:ab: 58:fc:07:5d:89:b0:9f:dc:7a:ad:1a:c3:c4:71:8f:9b:a6:89: fd:88:1b:65:03:bf:21:79:70:44:1b:65:5b:b1:61:88:d6:2c: 72:07:dc:9b:66:53:19:eb:e4:59:fb:37:49:a9:5c:dd:36:bc: 5b:1a:09:e7:61:bb:62:d0:0f:e0:7b:8f:0a:73:c9:28:2a:ff: db:70:37:65:0f:8f:d2:a8:77:44:5f:fd:f2:a3:dc:73:0f:1e: fc:79:d5:bc:8d:81:03:9f:20:25:a6:32:66:fb:76:b7:72:ab: 4b:f2:f5:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzMxQzExMC8GA1UEBRMoNDBGQUE3MEY4QTIzQTAzRDE2QTExMDg2REJFNTAyRTg2 MjE2NDk2NzAeFw0yNTA1MzEwNjM2MDZaFw0yNTA2MDcwNjM2MDZaMBgxFjAUBgNV BAMTDTY4M2FhMzU2LTgxZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE7Omnf9ZJC/BhqbIlv9ipGpio1CddWHKMQBGYhQAg4YoCkAnT1+10UgPWtYs+ Hxn/ap4ctt4GhQ968qXXHfv+I9ul6iiumuqIQLVZVpORH215Q7crLxkqdi3zJPZm aGYTtRLhWS+LOUrRI9BBPO+eJpo4m/mo3uQV6vgWnXBXWmqQkTDYlDPcEAlkkd5G 4qEzE4tBxeiQVs3McA0YjT5UsnsfwrEGpytfWMvBHtQfFv2Q2RcW4rNx1HqcSoVx BCraKf2efo9ncrfA+hUX73NPS3azS0N5RCkC19+M8xp8kjuqeGmLEza6yJqV6sal h1VduOxCyy7m2wy842tZ3g+ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2hEdP7Cv i4e+h5Yw4oIO2k27cVowHwYDVR0jBBgwFoAUQPqnD4ojoD0WoRCG2+UC6GIWSWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMzFDL0YxMDdEQTEwQTZD RjExRUZCMkZCQjU3REM0RjlBRTAyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVBxbkQ0b2pvRDBXb1JDRzItVUM2R0lXU1djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MzFDL0YxMDdEQTEwQTZDRjExRUZCMkZCQjU3REM0RjlBRTAyL1FQcW5ENG9qb0Qw V29SQ0cyLVVDNkdJV1NXYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFOHYwZxhLO3uDJBYLry5HVXh6/7KY+YijAFzOR+uEs4w6CzxvE2IKAo IHb6fPp2uoju/a1qRSqhDRjbW5h1UnYvT1xoobNPzax4xbqFbhEhAWOhOtiXti1c efvYCy0knNPWqwUeSOSIiCg3k4FaPUP3MbqRkfRTxhm0VcrVNLopaSrerwB6d49l rUl85Mliq1j8B12JsJ/ceq0aw8Rxj5umif2IG2UDvyF5cEQbZVuxYYjWLHIH3Jtm Uxnr5Fn7N0mpXN02vFsaCedhu2LQD+B7jwpzySgq/9twN2UPj9Kod0Rf/fKj3HMP Hvx51byNgQOfICWmMmb7drdyq0vy9Sw= -----END CERTIFICATE-----Generated at Sat May 31 14:51:51 2025 by rpki-client