$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json) Hash identifier: fZZma9BSzcq9T1qJZXw/EPl7J3XzNWBmDw53c9h/5CI= Subject key identifier: 3A:01:3E:55:D5:9E:E1:A3:04:4B:E1:34:85:BF:9C:C1:E7:02:64:F3 Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft Manifest number: 019E Signing time: Sat 31 May 2025 03:03:35 +0000 Manifest this update: Sat 31 May 2025 03:03:34 +0000 Manifest next update: Sat 07 Jun 2025 03:03:34 +0000 Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: pJVladFqRg7ssk7IZ+mtfcFnWhbmXja5g60pKZ4oJgg=) 2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: qTpurh8+bWpZzwTVZxTLGeJXujwiEOMw1H0kXdqpaC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Validity Not Before: May 31 03:03:34 2025 GMT Not After : Jun 7 03:03:34 2025 GMT Subject: CN=683a7186-3173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:40:af:3c:54:a9:f7:fd:6a:86:6d:0c:50: 12:e3:5e:a1:bd:ae:e1:97:16:f3:64:3a:3c:65:81: da:dd:96:3b:0d:62:64:44:75:0a:dc:20:3d:06:73: a0:b0:0b:ba:03:14:b1:f9:74:1a:75:48:13:ab:12: 56:b8:c2:63:e9:08:f8:5d:1b:f1:0f:70:26:60:79: 33:c9:a2:57:48:e7:13:b3:aa:f0:81:27:92:d1:0f: a8:44:f9:ef:f4:f7:06:d6:85:79:da:17:1e:40:00: 2b:0f:9b:41:54:e7:be:d5:08:ac:a7:74:55:61:50: b6:68:df:f2:12:65:d3:4d:b8:9f:ca:ae:6c:48:d1: 39:64:9e:1e:a3:7c:a0:eb:d2:81:29:8a:d6:d5:77: 47:a0:f3:10:67:32:88:db:1c:dc:51:c6:27:40:e0: 60:37:80:4c:bc:5e:a9:90:23:f7:e4:ca:6b:dd:9b: d6:39:52:f8:fb:a8:ad:9a:61:fe:71:27:4c:9b:5f: 18:11:44:63:f9:38:7a:9d:07:fd:a9:d4:44:16:16: 7e:b5:63:03:a5:c1:eb:be:db:2f:a0:0d:8f:53:5d: 4c:88:e4:bd:e7:c4:0c:f6:2e:11:bc:65:16:ed:fd: 72:c0:3a:58:dc:99:9d:53:32:49:34:67:d4:2a:22: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:01:3E:55:D5:9E:E1:A3:04:4B:E1:34:85:BF:9C:C1:E7:02:64:F3 X509v3 Authority Key Identifier: keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:30:46:78:50:ce:25:63:c6:21:2d:bf:42:88:d5:60:18:9e: 66:9e:37:15:34:8c:b7:83:e2:92:d2:0b:3b:0a:d6:b4:42:54: 7f:ae:49:47:bd:43:b2:fd:74:83:9b:b9:61:ef:e5:ba:27:6c: d0:de:92:38:54:a3:0a:14:2e:19:48:dd:2d:ef:28:c1:92:2f: 50:65:51:cf:d0:a5:f5:a3:82:e1:ae:48:48:3a:05:7b:0c:43: 39:08:29:9b:c7:fb:41:af:cb:e5:5e:34:76:ac:70:34:75:69: d2:84:19:a4:15:eb:87:e6:05:ed:3d:b9:03:31:df:fa:35:d5: 6f:ea:e9:94:44:78:39:e2:79:38:89:01:08:b0:d0:90:3c:12: b5:56:b5:92:7b:2f:8b:62:ca:7e:d8:52:fb:15:ba:50:ce:92: d4:d9:c3:4b:be:7a:3c:8f:39:8e:2a:70:d3:ad:23:f6:99:fa: f8:ca:1a:7f:0c:37:09:4f:5c:21:23:f2:57:d0:d3:e5:c7:b2: 07:ef:31:af:ac:89:fc:fa:9c:9b:21:06:52:aa:a3:08:00:77: 13:6b:e6:f7:92:1f:6a:4a:0a:40:08:5f:39:2e:27:44:06:bf: 37:93:b7:a6:90:12:ab:8f:d7:d4:2e:ae:f4:85:7b:54:2a:6e: 35:50:10:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5 NDdCRTA5MkEwHhcNMjUwNTMxMDMwMzM0WhcNMjUwNjA3MDMwMzM0WjAYMRYwFAYD VQQDEw02ODNhNzE4Ni0zMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO1ArzxUqff9aoZtDFAS416hva7hlxbzZDo8ZYHa3ZY7DWJkRHUK3CA9BnOg sAu6AxSx+XQadUgTqxJWuMJj6Qj4XRvxD3AmYHkzyaJXSOcTs6rwgSeS0Q+oRPnv 9PcG1oV52hceQAArD5tBVOe+1Qisp3RVYVC2aN/yEmXTTbifyq5sSNE5ZJ4eo3yg 69KBKYrW1XdHoPMQZzKI2xzcUcYnQOBgN4BMvF6pkCP35Mpr3ZvWOVL4+6itmmH+ cSdMm18YEURj+Th6nQf9qdREFhZ+tWMDpcHrvtsvoA2PU11MiOS958QM9i4RvGUW 7f1ywDpY3JmdUzJJNGfUKiK8CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoBPlXV nuGjBEvhNIW/nMHnAmTzMB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0 QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi enJmc2RjRjRZUHVVZS1DU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpMEZ4UM4lY8YhLb9CiNVgGJ5mnjcVNIy3g+KS0gs7Cta0QlR/rklH vUOy/XSDm7lh7+W6J2zQ3pI4VKMKFC4ZSN0t7yjBki9QZVHP0KX1o4LhrkhIOgV7 DEM5CCmbx/tBr8vlXjR2rHA0dWnShBmkFeuH5gXtPbkDMd/6NdVv6umURHg54nk4 iQEIsNCQPBK1VrWSey+LYsp+2FL7FbpQzpLU2cNLvno8jzmOKnDTrSP2mfr4yhp/ DDcJT1whI/JX0NPlx7IH7zGvrIn8+pybIQZSqqMIAHcTa+b3kh9qSgpACF85LidE Br83k7emkBKrj9fULq70hXtUKm41UBBG -----END CERTIFICATE-----Generated at Sat May 31 16:49:11 2025 by rpki-client