$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: oEjVDlg5E6p7ctrv7B6SQTrSLXSv9mo81RSGQq0MxZo= Subject key identifier: 24:C3:0F:30:7D:09:5B:C6:24:69:00:20:04:54:16:93:46:32:E5:D8 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0C44 Signing time: Tue 10 Jun 2025 18:20:29 +0000 Manifest this update: Tue 10 Jun 2025 18:20:29 +0000 Manifest next update: Tue 17 Jun 2025 18:20:29 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: dGXUgWh84eOKDxW0TbpIsdj9jrPzZogvf/PaYCnr9PU=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: l5CGLlauMb+Ni/lNc+v9jsE4+D1HZp9e9rAFpWt3fHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Jun 10 18:20:29 2025 GMT Not After : Jun 17 18:20:29 2025 GMT Subject: CN=6848776d-3d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ae:ad:37:eb:49:39:88:d1:2e:c8:77:2e:87: 37:8b:40:b1:7c:30:0d:d2:7d:78:58:28:38:85:fe: e7:3c:87:6c:31:45:87:52:cc:ee:4e:6d:22:ea:bd: 6b:e3:34:04:05:da:6b:c4:de:10:3e:9d:ea:0a:bd: d6:42:27:ab:f2:85:59:94:7b:20:ff:35:6a:a4:a6: b9:f4:8d:ea:fd:31:5b:0b:85:26:f9:2f:db:d8:10: d3:34:be:d8:8f:2d:27:b1:87:c5:d1:bd:8a:7d:81: 6d:94:e4:eb:14:fa:df:65:48:29:79:96:2b:39:a5: 60:6b:99:ac:93:2d:fa:88:ba:31:86:85:1c:dc:39: 71:55:e5:8c:e5:28:26:82:de:03:49:56:8d:22:ff: 3f:06:0c:49:c1:94:dc:97:46:f2:6a:ff:31:c2:c0: 06:72:88:cf:dc:20:8a:7b:2f:09:4c:7a:76:89:bc: 50:59:42:ec:b6:c6:94:14:74:a4:31:8f:2f:dc:89: ce:e9:34:df:18:f7:64:1a:4f:75:ae:02:3e:ad:b3: 6e:0b:46:3c:e7:0c:25:f0:70:7c:54:73:86:fa:b1: 7c:d3:ec:95:ab:84:0f:17:b0:2b:e5:71:f3:67:b5: 69:ce:91:a1:d4:31:c6:8d:3a:dc:d3:3b:52:f0:89: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C3:0F:30:7D:09:5B:C6:24:69:00:20:04:54:16:93:46:32:E5:D8 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5c:ed:69:10:5d:8e:08:83:41:e6:f8:0c:37:1b:08:a0:64: ea:7c:c2:e6:27:09:49:f3:cf:a9:bf:5e:05:55:df:14:f3:11: 0e:f9:82:9a:e8:4c:97:89:12:7f:aa:1a:05:a2:32:ea:ce:47: 8a:d1:75:f5:bc:d9:68:16:b9:ea:cc:69:34:c4:1f:9b:7d:79: 79:ae:1c:51:1f:e4:45:e9:ea:76:b4:cd:26:1a:97:d6:d8:7e: 01:cb:c9:e6:4b:51:00:03:b4:97:49:7a:b6:95:cf:17:95:6c: 5f:f4:44:08:6c:fd:ae:60:e8:99:c0:e4:f3:02:1a:67:b6:b1: 25:9f:fe:f1:55:a0:ab:85:e4:06:4c:67:71:d7:db:b3:f7:0e: 41:43:2a:b8:0e:8e:ca:a4:4e:0d:2a:2d:c7:ea:28:28:6d:f9: 72:92:a9:2b:e0:02:63:94:18:2b:63:9a:f5:76:c8:68:79:49: ac:af:1c:50:08:6d:18:88:9a:89:00:cf:60:01:8f:13:68:4e: 00:eb:2d:58:77:97:80:c8:c7:0f:9b:c7:f5:4c:c4:7d:eb:91: 71:4e:76:8a:7f:86:63:0e:f4:c6:ec:24:ea:02:0d:c5:3e:cb: 30:ce:13:dd:c8:4c:95:71:1d:5e:96:fc:00:8f:0f:08:03:5a: 03:85:e6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjUwNjEwMTgyMDI5WhcNMjUwNjE3MTgyMDI5WjAYMRYwFAYD VQQDEw02ODQ4Nzc2ZC0zZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA566tN+tJOYjRLsh3Loc3i0CxfDAN0n14WCg4hf7nPIdsMUWHUszuTm0i6r1r 4zQEBdprxN4QPp3qCr3WQier8oVZlHsg/zVqpKa59I3q/TFbC4Um+S/b2BDTNL7Y jy0nsYfF0b2KfYFtlOTrFPrfZUgpeZYrOaVga5msky36iLoxhoUc3DlxVeWM5Sgm gt4DSVaNIv8/BgxJwZTcl0byav8xwsAGcojP3CCKey8JTHp2ibxQWULstsaUFHSk MY8v3InO6TTfGPdkGk91rgI+rbNuC0Y85wwl8HB8VHOG+rF80+yVq4QPF7Ar5XHz Z7VpzpGh1DHGjTrc0ztS8ImV5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTDDzB9 CVvGJGkAIARUFpNGMuXYMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIXO1pEF2OCINB5vgMNxsIoGTqfMLmJwlJ88+pv14FVd8U8xEO+YKa 6EyXiRJ/qhoFojLqzkeK0XX1vNloFrnqzGk0xB+bfXl5rhxRH+RF6ep2tM0mGpfW 2H4By8nmS1EAA7SXSXq2lc8XlWxf9EQIbP2uYOiZwOTzAhpntrEln/7xVaCrheQG TGdx19uz9w5BQyq4Do7KpE4NKi3H6igobflykqkr4AJjlBgrY5r1dshoeUmsrxxQ CG0YiJqJAM9gAY8TaE4A6y1Yd5eAyMcPm8f1TMR965FxTnaKf4ZjDvTG7CTqAg3F PsswzhPdyEyVcR1elvwAjw8IA1oDhebW -----END CERTIFICATE-----Generated at Wed Jun 11 08:01:30 2025 by rpki-client