$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: sbAStmbhooOnJ0SkXEcBxo668J9qGEgJ3UXuDLcEIxo= Subject key identifier: C1:B3:9E:12:59:EC:01:EF:01:22:2E:EA:A1:87:A0:EF:C9:75:20:C7 Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0222 Signing time: Sat 31 May 2025 02:08:28 +0000 Manifest this update: Sat 31 May 2025 02:08:28 +0000 Manifest next update: Sat 07 Jun 2025 02:08:28 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: 9AVT3HjAR8ZSH4Ds7lsyMxQBtGeJ3UN44/wb1+e7Xpk=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: MlSWr+baoX0iIeudBnt/7RnQIgEalzKtR7VxANOwdB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: May 31 02:08:28 2025 GMT Not After : Jun 7 02:08:28 2025 GMT Subject: CN=683a649c-7abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:84:08:32:38:47:ed:82:2a:ea:78:db:e1: 9e:cd:66:93:ab:2f:62:77:ad:ec:52:34:73:a3:79: 7a:a0:bf:21:91:80:ab:92:23:2f:3a:18:fc:22:35: 4f:0a:9d:6f:ae:2c:bf:35:d2:cb:63:4f:09:7d:b3: eb:eb:52:14:d8:44:9a:3c:fe:93:28:3f:4d:5f:b8: 0b:6b:31:58:59:41:f8:51:54:62:e0:8a:65:3b:43: 19:e9:db:0f:9c:f5:7d:2f:d6:f6:7a:18:7f:54:5c: e3:e4:91:92:32:90:bc:25:cd:30:00:3d:b1:b6:77: 12:25:80:bf:4c:8a:08:b7:61:4b:33:7b:9b:63:8a: b7:ae:09:8c:d9:ea:3d:8d:07:8f:13:15:6e:22:76: 05:24:4c:2a:6e:fa:92:0d:22:92:8d:f1:fa:e6:95: 91:ff:57:ef:d5:fb:55:f5:9c:4d:68:42:01:97:91: 86:78:c1:b1:b6:47:ed:f9:c5:ae:db:cb:d8:83:79: dc:f8:fa:0f:c5:bc:b8:6a:71:4e:d9:26:7c:99:ed: b2:d4:00:bc:a1:f5:67:e0:0f:59:58:be:95:cd:d9: ce:d8:2f:20:6a:03:5a:da:73:b2:e7:f3:c4:db:7c: ea:0b:65:74:98:b9:48:a9:cd:fe:af:af:68:4c:21: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B3:9E:12:59:EC:01:EF:01:22:2E:EA:A1:87:A0:EF:C9:75:20:C7 X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5f:bc:9e:f2:ee:7a:f5:e0:ac:2f:75:a3:76:64:8a:a1:9a: 35:56:be:a6:a3:af:9c:c4:8a:5f:be:b8:01:78:09:4c:c6:85: 83:d7:b1:9d:b6:58:c8:66:89:ef:2f:8f:42:03:5a:db:ad:ef: 09:ac:f2:a7:14:b0:12:a0:17:5d:65:2f:2d:f3:83:c3:be:a4: 46:41:5d:15:83:b4:ce:28:57:75:ef:8e:4a:5f:13:ed:e6:68: a8:66:34:b3:a8:55:bf:d2:ec:26:25:38:66:bc:e3:4d:b3:c1: 7c:2c:a0:e8:ec:22:04:48:4d:aa:e5:8d:7a:15:f0:42:1b:3d: 9a:89:ee:bf:14:74:1d:25:47:cd:36:13:ac:f8:10:f6:01:9c: 23:e1:78:8d:ca:75:0f:3c:6f:d6:c0:67:c4:44:10:eb:37:66: fc:f3:3e:bd:7d:a5:28:4b:8e:ba:2c:44:b8:4e:0a:25:cf:9d: f5:d1:99:8a:15:06:8a:67:dc:c7:29:a8:6d:92:d9:6b:d1:72: 92:f4:81:c8:c0:03:90:ff:8a:48:2b:68:b0:82:ad:b5:85:14: 0b:c6:fa:2f:bc:5f:eb:9c:58:6b:3d:eb:c8:24:8d:10:01:aa: de:35:d9:18:60:e6:f5:ef:89:04:cc:1c:7e:4b:c3:cf:a2:cd: 27:3b:34:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUwNTMxMDIwODI4WhcNMjUwNjA3MDIwODI4WjAYMRYwFAYD VQQDEw02ODNhNjQ5Yy03YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2yECDI4R+2CKup42+GezWaTqy9id63sUjRzo3l6oL8hkYCrkiMvOhj8IjVP Cp1vriy/NdLLY08JfbPr61IU2ESaPP6TKD9NX7gLazFYWUH4UVRi4IplO0MZ6dsP nPV9L9b2ehh/VFzj5JGSMpC8Jc0wAD2xtncSJYC/TIoIt2FLM3ubY4q3rgmM2eo9 jQePExVuInYFJEwqbvqSDSKSjfH65pWR/1fv1ftV9ZxNaEIBl5GGeMGxtkft+cWu 28vYg3nc+PoPxby4anFO2SZ8me2y1AC8ofVn4A9ZWL6VzdnO2C8gagNa2nOy5/PE 23zqC2V0mLlIqc3+r69oTCHF5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGznhJZ 7AHvASIu6qGHoO/JdSDHMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMX7ye8u569eCsL3WjdmSKoZo1Vr6mo6+cxIpfvrgBeAlMxoWD17Gd tljIZonvL49CA1rbre8JrPKnFLASoBddZS8t84PDvqRGQV0Vg7TOKFd1745KXxPt 5mioZjSzqFW/0uwmJThmvONNs8F8LKDo7CIESE2q5Y16FfBCGz2aie6/FHQdJUfN NhOs+BD2AZwj4XiNynUPPG/WwGfERBDrN2b88z69faUoS466LES4Tgolz5310ZmK FQaKZ9zHKahtktlr0XKS9IHIwAOQ/4pIK2iwgq21hRQLxvovvF/rnFhrPevIJI0Q AareNdkYYOb174kEzBx+S8PPos0nOzQi -----END CERTIFICATE-----Generated at Sat May 31 16:27:51 2025 by rpki-client