$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json) Hash identifier: JHg12hVLR6MLbeOArJ3g6QxL2/naTmDmZC2ksaj3Z2w= Subject key identifier: 29:6F:B9:01:96:00:AF:E9:CD:D8:1B:84:6E:8D:BD:3D:3E:8C:E5:12 Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft Manifest number: CA Signing time: Sat 31 May 2025 05:23:55 +0000 Manifest this update: Sat 31 May 2025 05:23:55 +0000 Manifest next update: Sat 07 Jun 2025 05:23:55 +0000 Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: 2nBeYickTbsjumrJrl+lnsszd9kP292WbO+k5r1jiKw=) 2: F5AF6608370411F0B2A2B987C4F9AE02.roa (hash: sKL7GxR/Osz7bpKAC1OAVJi+UAvdGvi+MQo+/LHB5R8=) 3: D5A80432370411F0A5919873C4F9AE02.roa (hash: jhleaFnetRilP8PuvxdvCqw9xChQP0YqjbFI4VC52yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Validity Not Before: May 31 05:23:55 2025 GMT Not After : Jun 7 05:23:55 2025 GMT Subject: CN=683a926b-2e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:51:94:24:b6:3b:f4:ee:38:7d:e6:6a:be:bf: aa:79:ec:3c:e3:ac:47:87:2c:91:a4:96:30:bb:b0: 49:42:cb:c2:52:63:d2:e6:7e:72:e3:93:44:f2:30: a6:7f:1d:22:b4:cb:cd:76:e2:dc:da:23:79:a1:19: 7c:34:1f:d8:4a:31:16:41:1d:09:34:4c:93:44:92: 51:6a:37:e3:db:79:73:f4:df:30:c4:23:0a:b6:4e: 4d:ae:f6:bc:b1:27:5d:cd:1d:4d:96:ab:53:99:1c: 00:0a:f2:ea:b9:af:6e:dc:70:10:84:cb:b2:00:d6: 3c:d5:8f:ec:a0:54:b1:ef:f7:e8:23:fb:99:f5:51: 05:c6:60:51:b5:09:39:2f:f7:76:1b:0a:e9:84:99: 7b:db:aa:5d:0a:06:7d:12:bb:d1:8c:3d:74:6d:41: dd:44:c3:b5:b2:11:dd:42:f3:46:28:c2:8d:89:58: df:7d:ef:c3:c7:5d:2c:9f:0d:a0:13:24:97:ca:54: ed:a6:55:98:aa:b0:49:3f:02:36:6e:ba:7b:db:db: 63:43:c5:1d:49:3c:2f:db:17:fd:9d:e9:4b:c2:40: b4:0d:04:ca:87:e5:71:af:71:4d:e9:37:f5:8b:a3: 74:95:ad:df:6a:f2:28:a3:c5:f3:41:d1:ae:0e:08: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:B9:01:96:00:AF:E9:CD:D8:1B:84:6E:8D:BD:3D:3E:8C:E5:12 X509v3 Authority Key Identifier: keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a1:32:ab:e8:2a:70:38:15:12:93:1c:7c:30:b2:3e:c6:cd: 2d:20:f1:27:ee:55:f2:eb:c9:45:86:69:b5:eb:91:9e:44:04: a9:4b:87:d5:64:92:6b:1b:44:c0:25:24:87:cb:bf:1f:b9:1b: ef:09:e8:4d:8b:57:e0:98:24:17:8c:e3:0b:1f:42:b2:ea:95: 8b:49:18:b9:ab:13:87:3b:79:94:e1:de:30:77:3c:78:0c:ca: 90:ec:36:8b:1c:af:96:a0:46:27:fe:7a:a7:6a:44:e4:15:38: de:be:b3:43:3c:c8:2d:96:5c:be:b7:04:f1:95:eb:b5:34:01: 22:3f:8d:9f:b4:88:5e:6e:4b:89:a7:1b:2c:7a:3b:ea:3e:83: 73:ff:16:83:0f:cc:b6:b7:a1:5c:80:79:e9:26:e0:b5:d7:51: d0:ca:36:6c:5d:17:09:21:d7:f4:d2:aa:d6:76:47:2b:bc:59: 5c:0a:ba:1f:01:d1:eb:f6:14:2b:da:89:2f:74:0d:3f:be:42: 06:af:52:29:ea:16:1c:78:17:f2:6f:2f:ee:01:e3:f2:35:5a: 43:b1:f0:d5:5c:bf:6d:36:21:53:58:2f:4b:5e:1f:95:4b:19: 9f:95:0d:8f:23:43:dc:cd:e4:4f:17:b2:34:6f:55:9a:10:3e: 72:f6:a3:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKDQwQjU1QzFBQzc0MDRDQzA1RjE3NzYzQTk5QkJCMjM4 OUJEMkVBQkUwHhcNMjUwNTMxMDUyMzU1WhcNMjUwNjA3MDUyMzU1WjAYMRYwFAYD VQQDEw02ODNhOTI2Yi0yZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lGUJLY79O44feZqvr+qeew846xHhyyRpJYwu7BJQsvCUmPS5n5y45NE8jCm fx0itMvNduLc2iN5oRl8NB/YSjEWQR0JNEyTRJJRajfj23lz9N8wxCMKtk5Nrva8 sSddzR1NlqtTmRwACvLqua9u3HAQhMuyANY81Y/soFSx7/foI/uZ9VEFxmBRtQk5 L/d2GwrphJl726pdCgZ9ErvRjD10bUHdRMO1shHdQvNGKMKNiVjffe/Dx10snw2g EySXylTtplWYqrBJPwI2brp729tjQ8UdSTwv2xf9nelLwkC0DQTKh+Vxr3FN6Tf1 i6N0la3favIoo8XzQdGuDgja8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClvuQGW AK/pzdgbhG6NvT0+jOUSMB8GA1UdIwQYMBaAFEC1XBrHQEzAXxd2Opm7sjib0uq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC81ODQwQTA3QzEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRNQmZGM1k2bWJ1eU9KdlM2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMVmNHc2RBVE1CZkYzWTZtYnV5T0p2UzZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC81ODQwQTA3QzEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRN QmZGM1k2bWJ1eU9KdlM2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcoTKr6CpwOBUSkxx8MLI+xs0tIPEn7lXy68lFhmm165GeRASpS4fV ZJJrG0TAJSSHy78fuRvvCehNi1fgmCQXjOMLH0Ky6pWLSRi5qxOHO3mU4d4wdzx4 DMqQ7DaLHK+WoEYn/nqnakTkFTjevrNDPMgtlly+twTxleu1NAEiP42ftIhebkuJ pxssejvqPoNz/xaDD8y2t6FcgHnpJuC111HQyjZsXRcJIdf00qrWdkcrvFlcCrof AdHr9hQr2okvdA0/vkIGr1Ip6hYceBfyby/uAePyNVpDsfDVXL9tNiFTWC9LXh+V SxmflQ2PI0PczeRPF7I0b1WaED5y9qPm -----END CERTIFICATE-----Generated at Sat May 31 16:57:52 2025 by rpki-client