$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json) Hash identifier: nylBpbvDxqgw7bGt+DDF6Sa398tK/WkzdsiAcY9S83Q= Subject key identifier: 5F:9C:12:D9:10:4A:72:A5:93:4B:2A:FD:CD:18:05:C8:B1:7E:5E:CF Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft Manifest number: 06 Signing time: Thu 05 Jun 2025 07:35:02 +0000 Manifest this update: Thu 05 Jun 2025 07:35:01 +0000 Manifest next update: Thu 12 Jun 2025 07:35:01 +0000 Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: 9uOgEp7kmDDfFREtF1eYi1qIHPhFAvXgtpxOwgjinYI=) 2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: jPnHx/VwrEHzMcIk6hG/2vteGtB6XZZVA832ptEHOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Validity Not Before: Jun 5 07:35:01 2025 GMT Not After : Jun 12 07:35:01 2025 GMT Subject: CN=684148a5-144c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:22:4e:18:2d:6c:8c:a3:69:af:b3:84:60: 5f:a8:b0:02:23:7b:83:06:0a:21:63:80:a4:0c:21: cf:2f:cc:80:9c:c8:ff:7f:3c:6a:6d:a5:16:3c:b5: 17:36:d2:fb:f3:7c:49:8b:1d:1f:6c:cf:cd:b2:f1: ee:30:c0:31:76:55:c8:0e:4a:1d:98:b6:3c:6b:bd: ac:c5:ed:9c:e3:78:42:ab:eb:01:0b:35:f0:9f:54: 07:70:e9:9a:8a:f0:0c:f8:2e:a4:22:1a:78:2e:38: d3:2b:70:4c:05:8a:1f:d4:11:45:66:8c:7b:92:9e: e0:9c:03:c5:41:10:36:96:03:3c:b7:0d:4c:cf:46: d4:44:46:3a:a6:91:31:dd:21:2b:ee:ac:df:b3:7e: 61:f1:0b:8d:d2:4a:77:f2:fc:16:db:16:26:be:19: a0:bb:c5:93:32:42:4e:7b:42:92:1e:86:04:79:69: 61:fa:39:3c:be:89:df:a2:2a:be:a5:a8:c5:7c:be: 8a:52:9a:ab:0d:f2:26:b3:87:aa:93:70:91:82:d5: e1:67:7c:9d:db:50:f0:9a:5a:b3:a9:79:d2:44:11: 3f:4c:cb:a9:d9:df:13:38:68:39:a7:2e:a2:9d:b8: 54:78:ea:49:72:1b:ed:de:0c:89:a8:96:00:6c:77: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9C:12:D9:10:4A:72:A5:93:4B:2A:FD:CD:18:05:C8:B1:7E:5E:CF X509v3 Authority Key Identifier: keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:0e:02:7a:24:59:2d:9c:df:7f:61:99:f4:35:00:a1:3e:11: e0:e8:f6:2b:c4:6d:fd:55:c2:13:d9:df:ce:47:c3:9c:03:13: 72:b7:87:b5:27:2d:d4:bd:99:6b:fb:38:6c:0b:af:89:71:3a: 56:37:ad:68:b6:d7:79:f4:26:ac:7b:a0:cf:22:ee:75:48:43: e4:bf:cd:0d:c7:e3:74:5a:c3:91:a2:a4:9b:88:b6:98:98:00: 16:1a:70:ad:fb:be:e4:4c:a9:09:eb:b5:49:34:c8:7e:ee:00: 64:7d:2d:00:8e:6b:52:bf:b8:17:29:c0:0f:32:41:aa:fd:cc: 78:31:d8:fe:32:af:6f:ae:1a:97:5a:39:98:ce:15:8d:00:22: 43:e5:5c:2b:e1:7e:ef:37:64:c2:76:cc:01:83:3c:f1:14:4c: 80:09:f6:8a:8e:50:b9:d0:93:5a:f4:57:52:19:9c:78:cf:54: d9:9c:d1:37:c8:39:43:22:53:e2:b8:96:0f:0a:29:7c:69:07: 8d:e2:66:55:4c:f2:fc:1f:15:54:74:8d:13:39:35:c5:ce:de: 06:d8:90:99:bd:92:c7:64:c2:14:4b:63:43:40:f7:50:3e:01: a0:a9:2c:65:c6:f6:f9:ad:33:ea:95:6e:e1:89:3a:21:90:65: 0e:b6:78:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTdGNDE5MjUxQTc5NjFERjI3NEQzOUI1MzRBMjJGM0VD REIzMTAyRjAeFw0yNTA2MDUwNzM1MDFaFw0yNTA2MTIwNzM1MDFaMBgxFjAUBgNV BAMTDTY4NDE0OGE1LTE0NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfeiJOGC1sjKNpr7OEYF+osAIje4MGCiFjgKQMIc8vzICcyP9/PGptpRY8tRc2 0vvzfEmLHR9sz82y8e4wwDF2VcgOSh2YtjxrvazF7ZzjeEKr6wELNfCfVAdw6ZqK 8Az4LqQiGnguONMrcEwFih/UEUVmjHuSnuCcA8VBEDaWAzy3DUzPRtRERjqmkTHd ISvurN+zfmHxC43SSnfy/BbbFia+GaC7xZMyQk57QpIehgR5aWH6OTy+id+iKr6l qMV8vopSmqsN8iazh6qTcJGC1eFnfJ3bUPCaWrOpedJEET9My6nZ3xM4aDmnLqKd uFR46klyG+3eDImolgBsd6BvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX5wS2RBK cqWTSyr9zRgFyLF+Xs8wHwYDVR0jBBgwFoAU5/QZJRp5Yd8nTTm1NKIvPs2zEC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzRGNDBCRTZDM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNV9RWkpScDVZZDhuVFRtMU5LSXZQczJ6RUM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzRGNDBCRTZDM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4 blRUbTFOS0l2UHMyekVDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOwOAnokWS2c339hmfQ1AKE+EeDo9ivEbf1VwhPZ385Hw5wDE3K3h7Un LdS9mWv7OGwLr4lxOlY3rWi213n0Jqx7oM8i7nVIQ+S/zQ3H43Raw5GipJuItpiY ABYacK37vuRMqQnrtUk0yH7uAGR9LQCOa1K/uBcpwA8yQar9zHgx2P4yr2+uGpda OZjOFY0AIkPlXCvhfu83ZMJ2zAGDPPEUTIAJ9oqOULnQk1r0V1IZnHjPVNmc0TfI OUMiU+K4lg8KKXxpB43iZlVM8vwfFVR0jRM5NcXO3gbYkJm9ksdkwhRLY0NA91A+ AaCpLGXG9vmtM+qVbuGJOiGQZQ62eD8= -----END CERTIFICATE-----Generated at Thu Jun 5 19:17:44 2025 by rpki-client