$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: tb6UBoJfNkMckLHPm3CAHYBJHTdO1hHIq5K6nrkURig= Subject key identifier: AF:1A:FD:FE:70:08:2E:3D:14:EE:3D:94:8B:E8:56:9C:0E:CD:E0:D2 Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B5A Signing time: Fri 30 May 2025 19:20:55 +0000 Manifest this update: Fri 30 May 2025 19:20:54 +0000 Manifest next update: Fri 06 Jun 2025 19:20:54 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: fWhf1AAWKjlILXWMb48F16+HYVBtZQwQBQPnGmcrMWg=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: May 30 19:20:54 2025 GMT Not After : Jun 6 19:20:54 2025 GMT Subject: CN=683a0517-b21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:35:75:d3:96:a1:82:26:a4:22:9b:fb:83: 7c:ca:2c:bc:de:03:6f:3c:53:e5:05:0a:80:35:fa: 52:fb:49:85:a2:a3:91:17:7b:bb:ea:a4:7d:78:68: c7:a6:95:4c:4e:e5:59:e9:33:3d:ae:a2:4f:5d:53: 14:ea:42:d9:e8:f4:d8:52:5f:6e:8d:7f:54:d7:08: 37:43:90:7b:bb:53:fa:6c:57:8f:67:6f:d9:46:2a: ab:e6:fe:17:45:a9:13:3e:af:62:19:e3:97:ff:21: 10:a7:2b:26:f8:63:55:b0:22:d9:c0:8c:7f:a4:07: 9f:c9:ec:00:e5:bb:77:56:9b:1e:24:49:9e:30:05: 34:15:47:b3:b3:88:3b:38:9e:ad:c6:3e:25:20:f7: 49:6b:7b:03:88:f8:cb:1e:af:c2:38:f4:04:74:5a: 77:4b:81:86:0d:34:ce:a6:24:64:11:d9:7c:25:81: f7:8c:a2:a1:0d:0e:17:e1:d3:83:2c:3a:c7:f4:cf: d6:91:a6:f5:ed:91:08:d5:91:68:80:b8:5c:cb:35: 82:65:27:46:25:77:9f:8c:a6:7d:63:ae:c8:95:27: 3c:05:23:0f:2c:53:ba:d9:3d:52:db:43:05:f9:c4: e3:36:3e:c8:3c:b1:06:33:7f:3f:c1:12:53:75:db: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1A:FD:FE:70:08:2E:3D:14:EE:3D:94:8B:E8:56:9C:0E:CD:E0:D2 X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b9:b5:1e:ac:5c:7c:c1:00:00:3c:3e:70:de:7f:24:15:ce: 8f:7a:57:dc:20:96:69:6a:1b:43:ab:ea:b7:c9:d8:b0:70:89: f2:6a:b7:0a:75:c5:d8:62:c7:23:78:ad:bd:c5:18:c6:dd:41: 25:20:e6:03:ec:e9:94:05:6c:cd:2d:f1:62:6a:62:48:96:30: 2b:ba:01:03:3a:94:95:82:63:00:b5:0d:b6:c5:66:7e:49:08: 68:14:f1:9d:62:37:1f:94:a8:9d:fa:4b:08:49:b6:17:13:93: b1:a6:08:c0:8e:4f:92:1a:52:16:b2:bd:89:7e:d2:6a:eb:7b: 83:93:58:0b:a7:fd:0e:f8:42:ae:28:55:46:ae:1d:b1:dc:41: f3:3e:4b:32:47:d0:ce:24:de:0f:7a:2d:0b:fc:f1:21:34:9a: d5:f3:a2:e4:c6:1a:76:cb:92:52:88:f2:f4:f8:eb:9b:6e:8d: 52:e8:c3:35:75:64:2b:78:2b:61:18:ad:6b:74:15:be:df:cc: 85:42:04:86:11:bf:5f:b4:1c:03:e8:3e:b6:07:be:1e:62:7b: 6f:c9:af:6a:66:4c:3a:75:31:d3:c0:42:26:4d:57:4c:38:7c: 09:3a:34:1b:d4:a1:67:ec:9a:e0:ca:db:98:9a:5a:f3:86:59: e2:f2:d0:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwNTMwMTkyMDU0WhcNMjUwNjA2MTkyMDU0WjAYMRYwFAYD VQQDEw02ODNhMDUxNy1iMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH81ddOWoYImpCKb+4N8yiy83gNvPFPlBQqANfpS+0mFoqORF3u76qR9eGjH ppVMTuVZ6TM9rqJPXVMU6kLZ6PTYUl9ujX9U1wg3Q5B7u1P6bFePZ2/ZRiqr5v4X RakTPq9iGeOX/yEQpysm+GNVsCLZwIx/pAefyewA5bt3VpseJEmeMAU0FUezs4g7 OJ6txj4lIPdJa3sDiPjLHq/COPQEdFp3S4GGDTTOpiRkEdl8JYH3jKKhDQ4X4dOD LDrH9M/Wkab17ZEI1ZFogLhcyzWCZSdGJXefjKZ9Y67IlSc8BSMPLFO62T1S20MF +cTjNj7IPLEGM38/wRJTddvm8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8a/f5w CC49FO49lIvoVpwOzeDSMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+ubUerFx8wQAAPD5w3n8kFc6PelfcIJZpahtDq+q3ydiwcInyarcK dcXYYscjeK29xRjG3UElIOYD7OmUBWzNLfFiamJIljArugEDOpSVgmMAtQ22xWZ+ SQhoFPGdYjcflKid+ksISbYXE5OxpgjAjk+SGlIWsr2JftJq63uDk1gLp/0O+EKu KFVGrh2x3EHzPksyR9DOJN4Pei0L/PEhNJrV86Lkxhp2y5JSiPL0+Oubbo1S6MM1 dWQreCthGK1rdBW+38yFQgSGEb9ftBwD6D62B74eYntvya9qZkw6dTHTwEImTVdM OHwJOjQb1KFn7JrgytuYmlrzhlni8tBA -----END CERTIFICATE-----Generated at Sat May 31 17:31:51 2025 by rpki-client