$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: 64Bc9on0iuhYPEntBSFAKWbaf5VeP+hPQWK9mAivPfg= Subject key identifier: A4:2D:BE:14:F9:27:5C:BB:76:13:B7:F9:7D:66:9B:56:3E:F3:32:10 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0229 Signing time: Tue 03 Jun 2025 02:15:09 +0000 Manifest this update: Tue 03 Jun 2025 02:15:09 +0000 Manifest next update: Tue 10 Jun 2025 02:15:09 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: UC8BGt0Ekn0NsZU+6WS+mh2JlKKjcb/Ztf9yOdmBpvE=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: IN+H6LUETq8W/dLs0PZX77bed7F0mQsx+AWJPeSHLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Jun 3 02:15:09 2025 GMT Not After : Jun 10 02:15:09 2025 GMT Subject: CN=683e5aad-0c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:7b:80:14:5d:2e:2d:b7:82:d2:c9:24:0b: c4:82:75:e4:c7:10:0d:ed:5c:ec:c3:aa:7b:9b:d1: 1b:c5:ed:3b:04:2e:28:07:5e:8d:5e:09:dc:f8:4d: 2d:ac:a4:ef:ba:81:0a:3c:1a:b4:3f:10:aa:af:54: 37:06:5c:f9:0f:bc:28:32:bb:9f:73:f9:00:1d:ae: 8d:67:59:92:cd:e2:36:64:f8:e2:a2:ef:54:13:ed: 73:c0:45:af:71:90:6e:44:3a:1e:cb:7e:d0:8f:f9: 7e:d5:f8:57:f7:06:15:3e:82:84:0d:7f:f0:fe:32: 4a:fb:f4:f7:ab:30:82:fa:ca:1d:dd:b6:94:01:f5: a9:61:81:7e:0b:35:92:cc:6d:a9:e9:35:e6:c5:94: 91:b6:8b:6c:5f:63:55:61:5f:91:72:ab:65:0b:9e: 8f:00:9a:cc:0f:36:ae:27:de:f2:62:cd:83:53:89: 49:be:bc:04:e2:c0:59:c9:74:86:ff:b7:73:df:f3: 47:cc:47:d3:a5:0c:9c:6d:4d:6f:3e:e6:49:19:3f: cd:c8:90:10:90:7a:f8:8e:6a:55:2b:3f:9c:3a:f1: c6:b6:6c:2e:2c:46:e5:18:07:e3:71:0f:d1:d0:df: ac:1c:aa:1f:eb:3f:60:b9:c6:6c:9c:4a:88:90:44: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:BE:14:F9:27:5C:BB:76:13:B7:F9:7D:66:9B:56:3E:F3:32:10 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:53:af:36:29:e2:86:11:fa:80:9f:b5:cd:61:99:c5:5b:7b: 1c:0f:75:27:b0:db:b0:01:c7:62:c0:00:cd:34:50:38:f2:9a: 84:d6:a8:bd:cd:47:3c:b1:4e:4a:e7:be:f7:f7:54:0d:11:58: 1d:fe:59:07:8c:21:8e:f4:86:1d:42:31:70:a2:76:da:c8:cd: 31:5f:8a:f2:08:3e:24:18:dc:b5:19:f2:cd:c5:75:6d:30:75: 0d:db:1d:3d:9e:f2:21:2f:32:e8:03:a7:26:c4:5a:8d:23:d5: 0f:a5:68:03:01:f4:10:3b:90:80:e8:c8:d4:77:d9:60:4e:62: f8:fd:a9:dd:91:aa:4b:d2:16:c8:3a:96:01:d5:14:7a:4a:f9: ce:ea:ee:7b:44:80:ac:58:c0:25:ec:d6:4c:e9:59:22:31:03: d5:99:9b:2f:28:6b:87:87:66:d4:6e:3a:b3:99:d8:8f:db:bf: c8:e0:91:86:ff:58:3c:ed:19:31:91:e8:5c:7d:4f:3f:45:0a: 85:f3:9b:4f:8c:82:4b:51:de:a0:8e:4e:20:27:46:e2:03:39: d3:67:fb:10:e7:c0:45:0f:dc:47:8f:b2:0a:f3:5b:46:1e:df: 2a:0e:b6:bc:e3:0a:9c:0a:81:e9:08:ae:61:28:72:c2:73:fc: 2d:95:7c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwNjAzMDIxNTA5WhcNMjUwNjEwMDIxNTA5WjAYMRYwFAYD VQQDEw02ODNlNWFhZC0wYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzF7gBRdLi23gtLJJAvEgnXkxxAN7Vzsw6p7m9Ebxe07BC4oB16NXgnc+E0t rKTvuoEKPBq0PxCqr1Q3Blz5D7woMrufc/kAHa6NZ1mSzeI2ZPjiou9UE+1zwEWv cZBuRDoey37Qj/l+1fhX9wYVPoKEDX/w/jJK+/T3qzCC+sod3baUAfWpYYF+CzWS zG2p6TXmxZSRtotsX2NVYV+RcqtlC56PAJrMDzauJ97yYs2DU4lJvrwE4sBZyXSG /7dz3/NHzEfTpQycbU1vPuZJGT/NyJAQkHr4jmpVKz+cOvHGtmwuLEblGAfjcQ/R 0N+sHKof6z9gucZsnEqIkETYOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQtvhT5 J1y7dhO3+X1mm1Y+8zIQMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVU682KeKGEfqAn7XNYZnFW3scD3UnsNuwAcdiwADNNFA48pqE1qi9 zUc8sU5K577391QNEVgd/lkHjCGO9IYdQjFwonbayM0xX4ryCD4kGNy1GfLNxXVt MHUN2x09nvIhLzLoA6cmxFqNI9UPpWgDAfQQO5CA6MjUd9lgTmL4/andkapL0hbI OpYB1RR6SvnO6u57RICsWMAl7NZM6VkiMQPVmZsvKGuHh2bUbjqzmdiP27/I4JGG /1g87RkxkehcfU8/RQqF85tPjIJLUd6gjk4gJ0biAznTZ/sQ58BFD9xHj7IK81tG Ht8qDra84wqcCoHpCK5hKHLCc/wtlXyQ -----END CERTIFICATE-----Generated at Tue Jun 3 23:54:38 2025 by rpki-client