$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: aqCmrKcKar16dl0UIpwHPds1t2zIIuFX7ff7kcjuXIM= Subject key identifier: 20:65:91:5B:F3:4D:53:C5:67:08:02:F3:21:5F:51:AF:82:FA:21:B0 Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 3485 Signing time: Sat 31 May 2025 15:15:47 +0000 Manifest this update: Sat 31 May 2025 15:15:46 +0000 Manifest next update: Sat 07 Jun 2025 15:15:46 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: 9Y8v00Y84mzypWZxqcCJLDGczxOkLfDbMKqjAIemtrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: May 31 15:15:46 2025 GMT Not After : Jun 7 15:15:46 2025 GMT Subject: CN=683b1d23-e0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:98:62:b8:c0:57:b2:1f:f4:f9:fa:3d:d1: b7:ef:e0:e2:b6:25:25:34:70:56:c8:e5:da:cf:5b: 66:f8:bf:23:36:50:5a:7f:2c:87:45:ea:c2:99:9e: 45:27:67:28:07:bf:d8:d3:fe:d7:1c:f5:84:86:be: 9b:e9:ef:75:5a:f8:22:09:c3:0f:90:23:38:f8:3a: f1:f7:b8:9f:35:7c:fc:7f:c4:1e:6c:45:da:00:f0: 30:da:bd:37:82:af:6b:b8:7c:04:96:ad:e3:5b:4d: 61:96:1d:9c:37:94:c2:17:b9:00:58:ec:3f:f4:84: 52:99:4f:da:b9:1b:c0:77:06:07:38:12:78:4e:03: 72:bd:bf:e2:de:9c:a5:27:fb:16:23:c9:51:a8:2b: a3:78:26:3f:e4:a9:41:af:71:18:81:7d:b2:f6:0e: 23:dd:5f:b1:c3:a3:17:f3:85:a3:39:fb:27:76:8c: c6:a3:c0:60:d2:05:f9:d8:d3:65:9e:6f:7a:ca:21: 96:8e:b4:33:6d:e0:d7:00:8e:22:d1:12:dc:e2:b1: 07:61:82:52:5b:1f:51:14:18:fd:46:37:0c:95:43: f2:81:5f:d0:48:e8:03:60:e8:a5:23:01:97:ba:00: 4d:98:a2:0a:5e:de:92:58:5c:27:f5:32:0f:6b:f7: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:65:91:5B:F3:4D:53:C5:67:08:02:F3:21:5F:51:AF:82:FA:21:B0 X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b4:63:e4:87:7d:14:bd:fa:6d:a0:d0:c1:74:ce:aa:06:e2: 35:ca:60:7f:74:2d:fc:bf:29:fd:2f:4d:23:e4:8f:8e:f2:3f: 90:10:02:d6:37:cd:17:6b:08:30:9c:8f:a7:04:d2:b7:83:b6: 95:3e:33:ec:b5:91:0b:50:09:3d:9c:9a:ed:1b:d4:c5:d6:58: 35:b4:ef:68:92:c5:5d:a7:fc:5a:43:c7:80:fb:a6:d5:3d:77: 91:ea:e8:87:d6:ca:14:68:44:f9:59:08:2b:52:9b:43:e4:3d: d5:33:a8:89:0e:c2:dc:36:f5:52:8f:0b:77:e2:b6:40:36:30: 7f:b1:5a:00:dd:01:d6:98:13:49:ce:8f:43:3b:aa:51:b9:88: 40:40:36:37:79:81:d4:6b:a7:c2:05:27:3a:0c:6a:73:ad:65: 5c:2a:e5:72:7a:11:2c:6a:3a:a5:4f:ad:cc:6d:96:d9:a4:38: bc:c1:0c:7c:7a:4c:b3:74:3f:7c:b9:be:60:38:a9:40:bb:4e: 25:4c:5c:98:0a:39:91:7c:53:14:7b:4f:33:a2:27:fe:e2:b8: 7f:cc:1c:5d:72:f0:2a:5d:1a:ba:63:10:2c:28:e4:83:25:6d: 79:d7:8a:0d:a4:8e:0a:f4:92:fe:23:e7:9a:b7:b4:1d:f9:43: a2:2a:6f:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjUwNTMxMTUxNTQ2WhcNMjUwNjA3MTUxNTQ2WjAYMRYwFAYD VQQDEw02ODNiMWQyMy1lMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokCYYrjAV7If9Pn6PdG37+DitiUlNHBWyOXaz1tm+L8jNlBafyyHRerCmZ5F J2coB7/Y0/7XHPWEhr6b6e91WvgiCcMPkCM4+Drx97ifNXz8f8QebEXaAPAw2r03 gq9ruHwElq3jW01hlh2cN5TCF7kAWOw/9IRSmU/auRvAdwYHOBJ4TgNyvb/i3pyl J/sWI8lRqCujeCY/5KlBr3EYgX2y9g4j3V+xw6MX84WjOfsndozGo8Bg0gX52NNl nm96yiGWjrQzbeDXAI4i0RLc4rEHYYJSWx9RFBj9RjcMlUPygV/QSOgDYOilIwGX ugBNmKIKXt6SWFwn9TIPa/fwKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBlkVvz TVPFZwgC8yFfUa+C+iGwMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCztGPkh30UvfptoNDBdM6qBuI1ymB/dC38vyn9L00j5I+O8j+QEALW N80XawgwnI+nBNK3g7aVPjPstZELUAk9nJrtG9TF1lg1tO9oksVdp/xaQ8eA+6bV PXeR6uiH1soUaET5WQgrUptD5D3VM6iJDsLcNvVSjwt34rZANjB/sVoA3QHWmBNJ zo9DO6pRuYhAQDY3eYHUa6fCBSc6DGpzrWVcKuVyehEsajqlT63MbZbZpDi8wQx8 ekyzdD98ub5gOKlAu04lTFyYCjmRfFMUe08zoif+4rh/zBxdcvAqXRq6YxAsKOSD JW1514oNpI4K9JL+I+eat7Qd+UOiKm9q -----END CERTIFICATE-----Generated at Sat May 31 16:49:06 2025 by rpki-client