$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: 0crdcFoBZpeca+nPfvXnqdNkMgVwGRhzaCtnfZrpX+M= Subject key identifier: 69:5B:AE:FA:2C:F4:48:85:4F:9C:3F:9D:8C:AC:6E:38:81:B7:98:F4 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 0534 Signing time: Sat 31 May 2025 00:25:49 +0000 Manifest this update: Sat 31 May 2025 00:25:49 +0000 Manifest next update: Sat 07 Jun 2025 00:25:49 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: WxofLP2IjiFIeh5AqffilpjJaMnofEi57kWwGzJicGU=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: /ckEG51NBhBYEZtZSbLBPmavN3UuTjHbEpYTSHsiIm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: May 31 00:25:49 2025 GMT Not After : Jun 7 00:25:49 2025 GMT Subject: CN=683a4c8d-88e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:9f:bc:b8:04:2a:59:e7:eb:71:3b:9d:5f: 49:70:63:be:1d:61:2a:77:b2:18:e2:d5:44:97:92: 8d:fa:58:a1:3f:14:eb:08:e8:15:aa:30:f0:c9:2e: c3:07:0c:9e:4a:5d:16:55:9f:5e:0c:9f:57:16:7f: 4a:2f:39:f8:63:f9:c3:dd:ff:82:25:81:6f:c6:8a: 72:70:66:f6:cd:1d:16:04:78:a3:7c:43:20:01:8c: 36:3a:cd:55:51:77:d8:bb:10:c5:2d:28:4b:2c:a6: db:71:1e:51:ef:92:d0:d4:02:3e:06:7c:10:fc:f5: e1:d8:12:c8:1c:b9:cd:3a:2d:8b:3c:17:c7:91:ec: 71:8d:06:8f:70:7f:a7:23:1c:7c:26:8a:2b:17:16: 06:86:75:5e:c6:96:6c:16:d1:8d:a4:d3:c5:46:e9: 53:c7:ef:91:02:74:6a:b2:35:68:01:f7:12:0c:d5: 1c:7c:1c:c1:18:8d:71:65:b4:cf:64:bc:cc:8f:b5: 7b:b5:17:fd:70:37:95:34:62:86:0e:38:be:26:38: 4b:b4:e9:00:ed:87:c7:8a:c1:ac:aa:58:1c:30:d7: 71:f1:dd:7e:3a:78:2e:4d:2d:56:e1:5f:b4:c5:65: a9:28:37:ae:97:52:f4:fb:a4:ea:3b:75:21:a0:9b: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:AE:FA:2C:F4:48:85:4F:9C:3F:9D:8C:AC:6E:38:81:B7:98:F4 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4f:ec:84:71:54:d6:30:04:a4:31:c8:8a:45:1e:bd:1a:9a: 8b:a8:20:a4:cb:fe:d6:74:21:f5:37:38:6e:61:c0:3b:8a:43: 40:e5:e5:9d:78:fc:1a:6a:65:82:fd:0d:20:2e:16:d9:94:a4: e3:f4:b5:5c:df:bf:4f:b7:a2:90:19:70:09:a6:36:af:7a:a1: f4:e2:9b:97:a3:e1:cf:f7:87:da:db:51:d2:aa:05:14:0b:a8: 02:a7:3e:f3:56:44:7c:5b:3a:e2:ff:c9:cd:10:86:8f:24:6b: 23:e6:0e:33:2a:d4:80:85:e7:0f:38:83:1e:f2:ad:ea:6d:ff: 34:cc:55:3a:1f:84:fe:44:34:99:80:7c:18:2e:cd:8f:47:b4: d0:d8:90:dd:9b:42:c2:af:54:dc:d5:a7:7d:fe:af:a3:10:f9: bc:d9:56:b0:cb:a8:44:6b:cf:99:ba:fc:6e:a6:4c:65:a4:73: 85:b2:ab:5d:fa:e5:4d:22:88:66:c8:cd:41:ad:fa:a3:50:80: ff:b9:1d:84:09:55:9c:15:c5:fe:c8:73:bf:f6:56:fe:16:c4: 9a:0c:03:07:3e:0a:8c:dc:8b:f3:a3:1c:b6:55:a0:f8:73:13: bf:62:3d:82:bd:9b:a5:50:3b:85:52:6e:3c:1a:11:af:b8:bb: 3d:c9:d2:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjUwNTMxMDAyNTQ5WhcNMjUwNjA3MDAyNTQ5WjAYMRYwFAYD VQQDEw02ODNhNGM4ZC04OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfefvLgEKlnn63E7nV9JcGO+HWEqd7IY4tVEl5KN+lihPxTrCOgVqjDwyS7D BwyeSl0WVZ9eDJ9XFn9KLzn4Y/nD3f+CJYFvxopycGb2zR0WBHijfEMgAYw2Os1V UXfYuxDFLShLLKbbcR5R75LQ1AI+BnwQ/PXh2BLIHLnNOi2LPBfHkexxjQaPcH+n Ixx8JoorFxYGhnVexpZsFtGNpNPFRulTx++RAnRqsjVoAfcSDNUcfBzBGI1xZbTP ZLzMj7V7tRf9cDeVNGKGDji+JjhLtOkA7YfHisGsqlgcMNdx8d1+OnguTS1W4V+0 xWWpKDeul1L0+6TqO3UhoJtlXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlbrvos 9EiFT5w/nYysbjiBt5j0MB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlT+yEcVTWMASkMciKRR69GpqLqCCky/7WdCH1NzhuYcA7ikNA5eWd ePwaamWC/Q0gLhbZlKTj9LVc379Pt6KQGXAJpjaveqH04puXo+HP94fa21HSqgUU C6gCpz7zVkR8Wzri/8nNEIaPJGsj5g4zKtSAhecPOIMe8q3qbf80zFU6H4T+RDSZ gHwYLs2PR7TQ2JDdm0LCr1Tc1ad9/q+jEPm82Vawy6hEa8+ZuvxupkxlpHOFsqtd +uVNIohmyM1BrfqjUID/uR2ECVWcFcX+yHO/9lb+FsSaDAMHPgqM3Ivzoxy2VaD4 cxO/Yj2CvZulUDuFUm48GhGvuLs9ydJS -----END CERTIFICATE-----Generated at Sat May 31 17:37:44 2025 by rpki-client