$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: S98Ew03RVlW9izqCwMF9dHgjZVRKw+bGCKbH3XVnLgQ= Subject key identifier: 1B:5A:30:22:56:1B:96:C2:D4:91:36:10:77:74:3A:E2:F1:FC:75:52 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0B14 Signing time: Fri 30 May 2025 19:28:31 +0000 Manifest this update: Fri 30 May 2025 19:28:31 +0000 Manifest next update: Fri 06 Jun 2025 19:28:31 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: m2eOm1I61qdg18LHPoo8w+buzFGU7hEsmt0+i65PEYs=) 2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: gD5Iq8akoAlTIS4ryMBL5JIYOH1ViK0S3xNtIRVVfYc=) 3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: 2OIryrqTJwARaXm6rXTbRJKfK80d24FVCzeiupTYqAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: May 30 19:28:31 2025 GMT Not After : Jun 6 19:28:31 2025 GMT Subject: CN=683a06df-405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:ba:07:79:a6:ee:e7:af:4d:7d:4e:73:e0: dc:ad:28:69:62:f0:5a:40:62:eb:a2:1a:af:6a:f0: d1:6f:29:c2:10:61:97:70:f1:b8:31:6c:94:72:8f: 51:ff:15:62:bf:38:3c:1d:e7:14:87:81:2c:28:2b: 9f:1c:3d:9a:f3:c6:28:08:d5:ae:bf:52:95:50:cc: eb:86:d6:50:df:48:eb:53:a6:b7:c9:58:a2:6f:8e: ad:87:87:2c:ca:1f:77:04:e9:3e:ef:de:d4:5f:63: 47:00:fa:a1:48:05:95:33:f8:9f:f5:f4:82:9d:44: 76:6e:70:8a:20:d0:03:8b:66:b3:d6:aa:db:67:50: 7d:07:c1:1f:8a:b2:aa:b2:1f:ae:eb:11:36:78:40: 29:20:31:f9:3c:7e:72:47:51:7f:d9:8a:14:0b:e4: a4:69:bf:34:da:8f:d2:eb:5f:61:17:d1:af:a8:8f: ff:b9:d6:9b:5b:0f:0f:43:17:78:03:b5:60:f6:e7: 26:39:40:ae:2e:ba:9d:08:05:5f:a5:af:88:33:73: 41:a6:95:6c:3b:bc:00:32:6f:75:b3:6a:af:ed:7d: 6c:b4:8e:3a:e2:c9:26:c1:91:8e:18:18:47:91:90: 43:b9:22:23:49:c7:f0:9a:d6:ac:fb:17:19:9f:f1: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:30:22:56:1B:96:C2:D4:91:36:10:77:74:3A:E2:F1:FC:75:52 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:04:10:81:a8:a8:58:42:6c:dd:e2:76:fb:60:6a:a2:cf:f5: 38:03:17:52:d6:cf:a9:c2:91:b7:b5:ec:13:e1:36:c2:f6:5c: 7c:16:07:73:71:c3:e3:c5:99:a6:c8:d6:48:63:86:ac:1f:d1: 9f:37:20:67:70:c9:87:9a:e4:19:9e:66:55:7a:65:2f:4d:63: 12:da:c9:54:79:fc:7b:d5:62:0d:b1:e5:c2:88:37:77:41:44: c2:0e:ad:de:2c:a1:09:5b:65:b6:87:d2:ff:c6:af:8d:76:41: 9b:20:65:7b:99:7b:cb:15:ec:18:ea:3a:0d:c9:31:88:ad:f7: 8d:52:fe:14:27:fd:f2:05:e3:72:46:fa:70:d5:f6:9d:91:31: ba:71:af:a9:22:f8:fb:e7:25:8b:9f:2f:26:50:2c:db:35:40: 4b:64:58:dc:11:12:f8:22:f3:2c:3d:4b:4a:4d:1d:c2:43:bd: a8:8e:71:52:0c:d6:6c:1c:4a:53:40:dd:87:73:65:8a:68:bf: 5c:8c:8b:3b:1d:85:73:c6:19:37:4d:3d:fe:fb:6a:77:d6:53: 63:d7:0d:62:3d:9a:e7:17:21:8f:1d:51:3f:ab:68:89:16:bc: 9f:5f:06:43:33:e2:51:1d:40:e1:34:71:80:4b:a0:f1:d2:2d: 91:43:63:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUwNTMwMTkyODMxWhcNMjUwNjA2MTkyODMxWjAYMRYwFAYD VQQDEw02ODNhMDZkZi00MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ey6B3mm7uevTX1Oc+DcrShpYvBaQGLrohqvavDRbynCEGGXcPG4MWyUco9R /xVivzg8HecUh4EsKCufHD2a88YoCNWuv1KVUMzrhtZQ30jrU6a3yViib46th4cs yh93BOk+797UX2NHAPqhSAWVM/if9fSCnUR2bnCKINADi2az1qrbZ1B9B8EfirKq sh+u6xE2eEApIDH5PH5yR1F/2YoUC+Skab802o/S619hF9GvqI//udabWw8PQxd4 A7Vg9ucmOUCuLrqdCAVfpa+IM3NBppVsO7wAMm91s2qv7X1stI464skmwZGOGBhH kZBDuSIjScfwmtas+xcZn/GQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtaMCJW G5bC1JE2EHd0OuLx/HVSMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUBBCBqKhYQmzd4nb7YGqiz/U4AxdS1s+pwpG3tewT4TbC9lx8Fgdz ccPjxZmmyNZIY4asH9GfNyBncMmHmuQZnmZVemUvTWMS2slUefx71WINseXCiDd3 QUTCDq3eLKEJW2W2h9L/xq+NdkGbIGV7mXvLFewY6joNyTGIrfeNUv4UJ/3yBeNy Rvpw1fadkTG6ca+pIvj75yWLny8mUCzbNUBLZFjcERL4IvMsPUtKTR3CQ72ojnFS DNZsHEpTQN2Hc2WKaL9cjIs7HYVzxhk3TT3++2p31lNj1w1iPZrnFyGPHVE/q2iJ FryfXwZDM+JRHUDhNHGAS6Dx0i2RQ2MU -----END CERTIFICATE-----Generated at Sat May 31 16:35:00 2025 by rpki-client