$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft File: QidVkJNLMeOdgd28nAmFa39OWIQ.mft (raw, json) Hash identifier: JdoxjJIsPRTvYJjDERnRLBdryWD57WpRIb5F3uFoCKo= Subject key identifier: 9F:43:E5:2F:2B:20:DE:BC:97:3D:9E:EE:48:E3:D4:2E:10:02:D6:4C Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84 Certificate issuer: /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft Manifest number: 01EC Signing time: Sat 31 May 2025 02:16:26 +0000 Manifest this update: Sat 31 May 2025 02:16:26 +0000 Manifest next update: Sat 07 Jun 2025 02:16:26 +0000 Files and hashes: 1: QidVkJNLMeOdgd28nAmFa39OWIQ.crl (hash: NbP1dBMDQ9p8nZ7Th3aScOmOKAT28IHt0o239MM0llQ=) 2: 754A1888490D11ED95C7C86EC4F9AE02.roa (hash: CSIt/M+JZX1zt8oTEtouM1TXpeh5gYbtlEsnigR0HLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC009, serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884 Validity Not Before: May 31 02:16:26 2025 GMT Not After : Jun 7 02:16:26 2025 GMT Subject: CN=683a667a-6e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:6a:d5:28:12:85:46:d9:1b:ac:b2:5e:45: a3:5f:02:56:4f:16:b2:c6:cb:a5:b0:8a:78:e9:02: 23:f5:51:1b:3f:32:cf:92:77:28:ae:71:b3:e4:ad: 77:16:9d:88:3a:b1:31:b7:53:56:0d:a2:f8:f3:86: e7:5d:21:d1:15:d9:86:2b:2e:62:11:c5:6c:f7:31: a1:27:a0:82:13:39:97:54:1a:78:e6:dc:7e:11:37: 06:35:be:c4:50:71:56:e1:06:9b:fc:ff:6d:14:09: 00:ea:bb:3a:39:4e:e4:2d:4e:23:b2:1e:1f:39:f2: 7f:48:60:3e:1b:e2:fb:8a:ec:d6:09:3c:80:5f:62: fc:c9:e4:c9:3f:a2:25:46:79:e0:40:d4:b7:39:b0: e5:68:ab:93:b9:fb:68:bd:d2:5f:26:fb:e6:68:08: 59:cb:52:d2:5f:74:b8:0f:87:0a:70:23:ac:04:57: 1f:0c:24:07:cc:6c:6c:b3:fd:96:e3:ec:18:98:9e: 8d:a9:5c:61:ae:9c:3f:75:02:39:7b:20:26:77:47: da:51:42:be:24:d5:dc:2d:40:0b:0f:ee:b7:58:0e: d4:1d:08:f4:36:d3:3e:c4:c7:7e:b8:4a:96:67:c0: f7:3d:9f:cd:2a:c0:e0:23:2c:05:c9:30:5e:f4:3e: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:E5:2F:2B:20:DE:BC:97:3D:9E:EE:48:E3:D4:2E:10:02:D6:4C X509v3 Authority Key Identifier: keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7d:47:82:3d:dc:52:86:6f:f9:ea:11:4d:78:5b:60:78:8c: 06:b9:b1:c2:0c:7d:dc:c7:83:77:fe:ae:79:a3:66:f8:00:fd: 70:3d:07:11:3a:ef:d2:ff:65:d6:02:11:7a:c6:ea:09:06:43: 46:72:00:fc:70:81:6d:7c:77:b8:60:db:f6:dd:3e:41:e7:c8: 34:c6:b5:fe:53:b0:99:44:e6:e4:52:25:0e:a1:2b:b9:47:03: a0:c7:25:cb:db:e7:9e:7e:18:69:a1:7a:49:69:bc:ec:1a:5a: f0:e4:7f:b5:39:e7:9e:64:34:70:51:e9:70:18:40:58:9c:58: c7:64:ac:76:49:84:d4:22:bc:39:0a:20:df:f1:4b:53:b3:98: fa:e4:bb:90:71:c8:20:54:48:1f:29:1d:3e:22:3f:82:f5:99: c4:96:95:0b:ba:67:e4:ca:24:d7:b6:8f:69:ed:7c:a0:f8:bf: 38:ed:f8:4c:8c:4c:fc:68:d1:05:c4:bc:f6:0f:d3:0c:58:41: 41:c5:57:0c:82:08:1c:77:a1:d4:41:19:53:66:4a:bc:fd:58: bc:a0:69:6f:41:b2:40:5b:61:4b:3a:77:e3:66:fe:5d:44:2e: 45:5d:63:b8:8a:c7:93:5d:f9:8f:6f:e3:45:43:ee:01:47:e7: f7:6f:15:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMDkxMTAvBgNVBAUTKDQyMjc1NTkwOTM0QjMxRTM5RDgxRERCQzlDMDk4NTZC N0Y0RTU4ODQwHhcNMjUwNTMxMDIxNjI2WhcNMjUwNjA3MDIxNjI2WjAYMRYwFAYD VQQDEw02ODNhNjY3YS02ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuhq1SgShUbZG6yyXkWjXwJWTxayxsulsIp46QIj9VEbPzLPkncornGz5K13 Fp2IOrExt1NWDaL484bnXSHRFdmGKy5iEcVs9zGhJ6CCEzmXVBp45tx+ETcGNb7E UHFW4Qab/P9tFAkA6rs6OU7kLU4jsh4fOfJ/SGA+G+L7iuzWCTyAX2L8yeTJP6Il RnngQNS3ObDlaKuTuftovdJfJvvmaAhZy1LSX3S4D4cKcCOsBFcfDCQHzGxss/2W 4+wYmJ6NqVxhrpw/dQI5eyAmd0faUUK+JNXcLUALD+63WA7UHQj0NtM+xMd+uEqW Z8D3PZ/NKsDgIywFyTBe9D6HDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9D5S8r IN68lz2e7kjj1C4QAtZMMB8GA1UdIwQYMBaAFEInVZCTSzHjnYHdvJwJhWt/TliE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAwOS85NTlEQjg1RTQ5 MEExMUVEQkI3Njc4NDhDNEY5QUUwMi9RaWRWa0pOTE1lT2RnZDI4bkFtRmEzOU9X SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpZFZrSk5MTWVPZGdkMjhuQW1GYTM5T1dJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAwOS85NTlEQjg1RTQ5MEExMUVEQkI3Njc4NDhDNEY5QUUwMi9RaWRWa0pOTE1l T2RnZDI4bkFtRmEzOU9XSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChfUeCPdxShm/56hFNeFtgeIwGubHCDH3cx4N3/q55o2b4AP1wPQcR Ou/S/2XWAhF6xuoJBkNGcgD8cIFtfHe4YNv23T5B58g0xrX+U7CZRObkUiUOoSu5 RwOgxyXL2+eefhhpoXpJabzsGlrw5H+1OeeeZDRwUelwGEBYnFjHZKx2SYTUIrw5 CiDf8UtTs5j65LuQccggVEgfKR0+Ij+C9ZnElpULumfkyiTXto9p7Xyg+L847fhM jEz8aNEFxLz2D9MMWEFBxVcMgggcd6HUQRlTZkq8/Vi8oGlvQbJAW2FLOnfjZv5d RC5FXWO4iseTXfmPb+NFQ+4BR+f3bxU/ -----END CERTIFICATE-----Generated at Sat May 31 16:43:05 2025 by rpki-client