$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json) Hash identifier: 9s1ftwrUnbHjVvHJSo7AaaLw1eg8LH1feF5LYfwCs6E= Subject key identifier: 76:C6:FA:B4:94:11:5A:E0:BF:42:4E:2F:B6:2A:BB:BC:D1:FA:5E:EB Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft Manifest number: 0156 Signing time: Sat 31 May 2025 03:46:46 +0000 Manifest this update: Sat 31 May 2025 03:46:45 +0000 Manifest next update: Sat 07 Jun 2025 03:46:45 +0000 Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: sWkmMp1pF7HHW590vhSYas07VCK8l0AgJ2fqz+LudIA=) 2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: e+rpsrJfE3yU94kVnBShl6jDwyCOKp3rugpFTdwj4Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: May 31 03:46:45 2025 GMT Not After : Jun 7 03:46:45 2025 GMT Subject: CN=683a7ba6-9a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:05:90:e3:bb:ee:63:89:43:94:ca:64:09: 1e:d0:98:cc:89:03:7f:7e:7e:5b:d4:a0:97:f5:a5: 69:a5:27:d1:ea:7e:47:a0:90:a6:7c:1c:d0:4b:df: bc:df:3e:9e:60:67:2a:c5:ca:e1:73:ba:b4:56:9f: 97:84:36:78:6b:a7:10:4a:28:46:28:b4:59:ff:42: d5:22:37:cd:88:f1:fd:58:c2:3b:00:09:34:78:86: 48:3e:76:84:39:49:2e:2f:ef:48:0c:3e:94:3c:d0: 81:ec:27:2f:e6:20:d4:a7:7b:c9:8e:41:83:cc:65: 84:ab:38:4e:ea:10:fc:35:ab:0a:8b:97:26:76:0e: 00:66:58:6d:fc:24:25:00:21:8a:d9:99:a1:01:95: 17:ad:c8:a8:5b:19:53:55:09:ca:32:e2:a4:ec:a7: 96:4f:cd:2f:e5:d1:c0:33:50:6d:55:87:b8:b4:56: de:5b:50:0f:b5:3a:28:f3:2d:ba:ac:19:ca:2b:8e: f4:78:80:5c:78:0f:54:27:80:30:55:5a:ec:54:10: 27:74:ad:aa:2d:a3:54:25:0a:60:82:8a:28:01:86: 0c:4e:a4:b7:91:68:fd:d5:54:94:54:27:38:c0:b0: d2:9a:3f:c7:7f:79:57:4e:84:2b:ae:17:2a:ed:46: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C6:FA:B4:94:11:5A:E0:BF:42:4E:2F:B6:2A:BB:BC:D1:FA:5E:EB X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d4:cb:be:75:fa:ca:81:f4:ca:3c:41:4c:d4:ce:ed:a0:d1: 3a:86:40:97:7e:45:44:8f:4c:b8:53:b0:cf:11:9b:45:df:32: 5e:c4:df:0a:3b:04:dc:da:05:db:55:cb:9c:7c:8c:83:3c:39: 09:e2:69:e1:0b:7b:81:b9:21:a1:0c:31:3b:96:48:46:0d:ad: 4e:7e:8f:60:64:49:08:39:08:a5:f3:12:eb:b6:0d:76:54:de: 90:87:7a:37:a1:9c:f5:fd:34:93:72:07:d0:c0:01:9c:d6:15: b6:02:80:64:98:df:9e:91:fb:99:28:6f:77:02:db:a2:b0:ae: ce:ad:5b:46:78:c3:55:ed:9d:df:30:f2:27:e3:95:87:a1:44: 43:07:3a:6f:e3:eb:52:d1:b6:43:41:5f:96:b0:1d:d1:7d:10: a1:2b:66:99:02:15:02:37:10:f4:4d:a7:b6:33:8a:7a:c4:bb: c5:ba:5f:0d:b1:22:59:dd:c1:6b:fb:9e:3f:28:f4:b2:4d:1a: 40:b6:7b:a1:83:e9:5a:0d:76:4e:01:cc:89:80:79:70:e8:b6: cb:4a:28:30:73:f5:fb:84:5f:19:d5:99:ff:18:47:03:8c:b6: 01:c8:b1:26:f8:f5:00:e9:4e:b6:f8:19:5d:94:a5:02:f4:f4: d1:51:b6:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUwNTMxMDM0NjQ1WhcNMjUwNjA3MDM0NjQ1WjAYMRYwFAYD VQQDEw02ODNhN2JhNi05YTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJUFkOO77mOJQ5TKZAke0JjMiQN/fn5b1KCX9aVppSfR6n5HoJCmfBzQS9+8 3z6eYGcqxcrhc7q0Vp+XhDZ4a6cQSihGKLRZ/0LVIjfNiPH9WMI7AAk0eIZIPnaE OUkuL+9IDD6UPNCB7Ccv5iDUp3vJjkGDzGWEqzhO6hD8NasKi5cmdg4AZlht/CQl ACGK2ZmhAZUXrcioWxlTVQnKMuKk7KeWT80v5dHAM1BtVYe4tFbeW1APtToo8y26 rBnKK470eIBceA9UJ4AwVVrsVBAndK2qLaNUJQpggoooAYYMTqS3kWj91VSUVCc4 wLDSmj/Hf3lXToQrrhcq7UbjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbG+rSU EVrgv0JOL7Yqu7zR+l7rMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo1Mu+dfrKgfTKPEFM1M7toNE6hkCXfkVEj0y4U7DPEZtF3zJexN8K OwTc2gXbVcucfIyDPDkJ4mnhC3uBuSGhDDE7lkhGDa1Ofo9gZEkIOQil8xLrtg12 VN6Qh3o3oZz1/TSTcgfQwAGc1hW2AoBkmN+ekfuZKG93AtuisK7OrVtGeMNV7Z3f MPIn45WHoURDBzpv4+tS0bZDQV+WsB3RfRChK2aZAhUCNxD0Tae2M4p6xLvFul8N sSJZ3cFr+54/KPSyTRpAtnuhg+laDXZOAcyJgHlw6LbLSigwc/X7hF8Z1Zn/GEcD jLYByLEm+PUA6U62+BldlKUC9PTRUbYt -----END CERTIFICATE-----Generated at Sat May 31 16:42:59 2025 by rpki-client