$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: 3iu09ykCCxQv6nXj0pwDFhL1uyP+iNFDPHGuwrC6r5U= Subject key identifier: 68:5F:A7:8B:1B:19:81:33:52:7F:E9:EC:CF:58:0C:17:96:12:8F:E2 Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 06C5 Signing time: Mon 02 Jun 2025 22:18:37 +0000 Manifest this update: Mon 02 Jun 2025 22:18:37 +0000 Manifest next update: Mon 09 Jun 2025 22:18:37 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: eY1ZJ1LkltyuFHQe0I+wrvegk/mG+myCDSmWGqJAQrs=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: T2RcQUH8KtNgbj8nCU5DcM4WF5c1Qu/0XcpVPW8mvhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: Jun 2 22:18:37 2025 GMT Not After : Jun 9 22:18:37 2025 GMT Subject: CN=683e233d-619a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:35:59:e3:11:77:0c:88:d6:6d:b8:b4:fc: 67:5c:09:f4:da:bc:89:23:ab:6c:8f:36:2d:cc:7d: c6:ee:8f:6d:b5:08:32:17:7a:0a:40:4b:ab:16:67: 45:4c:de:12:dd:54:04:5e:47:72:c0:09:2f:ad:90: 31:a2:1c:60:73:3f:17:6e:bb:b9:9f:69:ee:10:ab: 24:ef:65:5e:50:e2:2a:03:58:0d:dc:78:37:5a:dd: b1:12:93:4d:90:00:42:b6:40:8a:3c:5d:64:b9:e5: e3:cc:fb:37:55:9c:6c:7f:e7:e6:9f:8a:15:c4:d7: af:54:f7:d6:05:34:66:46:ed:c8:85:e2:25:e6:bd: 06:9d:3a:f1:53:a0:69:a3:fa:85:fe:14:45:e2:08: 94:d4:dc:00:0a:61:35:87:61:59:cd:6f:8a:fc:b1: 7a:7b:28:80:94:07:14:86:6f:de:92:46:90:93:e1: 21:f0:af:aa:11:83:50:b6:3d:e9:9a:31:9d:88:8b: b3:89:40:ec:f8:ea:28:1e:73:8f:21:03:a3:04:49: a1:a5:00:e1:1f:f0:cd:fa:61:d3:df:69:a3:72:83: a9:8e:88:d8:f6:90:88:eb:63:f6:f6:83:56:64:65: 2c:5e:d9:41:4d:78:cd:4e:99:8d:a9:1d:dd:09:4f: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:A7:8B:1B:19:81:33:52:7F:E9:EC:CF:58:0C:17:96:12:8F:E2 X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:39:0d:6c:e7:ce:88:64:bc:ca:17:27:cc:4f:3f:7f:4b:d0: 68:3c:b6:fc:8f:40:24:eb:e1:af:bc:b6:bd:bc:e5:23:e5:5c: 28:a6:77:d0:42:ee:cf:f6:c6:28:33:84:19:09:fd:c5:32:3d: c9:1f:c5:30:e5:a0:a4:a0:e1:18:41:ae:e5:67:9f:80:0b:51: 58:50:0c:5a:88:4e:4f:a6:ee:34:ef:16:ab:81:03:7a:0e:8b: 39:07:7d:71:1a:c2:13:d7:11:ff:e6:ef:fa:5a:26:e3:f7:91: 45:d9:7e:bc:9a:f0:01:16:d1:3b:f1:ad:57:00:cf:5d:17:fa: db:fa:d3:fd:ba:5b:f2:6a:66:c9:83:26:2f:11:6f:6b:1d:d4: e4:37:22:da:31:df:ce:69:25:38:b8:0d:c5:c8:f3:12:b9:eb: a6:47:19:fb:de:8d:fa:73:f1:ff:b0:76:1a:31:da:ec:d6:37: 2f:1d:ca:7b:67:f8:bf:9e:19:34:6c:91:43:a2:c9:e3:8d:45: 16:ce:a2:2c:98:18:0e:23:52:c4:ea:4a:a9:ca:1f:13:27:2f: 73:96:11:1e:66:2e:9c:9e:97:a9:18:26:c5:dc:8f:2a:4d:e0: bf:9d:d6:12:22:90:c7:ea:53:10:10:16:9f:54:a5:70:c0:f2: 25:93:44:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjUwNjAyMjIxODM3WhcNMjUwNjA5MjIxODM3WjAYMRYwFAYD VQQDEw02ODNlMjMzZC02MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HQ1WeMRdwyI1m24tPxnXAn02ryJI6tsjzYtzH3G7o9ttQgyF3oKQEurFmdF TN4S3VQEXkdywAkvrZAxohxgcz8Xbru5n2nuEKsk72VeUOIqA1gN3Hg3Wt2xEpNN kABCtkCKPF1kueXjzPs3VZxsf+fmn4oVxNevVPfWBTRmRu3IheIl5r0GnTrxU6Bp o/qF/hRF4giU1NwACmE1h2FZzW+K/LF6eyiAlAcUhm/ekkaQk+Eh8K+qEYNQtj3p mjGdiIuziUDs+OooHnOPIQOjBEmhpQDhH/DN+mHT32mjcoOpjojY9pCI62P29oNW ZGUsXtlBTXjNTpmNqR3dCU876QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhfp4sb GYEzUn/p7M9YDBeWEo/iMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfOQ1s586IZLzKFyfMTz9/S9BoPLb8j0Ak6+GvvLa9vOUj5VwopnfQ Qu7P9sYoM4QZCf3FMj3JH8Uw5aCkoOEYQa7lZ5+AC1FYUAxaiE5Ppu407xargQN6 Dos5B31xGsIT1xH/5u/6Wibj95FF2X68mvABFtE78a1XAM9dF/rb+tP9ulvyambJ gyYvEW9rHdTkNyLaMd/OaSU4uA3FyPMSueumRxn73o36c/H/sHYaMdrs1jcvHcp7 Z/i/nhk0bJFDosnjjUUWzqIsmBgOI1LE6kqpyh8TJy9zlhEeZi6cnpepGCbF3I8q TeC/ndYSIpDH6lMQEBafVKVwwPIlk0SW -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:28 2025 by rpki-client