$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: g02tIm5B0YZfW04YiCe4Ujsp+Y5Zjj8KG5fUEVHi40M= Subject key identifier: 42:12:EC:3A:A1:90:97:52:87:45:24:BC:1C:77:C7:6A:4C:24:A9:8E Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0A50 Signing time: Fri 30 May 2025 19:53:04 +0000 Manifest this update: Fri 30 May 2025 19:53:04 +0000 Manifest next update: Fri 06 Jun 2025 19:53:04 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: 63pNkL4IiTHU2ZKI+9fCwMwA6IiZFSnWOhK+w4bPHNM=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: May 30 19:53:04 2025 GMT Not After : Jun 6 19:53:04 2025 GMT Subject: CN=683a0ca0-54bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:6d:34:15:a6:2c:90:63:ab:40:f0:6e:ba: 11:eb:0d:e5:c2:00:c6:1f:a7:5e:fa:af:49:a6:ec: fc:da:6a:16:0d:b6:f6:e1:f9:cb:12:e4:c9:71:cc: 52:78:d5:e1:7f:02:89:8e:c5:14:ea:51:03:71:6f: a8:f1:fc:07:c1:01:91:b3:c9:37:0a:9a:47:ab:de: 52:ba:f7:6a:da:32:53:58:61:f3:e4:49:06:57:3a: a6:74:21:51:49:dd:8d:f9:84:79:93:20:41:3e:65: 8e:4d:00:d3:ca:a3:52:f7:5a:d1:4a:b7:39:de:a3: 40:06:5e:62:36:ff:32:1c:80:30:7c:fd:d6:67:93: 17:54:f9:20:1e:da:80:79:f4:86:92:10:d1:18:fc: f7:a7:8a:63:6a:be:01:4c:71:2f:df:3c:6e:8c:d4: 9a:e1:e0:f7:78:2c:48:97:a3:10:42:50:24:06:aa: 7f:54:29:c9:d9:be:dc:57:5b:97:8a:0e:6c:53:d5: 53:9f:34:06:7e:fd:23:ac:0e:65:f0:53:59:c0:c7: b0:68:57:a6:dd:f2:97:3d:cc:fd:65:b5:0d:d5:8a: 70:9b:44:bd:22:18:8c:ab:41:37:99:df:7a:87:bd: 65:a0:ab:eb:0a:83:87:75:93:92:f6:2b:dd:30:98: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:EC:3A:A1:90:97:52:87:45:24:BC:1C:77:C7:6A:4C:24:A9:8E X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:66:22:5f:01:47:2a:c4:fa:67:d6:2a:e0:fa:2a:62:71:0f: cd:d4:74:3e:54:f9:cb:4e:c9:31:77:c0:d8:96:8b:68:47:21: 83:e0:56:8b:d7:aa:53:8e:21:2d:f9:24:a1:70:bf:72:07:c0: 52:34:de:20:ca:92:38:f1:d1:59:4b:b7:a5:0f:6e:dd:74:4a: 7e:91:0b:02:5d:a1:6e:af:8b:cf:86:2a:10:0d:9e:9c:79:0b: c4:38:b4:2d:cc:7e:53:7b:fa:06:20:d4:00:b9:9f:56:9b:dc: 1f:94:6b:ed:76:17:37:04:3e:ed:ae:ab:25:62:5c:2f:ec:e8: 1b:65:6b:a7:58:73:91:df:96:f1:45:7c:92:f4:b7:6a:dc:fb: c2:99:4c:c2:91:5c:a1:e4:a7:d7:8d:eb:4d:24:6a:bc:69:8a: 89:13:2d:cd:c9:9e:aa:98:c5:1f:0d:0e:39:15:66:8c:b9:a9: c9:ae:98:e6:e9:6c:fd:5e:b5:10:c5:bf:94:4b:5f:68:3f:af: 5d:a9:66:42:8d:6e:9d:fc:07:63:2a:3d:e8:29:63:b7:5c:b6: c7:9c:2e:27:fe:b3:8e:ac:bd:46:67:f1:45:67:aa:90:c7:8d: be:cb:e0:f4:8f:05:1d:6e:7f:47:54:8b:9f:c2:22:91:9d:b2: 03:78:1d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUwNTMwMTk1MzA0WhcNMjUwNjA2MTk1MzA0WjAYMRYwFAYD VQQDEw02ODNhMGNhMC01NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy49tNBWmLJBjq0DwbroR6w3lwgDGH6de+q9Jpuz82moWDbb24fnLEuTJccxS eNXhfwKJjsUU6lEDcW+o8fwHwQGRs8k3CppHq95Suvdq2jJTWGHz5EkGVzqmdCFR Sd2N+YR5kyBBPmWOTQDTyqNS91rRSrc53qNABl5iNv8yHIAwfP3WZ5MXVPkgHtqA efSGkhDRGPz3p4pjar4BTHEv3zxujNSa4eD3eCxIl6MQQlAkBqp/VCnJ2b7cV1uX ig5sU9VTnzQGfv0jrA5l8FNZwMewaFem3fKXPcz9ZbUN1Ypwm0S9IhiMq0E3md96 h71loKvrCoOHdZOS9ivdMJhUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIS7Dqh kJdSh0UkvBx3x2pMJKmOMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhZiJfAUcqxPpn1irg+ipicQ/N1HQ+VPnLTskxd8DYlotoRyGD4FaL 16pTjiEt+SShcL9yB8BSNN4gypI48dFZS7elD27ddEp+kQsCXaFur4vPhioQDZ6c eQvEOLQtzH5Te/oGINQAuZ9Wm9wflGvtdhc3BD7trqslYlwv7OgbZWunWHOR35bx RXyS9Ldq3PvCmUzCkVyh5KfXjetNJGq8aYqJEy3NyZ6qmMUfDQ45FWaMuanJrpjm 6Wz9XrUQxb+US19oP69dqWZCjW6d/AdjKj3oKWO3XLbHnC4n/rOOrL1GZ/FFZ6qQ x42+y+D0jwUdbn9HVIufwiKRnbIDeB28 -----END CERTIFICATE-----Generated at Sat May 31 16:31:22 2025 by rpki-client