$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: VDziQqoyQVvbTLlA46GPGfnjx0lsMRgNUlJZEzqBnNI= Subject key identifier: 01:78:A6:72:DB:D2:B4:E6:3B:3F:A4:FF:26:F3:71:E3:55:90:8E:B3 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 05D1 Signing time: Fri 30 May 2025 23:16:30 +0000 Manifest this update: Fri 30 May 2025 23:16:30 +0000 Manifest next update: Fri 06 Jun 2025 23:16:30 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: ma9WUXjJ7M8A9xkxAA5JkXJqPjdZnes1gFRKSliqW2c=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=) 3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=) 4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: May 30 23:16:30 2025 GMT Not After : Jun 6 23:16:30 2025 GMT Subject: CN=683a3c4e-2f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:40:e0:8e:73:62:33:21:4a:b6:c1:25:43: 66:c2:15:4c:b3:ff:6c:7f:90:3c:98:b8:63:58:64: 65:04:8f:51:da:ef:cd:17:01:1c:8d:c0:7a:49:16: d5:41:aa:aa:cb:41:86:80:69:78:38:4c:21:e1:71: be:7e:07:e3:90:6f:24:4c:3b:82:5f:2d:64:cd:80: 78:fa:49:28:44:26:fa:b7:58:43:27:8b:f9:dc:79: 33:2d:2b:5a:20:2f:94:42:17:0a:79:f9:e9:48:0d: 50:3f:3c:3a:92:55:bd:b6:75:94:6b:62:10:03:d7: 1d:49:44:18:5c:af:ff:0d:df:44:95:0b:45:ff:a2: 61:50:12:75:0e:0c:72:14:44:fa:c2:7c:3a:48:80: 06:fb:84:cf:9e:02:0c:14:71:9e:74:bc:88:7e:b5: 2c:76:28:39:12:06:92:9a:e3:26:b3:72:97:41:45: c0:70:29:04:28:4d:d4:92:61:93:c2:c9:10:fb:8d: ce:2b:87:36:9f:97:c9:84:d5:70:c1:02:09:f2:6a: d8:ab:70:d8:6a:15:da:68:08:b4:02:17:15:16:96: 03:c4:78:3d:d3:57:d6:8b:ed:3a:7c:b7:67:c3:f0: 7d:d3:4a:00:10:9a:8e:20:3f:f8:58:f5:e9:58:cf: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:78:A6:72:DB:D2:B4:E6:3B:3F:A4:FF:26:F3:71:E3:55:90:8E:B3 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bd:e7:87:6f:bf:85:94:0a:ea:1e:e1:4d:93:8e:8d:34:f7: e4:50:cd:6a:da:02:54:23:7d:92:08:d8:43:3e:2b:ff:9f:b7: df:48:6b:0c:c7:e5:bc:0e:6b:85:66:10:b6:8b:67:26:05:7e: 8f:01:df:b7:0e:4d:54:83:dc:04:b6:05:9f:f3:e1:be:7b:46: 78:8b:cc:eb:50:b1:ae:ad:65:97:c6:68:78:77:5f:94:2a:4c: 11:0e:96:49:89:f7:6c:58:33:08:9e:1f:1c:75:d6:8b:a5:74: 49:9e:b6:3f:fa:d8:56:62:84:70:3d:f8:34:79:4e:79:52:45: f3:bc:26:67:b8:c8:e1:ea:c5:4b:16:f5:6a:c2:03:fa:fc:a0: 6e:98:17:02:64:0b:3c:b7:cc:7e:77:85:56:da:2f:a2:08:4c: e3:18:3f:de:1f:dc:d2:c3:51:5c:88:a0:12:6c:5f:0f:8a:a6: ec:8a:17:e8:ca:82:e4:95:42:40:08:1f:1c:0d:b7:6f:2b:f4: d3:ee:72:23:b4:20:e7:20:f4:23:48:a3:6c:c9:cd:58:58:8b: bd:aa:fb:e8:a6:8e:ab:e0:f4:a2:d6:2c:6f:2e:d2:94:42:44: 05:bb:fb:f7:7d:17:a0:33:5a:fc:c2:38:5e:aa:2e:a7:e7:a6: 1b:e4:37:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjUwNTMwMjMxNjMwWhcNMjUwNjA2MjMxNjMwWjAYMRYwFAYD VQQDEw02ODNhM2M0ZS0yZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9hA4I5zYjMhSrbBJUNmwhVMs/9sf5A8mLhjWGRlBI9R2u/NFwEcjcB6SRbV Qaqqy0GGgGl4OEwh4XG+fgfjkG8kTDuCXy1kzYB4+kkoRCb6t1hDJ4v53HkzLSta IC+UQhcKefnpSA1QPzw6klW9tnWUa2IQA9cdSUQYXK//Dd9ElQtF/6JhUBJ1Dgxy FET6wnw6SIAG+4TPngIMFHGedLyIfrUsdig5EgaSmuMms3KXQUXAcCkEKE3UkmGT wskQ+43OK4c2n5fJhNVwwQIJ8mrYq3DYahXaaAi0AhcVFpYDxHg901fWi+06fLdn w/B900oAEJqOID/4WPXpWM+YPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF4pnLb 0rTmOz+k/ybzceNVkI6zMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8veeHb7+FlArqHuFNk46NNPfkUM1q2gJUI32SCNhDPiv/n7ffSGsM x+W8DmuFZhC2i2cmBX6PAd+3Dk1Ug9wEtgWf8+G+e0Z4i8zrULGurWWXxmh4d1+U KkwRDpZJifdsWDMInh8cddaLpXRJnrY/+thWYoRwPfg0eU55UkXzvCZnuMjh6sVL FvVqwgP6/KBumBcCZAs8t8x+d4VW2i+iCEzjGD/eH9zSw1FciKASbF8Piqbsihfo yoLklUJACB8cDbdvK/TT7nIjtCDnIPQjSKNsyc1YWIu9qvvopo6r4PSi1ixvLtKU QkQFu/v3fRegM1r8wjheqi6n56Yb5DcU -----END CERTIFICATE-----Generated at Sat May 31 17:28:51 2025 by rpki-client