$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: PnTtIOdc1DIKPEQgLg00WEF1KJwP5DcIQO7wUcNID94= Subject key identifier: 7B:8F:54:8A:0F:5F:2D:B0:79:4C:0D:D1:88:87:51:BB:FA:91:94:F2 Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: 65 Signing time: Fri 25 Apr 2025 05:58:46 +0000 Manifest this update: Fri 25 Apr 2025 05:58:46 +0000 Manifest next update: Fri 02 May 2025 05:58:45 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: TOHLDo5Al39fXbfuajXW+ARwgHfP5qJUxcyC8SYMVRU=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Apr 25 05:58:46 2025 GMT Not After : May 2 05:58:45 2025 GMT Subject: CN=680b2496-eaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:76:ba:a7:f2:34:f8:e6:f8:3e:e8:e6:ff: 1d:5b:a2:c7:a0:ce:3c:c5:92:86:65:46:ca:dd:75: d1:53:22:e5:31:0e:da:b0:57:77:d9:81:e8:7d:e9: c0:7e:d3:8e:af:b1:e5:22:91:89:c0:ca:a6:26:77: 7d:79:dd:18:37:e5:87:7b:bd:ca:92:28:5b:df:4a: d5:cd:17:b4:eb:e2:f2:50:53:3e:f4:bf:ab:4b:8f: 61:5e:d9:7e:db:31:01:11:69:6e:61:d4:96:5e:f7: 06:16:c4:ff:c6:65:1e:ff:b1:98:a2:51:10:3a:25: e9:18:88:50:3d:6a:d6:a6:e3:07:78:16:9e:cb:46: c1:ef:57:f5:ce:74:81:7d:53:cb:e5:67:c0:50:05: af:cc:30:89:d9:70:a6:f9:36:3f:e4:a4:dd:9b:91: a7:da:6c:9d:fb:f2:c7:05:d1:7b:ab:25:15:d0:11: f4:ce:a9:3d:f4:af:fb:f2:e6:d7:e8:69:b9:b1:48: 7b:18:1e:97:57:ea:a6:29:75:85:0c:53:62:0e:32: 79:8c:56:ea:61:1a:ee:bd:56:c3:b2:3b:f4:3f:2a: 46:1b:07:e2:10:ad:54:19:54:6e:be:a7:72:a9:cd: da:80:f6:fd:71:e8:c3:bd:a7:de:5e:af:8f:82:31: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8F:54:8A:0F:5F:2D:B0:79:4C:0D:D1:88:87:51:BB:FA:91:94:F2 X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:45:1d:ee:f5:4d:87:8d:3f:c8:8b:e1:5e:d4:3d:b4:24:30: bb:81:39:00:0c:0c:ae:1d:02:0f:3a:1f:43:54:4f:21:08:56: c1:09:b4:54:2a:55:46:81:21:71:84:9b:6c:4e:c2:90:8c:39: d7:d4:0b:95:6b:5f:a0:c0:c5:d7:bc:64:ab:f1:a7:da:27:b4: 19:c2:09:41:72:ae:b3:be:bb:19:6f:53:99:6c:23:ba:ae:08: 6a:70:29:5f:04:9a:c1:c6:3f:73:a7:43:db:c7:1f:19:c9:21: f9:9f:53:4d:5d:27:8f:18:fc:f1:91:5b:0b:1b:21:7b:44:2b: 13:9e:cc:bb:aa:78:5c:06:a4:e9:7d:f8:fa:71:98:a1:c8:b9: dc:ce:a5:5f:f6:03:7b:25:ab:24:a2:6f:be:c5:4e:03:18:38: d8:e3:c8:74:2a:0e:3c:cc:62:5c:bc:0b:e4:14:31:c3:8c:46: 87:78:40:b3:ec:a7:6a:4b:86:07:ce:a1:d5:c7:ca:55:a9:ff: 3c:4e:1d:5d:90:de:bd:1b:ed:8a:0d:21:38:70:af:a2:1f:79: 8e:4c:60:33:91:a7:14:ff:08:bf:ea:5e:69:c4:3f:a3:8c:26: af:a0:17:7d:5c:ca:fc:17:45:16:ed:60:b4:d4:fa:2f:49:9d: 81:f4:58:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0IwNTExMC8GA1UEBRMoNDBEREVFRjAxOEVBRENERTREMUJGNzhEMTU0ODUxRjhE OEJDMjZBNTAeFw0yNTA0MjUwNTU4NDZaFw0yNTA1MDIwNTU4NDVaMBgxFjAUBgNV BAMTDTY4MGIyNDk2LWVhY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+hna6p/I0+Ob4Pujm/x1bosegzjzFkoZlRsrdddFTIuUxDtqwV3fZgeh96cB+ 046vseUikYnAyqYmd3153Rg35Yd7vcqSKFvfStXNF7Tr4vJQUz70v6tLj2Fe2X7b MQERaW5h1JZe9wYWxP/GZR7/sZiiURA6JekYiFA9atam4wd4Fp7LRsHvV/XOdIF9 U8vlZ8BQBa/MMInZcKb5Nj/kpN2bkafabJ378scF0XurJRXQEfTOqT30r/vy5tfo abmxSHsYHpdX6qYpdYUMU2IOMnmMVuphGu69VsOyO/Q/KkYbB+IQrVQZVG6+p3Kp zdqA9v1x6MO9p95er4+CMc8lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe49Uig9f LbB5TA3RiIdRu/qRlPIwHwYDVR0jBBgwFoAUQN3u8Bjq3N5NG/eNFUhR+Ni8JqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQjA1L0YwQjY2Q0Y4OEE5 QTExRUZCOEFBNTY0OEM0RjlBRTAyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUU4zdThCanEzTjVOR19lTkZVaFItTmk4SnFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QjA1L0YwQjY2Q0Y4OEE5QTExRUZCOEFBNTY0OEM0RjlBRTAyL1FOM3U4QmpxM041 TkdfZU5GVWhSLU5pOEpxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRFHe71TYeNP8iL4V7UPbQkMLuBOQAMDK4dAg86H0NUTyEIVsEJtFQq VUaBIXGEm2xOwpCMOdfUC5VrX6DAxde8ZKvxp9ontBnCCUFyrrO+uxlvU5lsI7qu CGpwKV8EmsHGP3OnQ9vHHxnJIfmfU01dJ48Y/PGRWwsbIXtEKxOezLuqeFwGpOl9 +PpxmKHIudzOpV/2A3slqySib77FTgMYONjjyHQqDjzMYly8C+QUMcOMRod4QLPs p2pLhgfOodXHylWp/zxOHV2Q3r0b7YoNIThwr6IfeY5MYDORpxT/CL/qXmnEP6OM Jq+gF31cyvwXRRbtYLTU+i9JnYH0WHM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:40 2025 by rpki-client