$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json) Hash identifier: 9H1hr69V34ZamT8KhNmsmiLOez+pkSYaIOdNN+vagLI= Subject key identifier: 0A:C4:2C:42:97:04:6F:1C:9F:BC:6B:4C:F1:AF:80:81:9A:DA:B5:A8 Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft Manifest number: 02E2 Signing time: Fri 25 Apr 2025 01:06:50 +0000 Manifest this update: Fri 25 Apr 2025 01:06:49 +0000 Manifest next update: Fri 02 May 2025 01:06:49 +0000 Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: ci66kEHK1BQmwdM0WbR5QgWcV7AaBKJw5dfXEtx2a5Y=) 2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Validity Not Before: Apr 25 01:06:49 2025 GMT Not After : May 2 01:06:49 2025 GMT Subject: CN=680ae02a-5c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:26:61:51:de:ff:63:c5:1a:3d:a4:b9:0a: 2d:81:2e:15:4b:16:42:13:eb:3e:79:35:e5:33:63: db:9d:49:0f:f8:2d:ea:68:55:f7:5f:f4:d0:cf:84: 4e:11:c0:39:56:bf:4c:d3:ed:5e:f8:ed:3f:4c:13: a9:5d:fe:c3:9b:d9:c2:44:b0:e0:bb:f3:ae:3b:f4: 70:8b:dd:f9:94:e0:eb:ec:f6:07:0a:ce:0a:ab:1d: 41:90:c7:a4:a0:54:43:aa:a4:55:46:eb:a2:d1:5d: 4e:d4:ba:81:cc:87:2b:2a:86:e2:3e:40:37:68:31: 59:93:af:23:ed:6e:fd:27:8e:cc:46:ed:af:30:d1: bb:c8:c9:8a:50:d6:fd:38:31:cf:bb:bb:6c:49:f9: eb:b8:f2:2d:b5:2b:ca:ef:39:e1:0d:f6:5d:03:69: 43:c3:07:14:be:ce:bb:03:a4:4d:03:a0:c2:ac:e2: 52:f2:b8:3f:79:9b:81:6f:41:08:69:3c:a3:a9:aa: 90:83:59:38:bf:d8:55:0c:e4:e9:cc:9a:19:7a:27: ca:85:c8:0d:03:22:7e:e7:7f:42:3f:ae:bb:3c:ca: e1:b5:d8:2b:9a:fc:de:2c:86:c2:87:f6:e9:d3:84: e8:3b:83:04:90:13:67:e1:51:10:71:9d:31:d7:fe: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:2C:42:97:04:6F:1C:9F:BC:6B:4C:F1:AF:80:81:9A:DA:B5:A8 X509v3 Authority Key Identifier: keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:eb:c0:46:a0:ea:37:73:6e:bc:44:a4:79:11:20:a3:2f:30: 40:2a:df:6c:58:5c:2d:5a:ca:e4:80:5c:78:f8:df:13:6a:fb: a1:cc:e7:a3:f5:9d:71:a8:c6:9a:78:ff:63:62:b5:10:cf:4b: d2:07:4c:c3:e0:51:e2:aa:a8:12:57:98:bf:9a:79:23:e3:1c: 21:75:b7:a9:c9:80:97:c2:72:f4:4f:84:d4:4f:29:fd:c1:57: 76:9c:be:b9:c8:1b:40:1c:d3:2a:24:7d:87:5d:02:09:ca:34: a3:d2:0f:e7:ff:4e:a3:18:59:15:7b:f1:af:1b:02:1b:69:0f: c9:bc:7b:df:d0:4a:81:d4:58:00:2c:9e:81:81:5a:78:72:ae: 4a:d5:28:9b:a2:6f:5b:88:a2:80:9f:b4:f8:87:73:7f:a4:da: 57:60:f6:bb:90:94:4b:f3:53:fe:ab:24:ba:c8:1d:f5:1c:2d: f0:17:52:84:ea:e7:03:c3:d1:98:0c:47:e3:b9:4c:97:c1:32: 55:a2:12:14:2b:37:df:8d:a4:d3:2b:98:91:6c:41:d2:09:23: 0e:4d:71:f6:c0:59:5f:93:a3:b3:c0:5c:91:a9:82:f8:49:41: 18:fc:6a:91:32:43:ef:2b:e5:c5:1c:1b:c8:57:08:89:26:5f: 59:8e:1e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxRkMxMTAvBgNVBAUTKDQxNUQxRUY1N0REQTc4QTVGQzk1MjQwNTQyNDg0MDAy OENENDdEOTkwHhcNMjUwNDI1MDEwNjQ5WhcNMjUwNTAyMDEwNjQ5WjAYMRYwFAYD VQQDEw02ODBhZTAyYS01Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5ImYVHe/2PFGj2kuQotgS4VSxZCE+s+eTXlM2PbnUkP+C3qaFX3X/TQz4RO EcA5Vr9M0+1e+O0/TBOpXf7Dm9nCRLDgu/OuO/Rwi935lODr7PYHCs4Kqx1BkMek oFRDqqRVRuui0V1O1LqBzIcrKobiPkA3aDFZk68j7W79J47MRu2vMNG7yMmKUNb9 ODHPu7tsSfnruPIttSvK7znhDfZdA2lDwwcUvs67A6RNA6DCrOJS8rg/eZuBb0EI aTyjqaqQg1k4v9hVDOTpzJoZeifKhcgNAyJ+539CP667PMrhtdgrmvzeLIbCh/bp 04ToO4MEkBNn4VEQcZ0x1/6tzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArELEKX BG8cn7xrTPGvgIGa2rWoMB8GA1UdIwQYMBaAFEFdHvV92nil/JUkBUJIQAKM1H2Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFGQy8zMDRBODlEQ0RF MzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVLWDhsU1FGUWtoQUFvelVm WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWMGU5WDNhZUtYOGxTUUZRa2hBQW96VWZaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFGQy8zMDRBODlEQ0RFMzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVL WDhsU1FGUWtoQUFvelVmWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT68BGoOo3c268RKR5ESCjLzBAKt9sWFwtWsrkgFx4+N8TavuhzOej 9Z1xqMaaeP9jYrUQz0vSB0zD4FHiqqgSV5i/mnkj4xwhdbepyYCXwnL0T4TUTyn9 wVd2nL65yBtAHNMqJH2HXQIJyjSj0g/n/06jGFkVe/GvGwIbaQ/JvHvf0EqB1FgA LJ6BgVp4cq5K1Sibom9biKKAn7T4h3N/pNpXYPa7kJRL81P+qyS6yB31HC3wF1KE 6ucDw9GYDEfjuUyXwTJVohIUKzffjaTTK5iRbEHSCSMOTXH2wFlfk6OzwFyRqYL4 SUEY/GqRMkPvK+XFHBvIVwiJJl9Zjh7m -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:52 2025 by rpki-client