$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: esnByRDusPnyDN/kaKw2SltLB+jXYet0o040nv25KX8= Subject key identifier: 9F:ED:41:CA:77:3D:28:9A:6B:95:1B:CF:47:AF:7E:C7:6A:38:29:E1 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2DE4 Signing time: Thu 24 Apr 2025 15:30:03 +0000 Manifest this update: Thu 24 Apr 2025 15:30:02 +0000 Manifest next update: Thu 01 May 2025 15:30:02 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: NovWkkGKgvLGLFw+eG9gVk4czneTdPcMgRAF54m9w/Y=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11761 (0x2df1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Apr 24 15:30:02 2025 GMT Not After : May 1 15:30:02 2025 GMT Subject: CN=680a58fa-0881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4c:36:63:3d:4e:23:61:a1:c7:08:85:0a:25: 34:74:79:c2:90:68:c5:5f:b9:73:da:3d:09:60:33: 3f:0e:f9:6f:a7:08:4e:58:75:b5:fb:fb:07:2b:e5: 8e:9a:ca:5e:49:e4:eb:3c:78:db:6c:bc:5c:9d:aa: c2:de:18:bb:4c:31:f3:87:c0:1b:ed:57:8a:14:29: cb:60:29:26:42:0b:6b:5f:b9:9a:ff:e6:1a:72:40: 80:57:88:6f:aa:09:50:a5:04:3c:9f:75:f6:3d:20: 1f:d2:c7:41:d5:cf:bb:a4:c9:1d:41:d3:07:aa:45: 15:45:67:8d:47:bf:7d:13:f5:b1:d4:5f:48:f4:26: f6:d4:7e:6e:f7:a4:68:05:fa:49:35:df:bf:33:e4: bb:1d:98:7b:7e:48:e5:7f:e3:8c:51:eb:5f:96:ba: 58:4a:fe:a4:9c:08:4f:6b:1a:0b:b3:62:9e:59:c2: 5f:c7:b5:fc:d8:48:a6:3a:27:6b:7d:25:52:ab:eb: ee:c8:dd:eb:06:1f:e3:cc:8e:d5:35:e2:17:91:5a: c1:2b:57:2e:ce:4b:18:e8:7f:b2:57:12:5c:8f:c7: bd:72:43:2f:b4:12:8e:68:11:1e:3c:5d:13:ed:b2: 40:ff:2b:8b:68:e8:20:c5:f2:e0:2a:57:7d:e5:0c: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:41:CA:77:3D:28:9A:6B:95:1B:CF:47:AF:7E:C7:6A:38:29:E1 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4e:e2:c7:f6:52:19:0a:e8:d6:9b:d1:e5:eb:21:2d:03:08: df:63:8b:0b:e1:ed:ef:5a:cb:42:10:ed:38:5e:09:62:95:4f: 37:08:77:15:fd:51:43:51:aa:75:97:f6:9f:ae:e7:aa:c2:be: 38:32:9c:cb:d9:da:0e:b8:3e:e1:a2:e2:89:43:2a:2e:5f:6a: 02:9c:a2:54:6b:87:75:5a:4b:07:2c:3b:96:5e:66:4d:39:a9: 0b:cf:98:0e:da:b0:19:88:39:47:64:de:e0:96:a3:60:30:ad: e4:7d:5b:b6:a7:ca:8a:e3:05:75:4a:84:a1:da:a1:60:08:1a: 99:b0:86:16:91:e5:e3:15:ff:3d:d6:2b:36:f1:4e:e0:92:e3: 99:5d:3a:7e:68:4a:1b:a4:ea:7e:ab:9d:47:4d:59:fa:0d:8a: bf:da:e5:35:f6:90:7e:00:70:74:e7:a6:d1:4b:bb:84:2b:39: fc:cd:4e:28:1e:2b:c1:17:01:b3:68:b3:af:aa:62:78:16:1a: 03:a1:2e:f9:06:aa:5c:89:2a:53:61:94:a6:04:75:80:5c:20: 55:32:ff:36:f5:bf:1a:dc:65:7e:dc:87:f3:aa:3d:14:5a:ab: d6:2f:28:69:c1:4a:8d:c2:75:3b:38:ce:a2:a2:e9:4f:3b:d5: 3a:86:b4:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwNDI0MTUzMDAyWhcNMjUwNTAxMTUzMDAyWjAYMRYwFAYD VQQDEw02ODBhNThmYS0wODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60w2Yz1OI2GhxwiFCiU0dHnCkGjFX7lz2j0JYDM/DvlvpwhOWHW1+/sHK+WO mspeSeTrPHjbbLxcnarC3hi7TDHzh8Ab7VeKFCnLYCkmQgtrX7ma/+YackCAV4hv qglQpQQ8n3X2PSAf0sdB1c+7pMkdQdMHqkUVRWeNR799E/Wx1F9I9Cb21H5u96Ro BfpJNd+/M+S7HZh7fkjlf+OMUetflrpYSv6knAhPaxoLs2KeWcJfx7X82EimOidr fSVSq+vuyN3rBh/jzI7VNeIXkVrBK1cuzksY6H+yVxJcj8e9ckMvtBKOaBEePF0T 7bJA/yuLaOggxfLgKld95QyDuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/tQcp3 PSiaa5Ubz0evfsdqOCnhMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbTuLH9lIZCujWm9Hl6yEtAwjfY4sL4e3vWstCEO04XglilU83CHcV /VFDUap1l/afrueqwr44MpzL2doOuD7houKJQyouX2oCnKJUa4d1WksHLDuWXmZN OakLz5gO2rAZiDlHZN7glqNgMK3kfVu2p8qK4wV1SoSh2qFgCBqZsIYWkeXjFf89 1is28U7gkuOZXTp+aEobpOp+q51HTVn6DYq/2uU19pB+AHB056bRS7uEKzn8zU4o HivBFwGzaLOvqmJ4FhoDoS75BqpciSpTYZSmBHWAXCBVMv829b8a3GV+3Ifzqj0U WqvWLyhpwUqNwnU7OM6ioulPO9U6hrQV -----END CERTIFICATE-----Generated at Sat Apr 26 05:57:27 2025 by rpki-client