$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: Kj3zEiGNUZsqWdWeVTWf7UtMWdgaKuyaJa6zVphdGuI= Subject key identifier: B3:BF:EF:C8:DC:57:BF:E2:95:EB:17:2C:E2:0B:5D:C9:D0:7E:E6:94 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: E1 Signing time: Fri 25 Apr 2025 04:46:35 +0000 Manifest this update: Fri 25 Apr 2025 04:46:34 +0000 Manifest next update: Fri 02 May 2025 04:46:34 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: L7kt2il/WZ44Px0rP94j9nYuB5VW8N01S4fnlWBcXnE=) 2: FCF99042301011EFBC350682C4F9AE02.roa (hash: 4zWkF54fFYIlLcGDrxu60ccu1Jo/sOlDzQpRDsrkmZ0=) 3: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: G5wltjNSD/O3ajAJpyjvE7MGloJrQIziYtmSgOapwTQ=) 4: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: egrPthjaxF/A13xbTq0oU0ubbDy9CZyZ7qj/Ab6JSEg=) 5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: Ca6ie1031aXWOzMVO9+1hU4OttxwbWwW5RmhLwoDTf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Apr 25 04:46:34 2025 GMT Not After : May 2 04:46:34 2025 GMT Subject: CN=680b13ab-75af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:16:cc:6c:9b:0d:00:ed:0c:12:98:32:03: eb:48:9b:8a:f1:44:ad:2e:ee:e7:5f:1f:c9:ac:8b: f2:8f:3c:5f:e3:e0:e5:d4:f4:19:6b:e7:73:d1:e9: 7c:4a:4e:ac:12:4d:d7:e6:68:be:91:47:92:f8:83: 41:62:7c:a9:84:28:c7:92:9a:61:6d:b7:45:e2:a1: 22:44:6e:d2:4b:b7:07:12:59:4b:a9:cb:b2:63:dd: c0:df:6e:d1:9a:1f:5c:ee:d1:44:05:43:77:24:14: c0:d0:13:a1:6b:72:4d:92:26:58:52:b3:c1:22:fd: bd:05:b4:88:a5:01:44:31:e9:ce:64:19:8e:d2:e6: 55:6c:3d:e4:80:c5:96:51:d6:fe:39:6b:f9:de:57: 31:db:cc:b2:e9:c3:f6:0c:a0:bb:ed:ae:00:57:60: b2:fc:5c:c6:7d:be:81:69:3e:46:ff:d0:ee:24:e8: a3:e8:ce:ea:e7:05:33:9e:91:4d:ad:2b:0d:10:ed: 72:9d:8c:26:8c:b2:6d:bd:83:40:c6:98:2b:e7:2b: ca:13:2e:90:d4:ee:dc:84:39:50:59:c3:0a:1f:78: 5f:9d:61:0f:56:2f:17:9c:a4:08:97:87:e5:73:a2: b6:96:05:eb:37:15:7c:80:0c:fd:8f:cb:32:4c:dd: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:EF:C8:DC:57:BF:E2:95:EB:17:2C:E2:0B:5D:C9:D0:7E:E6:94 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b8:9e:e7:d7:c9:33:6a:7b:ff:53:6b:77:0c:06:11:86:39: 0b:94:cd:fd:b7:82:90:7c:fa:03:c1:1a:50:3a:ac:63:85:6d: d8:5f:64:06:d4:a2:92:6d:5a:69:ee:99:3b:3b:b8:d7:65:1e: 22:16:99:2e:43:77:33:ef:54:a8:35:ba:e8:13:f7:9f:52:71: 92:a6:ad:97:5d:f9:87:4c:d1:12:c2:64:bb:9b:d5:34:9c:5c: 42:3e:23:af:7d:0e:9c:95:2a:b9:7a:97:3f:41:b6:8d:b8:97: a1:0c:bb:ac:a6:92:b0:26:e2:ac:07:8c:a3:59:76:28:3e:c4: 4b:85:31:b3:56:37:be:60:a5:9f:ac:12:08:02:8f:e5:9a:0f: 1a:84:fe:24:86:f3:78:00:85:e0:36:35:1e:af:15:b0:10:3f: 1a:dd:5b:67:aa:c7:9e:8a:6d:cb:44:08:73:0d:1a:18:fa:23: d4:34:1c:4a:a6:e8:72:21:83:e6:59:4a:90:9d:43:ea:e4:c0: b1:98:d1:2c:95:63:9c:ce:23:37:ae:ea:1f:92:20:23:c6:38: 81:48:52:f7:b3:11:41:4f:93:86:b1:e2:a0:91:31:30:77:f8: e5:00:18:76:8a:a9:b6:ca:17:68:15:9f:2c:50:80:b9:bd:4f: b5:58:b7:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwNDI1MDQ0NjM0WhcNMjUwNTAyMDQ0NjM0WjAYMRYwFAYD VQQDEw02ODBiMTNhYi03NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5wWzGybDQDtDBKYMgPrSJuK8UStLu7nXx/JrIvyjzxf4+Dl1PQZa+dz0el8 Sk6sEk3X5mi+kUeS+INBYnyphCjHkpphbbdF4qEiRG7SS7cHEllLqcuyY93A327R mh9c7tFEBUN3JBTA0BOha3JNkiZYUrPBIv29BbSIpQFEMenOZBmO0uZVbD3kgMWW Udb+OWv53lcx28yy6cP2DKC77a4AV2Cy/FzGfb6BaT5G/9DuJOij6M7q5wUznpFN rSsNEO1ynYwmjLJtvYNAxpgr5yvKEy6Q1O7chDlQWcMKH3hfnWEPVi8XnKQIl4fl c6K2lgXrNxV8gAz9j8syTN29XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO/78jc V7/ilesXLOILXcnQfuaUMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwuJ7n18kzanv/U2t3DAYRhjkLlM39t4KQfPoDwRpQOqxjhW3YX2QG 1KKSbVpp7pk7O7jXZR4iFpkuQ3cz71SoNbroE/efUnGSpq2XXfmHTNESwmS7m9U0 nFxCPiOvfQ6clSq5epc/QbaNuJehDLusppKwJuKsB4yjWXYoPsRLhTGzVje+YKWf rBIIAo/lmg8ahP4khvN4AIXgNjUerxWwED8a3Vtnqseeim3LRAhzDRoY+iPUNBxK puhyIYPmWUqQnUPq5MCxmNEslWOcziM3ruofkiAjxjiBSFL3sxFBT5OGseKgkTEw d/jlABh2iqm2yhdoFZ8sUIC5vU+1WLdC -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:38 2025 by rpki-client