$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: 7YHk7WHDOO6Kgyd3G6t1i5l9IwFnSDd9ExztDb7jKsY= Subject key identifier: C2:2B:05:7C:56:E0:39:7F:87:85:8B:24:45:BA:E5:2E:29:3F:F7:54 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 7B Signing time: Tue 29 Apr 2025 06:43:08 +0000 Manifest this update: Tue 29 Apr 2025 06:43:08 +0000 Manifest next update: Tue 06 May 2025 06:43:08 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: RjXsmzkzJTHEBMNQDW9ibm9OMy5mrzh5U8VEkjZcbHQ=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 06:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Apr 29 06:43:08 2025 GMT Not After : May 6 06:43:08 2025 GMT Subject: CN=681074fc-0709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:de:09:56:56:b1:f5:b1:a5:10:dc:71:c2: 6d:3e:63:9c:e8:24:a6:b4:f5:79:24:9d:bc:74:f9: 87:25:fc:3d:6e:72:cc:a1:32:79:7a:ea:17:ac:db: d3:3b:48:19:b1:60:45:1d:88:58:18:06:54:03:13: 4d:86:3a:0f:90:f6:94:ec:44:0e:65:bd:e2:52:b3: 52:9a:1a:6d:68:e3:00:ac:45:1d:53:04:a6:54:94: 60:6f:2b:74:3c:23:7f:f9:0e:cc:4e:90:e5:83:a8: 0a:9e:32:d1:ff:ac:29:d9:85:7f:54:ee:65:8e:01: 6d:24:0e:a7:ac:72:79:a8:c2:eb:ae:3c:41:94:7a: 0f:8a:e2:7b:78:23:34:30:06:1f:92:78:18:d9:bc: 39:cd:82:39:ec:b6:fd:47:66:aa:86:75:2d:bd:01: eb:3c:7a:04:a3:76:1e:0b:1f:a9:e7:93:a3:59:ef: 3c:65:e4:ac:0f:76:b9:0a:7c:60:e6:37:f7:61:4a: f5:19:95:18:8a:d9:11:31:b9:36:8a:8a:98:2c:08: bd:26:fa:c8:2e:b0:db:3a:16:11:a3:b6:96:25:01: 7f:33:b0:cf:ca:47:30:de:09:0e:46:c7:fc:6a:e0: 3c:9a:b1:57:99:5a:e4:64:f9:61:08:2c:4b:ba:3a: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2B:05:7C:56:E0:39:7F:87:85:8B:24:45:BA:E5:2E:29:3F:F7:54 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:68:e7:5d:e9:1a:27:90:a0:c2:fd:d2:5c:82:9a:e6:25:53: 2c:c3:25:34:18:7d:7d:40:dc:e3:b2:3d:7e:10:d1:3f:46:46: e3:02:6e:d6:b5:8a:b3:74:d8:83:4f:94:15:92:58:aa:64:bb: 04:fe:e3:5b:cf:4d:dc:39:9f:6b:bf:5e:43:5d:3e:cb:45:e3: fa:b9:bf:a6:fb:d4:c5:62:a4:eb:3c:e8:60:d0:89:81:a9:ea: 3a:d4:b8:8a:67:42:ec:89:22:f7:fd:45:ec:87:fd:aa:46:33: af:2d:77:0b:b8:f5:bd:38:51:44:e5:10:ef:75:b7:23:52:1c: e1:0e:3f:e8:64:68:33:d2:8f:24:2a:b3:93:34:e5:ba:00:ed: 22:ab:4e:6f:a5:00:8c:15:ca:8d:ce:79:c3:16:48:28:c8:6d: dd:32:52:d3:74:37:92:e7:ec:a9:74:e6:0e:8a:12:79:55:0b: 84:95:6a:77:1e:d8:53:bc:2f:26:18:fa:93:5d:36:32:01:26: 3c:40:d4:d4:bf:e9:78:de:3a:9b:75:67:2d:d6:b6:fb:4a:83: 0a:23:00:7f:91:96:fc:69:ac:49:a2:f7:eb:2e:42:d7:9b:05: d7:11:fc:7c:48:df:5c:b1:ec:65:26:a7:ee:67:e4:ed:f6:5a: 07:68:6c:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RTg5RjExMC8GA1UEBRMoNDMxQjBBNDgzNUZDRjY5NkIzRUNEMzM1OTI1QThFMTM2 MTBDRDEzNzAeFw0yNTA0MjkwNjQzMDhaFw0yNTA1MDYwNjQzMDhaMBgxFjAUBgNV BAMTDTY4MTA3NGZjLTA3MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSjd4JVlax9bGlENxxwm0+Y5zoJKa09Xkknbx0+Ycl/D1ucsyhMnl66hes29M7 SBmxYEUdiFgYBlQDE02GOg+Q9pTsRA5lveJSs1KaGm1o4wCsRR1TBKZUlGBvK3Q8 I3/5DsxOkOWDqAqeMtH/rCnZhX9U7mWOAW0kDqescnmowuuuPEGUeg+K4nt4IzQw Bh+SeBjZvDnNgjnstv1HZqqGdS29Aes8egSjdh4LH6nnk6NZ7zxl5KwPdrkKfGDm N/dhSvUZlRiK2RExuTaKipgsCL0m+sgusNs6FhGjtpYlAX8zsM/KRzDeCQ5Gx/xq 4DyasVeZWuRk+WEILEu6OskLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwisFfFbg OX+HhYskRbrlLik/91QwHwYDVR0jBBgwFoAUQxsKSDX89paz7NM1klqOE2EM0Tcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFODlGL0FGRkQyMTcwNkRD QjExRUY5QjM5Qjg2NUM0RjlBRTAyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBU Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXhzS1NEWDg5cGF6N05NMWtscU9FMkVNMFRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF ODlGL0FGRkQyMTcwNkRDQjExRUY5QjM5Qjg2NUM0RjlBRTAyL1F4c0tTRFg4OXBh ejdOTTFrbHFPRTJFTTBUYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZo513pGieQoML90lyCmuYlUyzDJTQYfX1A3OOyPX4Q0T9GRuMCbta1 irN02INPlBWSWKpkuwT+41vPTdw5n2u/XkNdPstF4/q5v6b71MVipOs86GDQiYGp 6jrUuIpnQuyJIvf9ReyH/apGM68tdwu49b04UUTlEO91tyNSHOEOP+hkaDPSjyQq s5M05boA7SKrTm+lAIwVyo3OecMWSCjIbd0yUtN0N5Ln7Kl05g6KEnlVC4SVance 2FO8LyYY+pNdNjIBJjxA1NS/6XjeOpt1Zy3WtvtKgwojAH+RlvxprEmi9+suQteb BdcR/HxI31yx7GUmp+5n5O32WgdobIQ= -----END CERTIFICATE-----Generated at Wed Apr 30 22:24:36 2025 by rpki-client