$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: ZXbjdBzDp5BoApurOoEcGT4jtEB78SNFAjtlYLqMxbA= Subject key identifier: DF:E9:C3:41:71:E4:8C:D4:9F:78:A1:7E:2A:34:1A:22:17:83:7F:43 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:15:50 +0000 Manifest this update: Fri 25 Apr 2025 06:15:50 +0000 Manifest next update: Fri 02 May 2025 06:15:50 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: dHMluxIPa2iIausTl1IZNjBrrN9u+wI03W/RB588ksk=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Apr 25 06:15:50 2025 GMT Not After : May 2 06:15:50 2025 GMT Subject: CN=680b2896-be29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:40:4e:3f:2e:4d:1a:92:37:9d:93:ad:3a: 30:dd:30:c8:bf:db:3b:b4:29:b5:00:b8:15:80:76: c8:10:cf:e3:32:df:12:ba:ff:6d:f3:ef:64:99:00: b7:14:a2:0f:a7:87:a6:11:3c:e0:cc:46:e0:4c:5c: 4b:4c:5c:00:70:28:59:69:31:e7:a4:5c:4d:0b:b5: b1:87:8e:97:2e:4a:f2:9a:74:48:b8:90:17:42:0c: 76:78:5a:70:91:76:19:64:a1:83:ae:8c:da:71:b0: 7b:19:ee:b2:5f:15:1c:80:26:c7:aa:50:fa:ff:aa: be:a9:d5:75:99:d3:35:a0:6e:7b:14:8b:17:d1:69: 37:ea:73:49:82:b7:af:6e:54:ac:71:75:69:87:1f: 96:e8:7f:f4:75:53:ac:b1:96:e4:34:a6:ad:cb:f1: df:fd:ec:3f:07:aa:e0:84:37:ce:f4:13:a2:ee:f8: fc:2c:d0:75:23:8a:a6:43:fb:cd:27:81:71:19:a2: 44:fd:88:e1:d6:1c:3b:b4:e6:98:0f:9c:53:94:d2: 87:47:0a:d4:7e:6d:aa:5a:00:e2:ce:2f:ae:fa:57: c5:ba:99:f5:b0:2c:79:67:1b:14:d4:34:f1:bb:82: e2:51:67:6d:ba:34:64:a7:a6:06:49:c9:20:56:0c: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:C3:41:71:E4:8C:D4:9F:78:A1:7E:2A:34:1A:22:17:83:7F:43 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:30:e2:8f:36:58:cd:16:89:62:0e:67:ec:fc:52:2b:c8:82: c8:b3:52:ee:99:8d:52:79:51:ee:db:64:1d:79:1f:e8:43:c2: 56:92:f9:6c:4a:0d:16:a9:2d:b8:ce:e4:6a:24:84:8c:4f:f3: d0:26:d7:8d:c0:1a:48:75:ea:1d:f0:ee:38:74:5f:93:5c:c0: ec:c0:2b:78:b2:69:3d:3a:bd:9b:26:5c:0f:3d:d1:06:43:92: 26:ce:a0:8e:71:c4:19:46:32:0c:65:70:28:9d:52:33:5e:2f: 9a:83:6d:ac:88:db:a7:b0:27:aa:4c:c0:3d:b0:46:44:54:f1: fa:94:14:dd:82:eb:45:4c:f6:be:a3:e2:ff:6f:32:66:2f:ab: 93:b5:7c:91:38:66:b2:5c:17:46:31:db:53:e3:fd:2f:aa:1d: fc:90:73:fd:c7:35:a4:1c:ba:78:97:9d:f8:d5:b5:2f:dc:a1: b6:54:b0:27:71:9e:7f:27:d3:f1:da:6f:9a:fc:94:17:02:01: 00:f4:0a:d8:4d:8c:3d:e2:3c:c1:50:19:10:42:3b:c5:9d:47: 68:44:f5:05:31:8e:34:a3:05:4c:ea:fb:c8:17:44:0a:8c:2e: 47:15:2f:29:7a:91:f7:39:f0:58:79:a7:fa:ed:e5:cf:b4:27: 8c:37:2f:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNTA0MjUwNjE1NTBaFw0yNTA1MDIwNjE1NTBaMBgxFjAUBgNV BAMTDTY4MGIyODk2LWJlMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkFUBOPy5NGpI3nZOtOjDdMMi/2zu0KbUAuBWAdsgQz+My3xK6/23z72SZALcU og+nh6YRPODMRuBMXEtMXABwKFlpMeekXE0LtbGHjpcuSvKadEi4kBdCDHZ4WnCR dhlkoYOujNpxsHsZ7rJfFRyAJseqUPr/qr6p1XWZ0zWgbnsUixfRaTfqc0mCt69u VKxxdWmHH5bof/R1U6yxluQ0pq3L8d/97D8HquCEN870E6Lu+Pws0HUjiqZD+80n gXEZokT9iOHWHDu05pgPnFOU0odHCtR+bapaAOLOL676V8W6mfWwLHlnGxTUNPG7 guJRZ226NGSnpgZJySBWDE/hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3+nDQXHk jNSfeKF+KjQaIheDf0MwHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHow4o82WM0WiWIOZ+z8UivIgsizUu6ZjVJ5Ue7bZB15H+hDwlaS+WxK DRapLbjO5GokhIxP89Am143AGkh16h3w7jh0X5NcwOzAK3iyaT06vZsmXA890QZD kibOoI5xxBlGMgxlcCidUjNeL5qDbayI26ewJ6pMwD2wRkRU8fqUFN2C60VM9r6j 4v9vMmYvq5O1fJE4ZrJcF0Yx21Pj/S+qHfyQc/3HNaQcuniXnfjVtS/cobZUsCdx nn8n0/Hab5r8lBcCAQD0CthNjD3iPMFQGRBCO8WdR2hE9QUxjjSjBUzq+8gXRAqM LkcVLyl6kfc58Fh5p/rt5c+0J4w3L5g= -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:46 2025 by rpki-client