$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: QamF228/71isHcXtftEQwE5ey4H/y6RlnvgJT5S/GUI= Subject key identifier: 24:6C:67:94:1A:6A:F6:C2:C9:CD:44:77:40:2A:93:17:0F:49:C8:F7 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DAF Signing time: Thu 24 Apr 2025 16:07:42 +0000 Manifest this update: Thu 24 Apr 2025 16:07:41 +0000 Manifest next update: Thu 01 May 2025 16:07:41 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: plCRc/liIUy0zc9xdHcPxvbYZNhSjnMPVfgbkd/Wqx0=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7608 (0x1db8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Apr 24 16:07:41 2025 GMT Not After : May 1 16:07:41 2025 GMT Subject: CN=680a61cd-b10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4d:98:69:0c:67:25:83:7c:c5:84:6a:9b:07: c0:36:a1:07:05:eb:e6:a3:c4:be:a4:8f:0d:0b:c5: 60:2f:aa:a7:5d:04:ae:dc:93:12:d3:48:d9:db:8f: 6e:d8:db:13:85:7f:8f:f2:69:f1:d3:17:13:94:cb: dd:62:78:23:29:12:5c:63:b6:b6:c6:68:77:c1:b5: 5e:2c:e4:5d:44:dc:0e:1e:56:ac:53:56:62:3d:2f: a2:7d:c3:08:70:22:5c:9f:11:6a:eb:15:d6:61:e9: 0a:fe:12:1e:fb:72:be:a0:1d:57:40:7f:b9:2c:c1: 69:0c:90:fc:81:64:dd:36:8d:d9:19:af:be:f6:55: 39:b1:6f:7b:e2:67:94:66:03:b3:9a:8b:9d:b8:e0: 2f:f5:7d:e3:f1:cc:01:f5:71:15:b8:a3:1b:f2:17: 96:79:d7:8e:18:99:e8:db:5f:0e:5c:12:83:c1:23: d0:0c:d2:41:45:0e:52:18:84:35:b4:0f:0e:5d:8a: 76:43:b9:4f:ce:36:f1:1b:78:93:2a:ea:d8:45:51: 87:de:f3:12:79:4a:0e:d1:c8:50:d6:57:03:54:e7: 3d:65:9c:e2:8b:d5:2a:57:9f:44:36:c6:f8:72:03: 33:d2:35:6e:28:60:fd:cc:fd:53:96:2b:c3:1b:7a: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:67:94:1A:6A:F6:C2:C9:CD:44:77:40:2A:93:17:0F:49:C8:F7 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:38:1b:7d:9f:d8:4c:0e:98:97:d3:46:df:22:80:be:c8:85: ed:2b:1d:39:b5:3e:6c:0f:6d:9c:6b:7d:1d:4e:96:88:fc:4f: 8e:19:bd:eb:f1:f9:9f:e7:81:84:e4:d1:31:44:bf:35:27:7a: 37:cc:e2:ae:cd:42:cf:12:c5:15:de:ad:7d:36:47:d4:12:68: 2b:c9:8a:7a:6f:4a:9a:51:a7:5c:01:b8:a9:20:35:48:fe:00: 7e:38:63:b0:a1:b1:86:2f:98:16:3f:92:6f:3a:84:1b:69:6b: 8f:09:47:41:6d:10:f5:91:d2:43:cc:56:c7:c5:f3:c6:f2:37: 55:de:d8:3d:c6:6d:b6:1b:7a:30:f8:5f:dc:97:38:f3:ff:5e: b0:45:73:27:76:90:e8:d5:94:dc:53:96:69:c4:9e:40:ba:3b: c4:c4:70:5f:a8:1f:de:df:ee:69:6a:7a:fe:26:a8:cd:85:29: e0:cc:ec:8d:dc:2f:2d:c8:aa:1b:a9:23:ea:56:d6:a3:4a:c1: 43:a3:a7:08:7b:79:50:5f:87:f5:c9:e2:9f:4f:69:aa:95:c2: 01:44:dc:4b:50:17:db:5e:9c:ed:2f:94:e5:e9:b0:36:d9:72: ca:c4:ed:82:a2:69:6a:1a:bc:93:53:90:81:1d:14:e0:d6:1a: e1:45:d0:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwNDI0MTYwNzQxWhcNMjUwNTAxMTYwNzQxWjAYMRYwFAYD VQQDEw02ODBhNjFjZC1iMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA602YaQxnJYN8xYRqmwfANqEHBevmo8S+pI8NC8VgL6qnXQSu3JMS00jZ249u 2NsThX+P8mnx0xcTlMvdYngjKRJcY7a2xmh3wbVeLORdRNwOHlasU1ZiPS+ifcMI cCJcnxFq6xXWYekK/hIe+3K+oB1XQH+5LMFpDJD8gWTdNo3ZGa++9lU5sW974meU ZgOzmouduOAv9X3j8cwB9XEVuKMb8heWedeOGJno218OXBKDwSPQDNJBRQ5SGIQ1 tA8OXYp2Q7lPzjbxG3iTKurYRVGH3vMSeUoO0chQ1lcDVOc9ZZzii9UqV59ENsb4 cgMz0jVuKGD9zP1TlivDG3q8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRsZ5Qa avbCyc1Ed0AqkxcPScj3MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9OBt9n9hMDpiX00bfIoC+yIXtKx05tT5sD22ca30dTpaI/E+OGb3r 8fmf54GE5NExRL81J3o3zOKuzULPEsUV3q19NkfUEmgryYp6b0qaUadcAbipIDVI /gB+OGOwobGGL5gWP5JvOoQbaWuPCUdBbRD1kdJDzFbHxfPG8jdV3tg9xm22G3ow +F/clzjz/16wRXMndpDo1ZTcU5ZpxJ5AujvExHBfqB/e3+5panr+JqjNhSngzOyN 3C8tyKobqSPqVtajSsFDo6cIe3lQX4f1yeKfT2mqlcIBRNxLUBfbXpztL5Tl6bA2 2XLKxO2ComlqGryTU5CBHRTg1hrhRdCb -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:53 2025 by rpki-client