$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: d0Bk7o+aNni3ljK/J4AxZh1YiUMa11MKWMD5pSCCMMQ= Subject key identifier: EE:82:81:E6:03:15:E3:4B:82:D2:09:AE:8B:7D:61:C3:82:2D:93:7A Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02A5 Signing time: Fri 25 Apr 2025 01:15:32 +0000 Manifest this update: Fri 25 Apr 2025 01:15:31 +0000 Manifest next update: Fri 02 May 2025 01:15:31 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: h6B+VpHTR0/8voqf4+dY5HC3TFtIbsR9B3tSWV+GnQ4=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Apr 25 01:15:31 2025 GMT Not After : May 2 01:15:31 2025 GMT Subject: CN=680ae234-a0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:c1:2b:55:79:1b:7e:4c:47:72:4f:f4:f3: 45:8e:e2:e3:e7:13:d7:99:07:1b:75:cf:3e:fd:9a: 11:f0:c4:e0:ad:6f:aa:10:a2:c0:a8:cc:80:63:42: 0e:6a:09:12:27:c9:e7:92:e3:41:86:8b:c5:fd:da: 2f:36:6c:87:8a:5e:8b:10:8a:4a:72:80:d1:97:78: 9f:41:ee:c7:06:96:b1:5a:ce:5b:64:69:43:c3:24: ae:cf:29:b6:89:d4:13:8f:7f:a1:9a:28:85:39:68: 92:f9:af:51:7d:b1:74:91:af:fd:1e:89:90:db:39: 62:5b:c5:2e:a5:ee:87:57:99:13:70:e5:03:9b:8e: a5:80:d8:17:ce:48:e5:d5:da:43:39:9c:4b:71:0b: d9:00:4a:81:8a:7e:eb:c3:18:8c:11:38:af:9e:99: 9a:38:02:fe:87:0a:50:44:8b:ee:2d:c1:e7:e5:28: c1:66:2c:4f:bd:03:a4:e5:1f:4e:12:90:32:31:5f: 7e:35:f6:f6:09:9a:cd:c8:90:14:3b:78:ce:1e:82: 71:7c:4b:4c:e3:ef:31:5a:cd:d0:10:63:7b:67:14: 92:8a:04:2c:29:08:80:ba:a5:86:a6:8b:0c:a9:d0: 4f:90:42:85:03:33:9a:aa:b9:b8:05:6f:6b:26:05: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:81:E6:03:15:E3:4B:82:D2:09:AE:8B:7D:61:C3:82:2D:93:7A X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ab:42:1f:88:0a:ef:6d:ca:47:1a:92:44:3d:9d:5b:5e:83: dc:27:bc:82:f5:f7:14:44:27:e5:e3:14:ec:ae:ad:a6:7c:c9: cd:87:81:a7:db:4e:3a:12:55:ad:72:6b:30:ad:67:ac:f2:e4: f0:ea:61:07:f9:6d:1e:5a:2b:41:28:ab:76:69:6c:bc:52:e8: 27:12:a6:70:5c:eb:f2:5c:f2:38:b0:fb:f7:53:9b:8d:d6:c9: 93:7f:79:98:cd:67:15:8c:b2:de:32:9e:97:12:5a:40:5a:9f: 3a:59:a4:b4:e6:65:1b:b0:fe:1e:17:a2:b3:6e:53:26:b7:c2: 77:51:b1:1c:bc:c1:71:98:7f:63:ba:2f:05:54:03:7d:8e:62: 50:50:88:60:99:2b:6f:e8:95:fe:e2:4a:0c:7c:3a:44:1e:e2: e9:74:f6:92:5e:68:2b:c5:14:b3:2d:31:cd:c5:8e:ae:40:bc: 8b:60:97:9d:23:d5:ac:e4:6f:db:c8:e0:af:77:be:78:20:ef: 8b:63:87:e7:e1:34:6e:2e:67:26:e2:fb:ca:2f:3a:30:a3:cc: a4:be:1b:a1:c4:d8:19:cc:86:4a:11:4e:75:a7:ac:9d:d1:45: a9:89:23:af:5a:a3:c1:9c:96:49:33:c5:f1:a6:6c:11:b0:ca: 86:0d:54:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwNDI1MDExNTMxWhcNMjUwNTAyMDExNTMxWjAYMRYwFAYD VQQDEw02ODBhZTIzNC1hMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fPBK1V5G35MR3JP9PNFjuLj5xPXmQcbdc8+/ZoR8MTgrW+qEKLAqMyAY0IO agkSJ8nnkuNBhovF/dovNmyHil6LEIpKcoDRl3ifQe7HBpaxWs5bZGlDwySuzym2 idQTj3+hmiiFOWiS+a9RfbF0ka/9HomQ2zliW8Uupe6HV5kTcOUDm46lgNgXzkjl 1dpDOZxLcQvZAEqBin7rwxiMETivnpmaOAL+hwpQRIvuLcHn5SjBZixPvQOk5R9O EpAyMV9+Nfb2CZrNyJAUO3jOHoJxfEtM4+8xWs3QEGN7ZxSSigQsKQiAuqWGposM qdBPkEKFAzOaqrm4BW9rJgVx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6CgeYD FeNLgtIJrot9YcOCLZN6MB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/q0IfiArvbcpHGpJEPZ1bXoPcJ7yC9fcURCfl4xTsrq2mfMnNh4Gn 2046ElWtcmswrWes8uTw6mEH+W0eWitBKKt2aWy8UugnEqZwXOvyXPI4sPv3U5uN 1smTf3mYzWcVjLLeMp6XElpAWp86WaS05mUbsP4eF6KzblMmt8J3UbEcvMFxmH9j ui8FVAN9jmJQUIhgmStv6JX+4koMfDpEHuLpdPaSXmgrxRSzLTHNxY6uQLyLYJed I9Ws5G/byOCvd754IO+LY4fn4TRuLmcm4vvKLzowo8ykvhuhxNgZzIZKEU51p6yd 0UWpiSOvWqPBnJZJM8XxpmwRsMqGDVTb -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:53 2025 by rpki-client