$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json) Hash identifier: OKqB9xARUat7gXft6L8hKCyfGyULDVkf/pWKhfBRRhc= Subject key identifier: F2:38:92:26:6C:32:8F:A5:A0:6D:F6:17:0E:E1:52:CE:D4:8D:4A:D1 Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft Manifest number: 011F Signing time: Fri 25 Apr 2025 03:52:27 +0000 Manifest this update: Fri 25 Apr 2025 03:52:26 +0000 Manifest next update: Fri 02 May 2025 03:52:26 +0000 Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: 3r2b51RHUHDm8rw474V0F672ZDvx3noS4TD1ufS86PM=) 2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Validity Not Before: Apr 25 03:52:26 2025 GMT Not After : May 2 03:52:26 2025 GMT Subject: CN=680b06fb-fedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:25:2d:3e:20:cd:4e:87:b9:75:e6:33:96: dd:a1:19:af:7b:6a:4f:af:c9:8a:45:3a:db:48:02: 10:59:81:f7:c7:66:e9:22:45:c8:6d:89:6b:32:78: df:ee:81:dc:68:a7:92:2a:d0:46:4c:10:bc:7c:8b: f8:47:53:41:2c:c2:5c:31:49:2f:96:d4:21:ad:f9: d7:d1:4b:e9:56:80:22:66:b2:53:9a:a4:b7:73:3b: 7a:0a:6f:0c:fe:a1:09:f3:12:31:90:8f:42:2b:7d: ca:3d:91:bb:9e:1d:b9:c0:ef:f7:35:4d:0c:dc:b7: 1d:5f:10:7e:47:d9:f8:13:b2:17:05:30:2a:0c:78: ff:aa:72:a4:b5:19:2a:29:ae:a2:88:8d:6e:a6:c4: e4:3d:4f:6a:87:59:ce:9f:28:9f:04:7c:e5:98:3c: 0f:28:97:a1:95:e0:b7:30:45:dd:55:66:b3:7f:93: 7c:ff:8d:c4:f5:62:c9:ad:e1:56:3a:16:ae:18:c3: 92:5e:ae:9d:2f:64:de:2c:aa:0c:07:92:4c:80:ea: a5:07:f5:86:4d:6d:2d:a9:f7:4d:37:e6:b6:f7:44: 27:2f:6a:7a:c9:47:05:66:15:b5:28:2f:ea:b5:55: 86:29:15:41:81:e0:1a:55:a8:d0:2d:bc:5b:13:1e: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:92:26:6C:32:8F:A5:A0:6D:F6:17:0E:E1:52:CE:D4:8D:4A:D1 X509v3 Authority Key Identifier: keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:be:ad:58:65:fd:de:d7:dc:48:6a:3a:ee:e9:6f:0d:9a:6b: 10:1b:68:e5:45:06:c0:e2:57:f2:d5:45:d3:a8:0a:b1:75:68: 46:55:07:5a:2f:38:f0:b5:d4:e2:54:5c:b6:66:2a:b0:f6:12: f8:95:07:5b:c1:e6:90:dd:41:39:cf:49:d1:54:d7:33:ef:8c: e9:21:6e:37:f4:2c:e3:e0:62:19:0b:b1:33:05:5c:4f:5b:95: e0:d4:5c:ed:11:c8:b0:53:05:4b:fc:fe:80:1c:0f:34:97:34: 15:59:98:92:36:2c:37:e6:ff:c0:6e:c5:fc:b5:9a:5a:6e:89: 30:3f:9c:aa:72:ab:c5:86:a8:cb:8d:4b:ed:9e:b8:6a:ab:2e: 28:6c:34:25:24:98:79:cf:ae:a5:52:49:e1:30:2d:d7:2d:f5: 42:52:ce:c6:0e:6d:bd:82:af:ca:46:8e:e8:95:3e:8a:01:1a: 8c:62:39:1d:dd:26:4d:48:d7:54:b9:1c:cd:af:d6:88:ae:b8: 59:62:1f:2f:d4:be:cb:63:97:01:21:8a:6a:52:37:3b:24:12: cf:a6:bd:6e:7f:76:6f:5a:18:da:c5:d2:85:58:a7:17:16:02: 06:de:8b:65:b3:16:aa:70:b3:27:74:ab:ec:dd:92:58:98:b0: b0:ef:fb:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY2NkQxMTAvBgNVBAUTKEFBOUEwRENCNTEzMTM5MkQ3MTk2QTg0NDE4QThBODQ2 NDU1MzFGOTcwHhcNMjUwNDI1MDM1MjI2WhcNMjUwNTAyMDM1MjI2WjAYMRYwFAYD VQQDEw02ODBiMDZmYi1mZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2AlLT4gzU6HuXXmM5bdoRmve2pPr8mKRTrbSAIQWYH3x2bpIkXIbYlrMnjf 7oHcaKeSKtBGTBC8fIv4R1NBLMJcMUkvltQhrfnX0UvpVoAiZrJTmqS3czt6Cm8M /qEJ8xIxkI9CK33KPZG7nh25wO/3NU0M3LcdXxB+R9n4E7IXBTAqDHj/qnKktRkq Ka6iiI1upsTkPU9qh1nOnyifBHzlmDwPKJehleC3MEXdVWazf5N8/43E9WLJreFW OhauGMOSXq6dL2TeLKoMB5JMgOqlB/WGTW0tqfdNN+a290QnL2p6yUcFZhW1KC/q tVWGKRVBgeAaVajQLbxbEx5t8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI4kiZs Mo+loG32Fw7hUs7UjUrRMB8GA1UdIwQYMBaAFKqaDctRMTktcZaoRBioqEZFUx+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjY2RC81MTFBODkyRTcx QTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9TMXhscWhFR0tpb1JrVlRI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fwb055MUV4T1MxeGxxaEVHS2lvUmtWVEg1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjY2RC81MTFBODkyRTcxQTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9T MXhscWhFR0tpb1JrVlRINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnvq1YZf3e19xIajru6W8NmmsQG2jlRQbA4lfy1UXTqAqxdWhGVQda LzjwtdTiVFy2Ziqw9hL4lQdbweaQ3UE5z0nRVNcz74zpIW439Czj4GIZC7EzBVxP W5Xg1FztEciwUwVL/P6AHA80lzQVWZiSNiw35v/AbsX8tZpabokwP5yqcqvFhqjL jUvtnrhqqy4obDQlJJh5z66lUknhMC3XLfVCUs7GDm29gq/KRo7olT6KARqMYjkd 3SZNSNdUuRzNr9aIrrhZYh8v1L7LY5cBIYpqUjc7JBLPpr1uf3ZvWhjaxdKFWKcX FgIG3otlsxaqcLMndKvs3ZJYmLCw7/vI -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:03 2025 by rpki-client