$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: zF6qwrFO7+a0KpwzeTPdRbDLr/iT5H9rrdRh6G/e7fs= Subject key identifier: 40:04:A1:40:24:EE:96:97:2D:AD:B2:3E:F8:2B:49:8D:DD:30:51:B4 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 01B5 Signing time: Tue 17 Jun 2025 02:31:10 +0000 Manifest this update: Tue 17 Jun 2025 02:31:10 +0000 Manifest next update: Tue 24 Jun 2025 02:31:10 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: WiD1Sxn4z6i+I9tUx3V8hCxCeaeB22Sfy8EzAfhy/BI=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=) 3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Jun 17 02:31:10 2025 GMT Not After : Jun 24 02:31:10 2025 GMT Subject: CN=6850d36e-baf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:21:bb:e4:93:c4:b2:a0:80:bf:51:46:b5:e5: a8:d2:8a:1f:b2:58:64:f2:24:1a:b0:51:d8:68:f2: 24:2a:46:9f:bf:86:e4:42:ab:8c:8f:bf:09:d6:3f: 2a:95:6d:ec:68:ce:2e:83:82:f7:b9:cb:b9:11:b2: 44:84:0a:1c:bb:7c:92:c1:aa:b4:c6:98:8b:0f:f0: 40:41:56:fc:3f:7c:35:dd:94:3d:93:87:58:01:e1: 1c:4f:f5:4d:cd:bb:44:1b:13:19:33:21:13:51:8d: b3:31:56:7e:f9:c7:36:7b:f8:9a:28:31:ad:19:93: 14:f6:ab:1a:f6:60:86:3a:2a:cf:43:ef:0b:c3:15: 05:7b:05:c9:c6:fc:4c:78:c9:89:53:02:ed:68:7d: 5c:9f:c0:f6:17:fb:f4:f3:7c:bf:36:a3:2f:e0:46: 8b:97:f0:4d:21:77:1f:e9:00:8d:f9:11:0b:4c:ea: 0e:c0:7a:74:2d:89:a3:a6:e8:db:e9:4b:98:e9:1c: 3f:9f:f6:f4:9c:45:22:51:8b:d0:54:a7:53:d3:1c: 1b:ad:46:45:13:c9:ad:d3:f1:db:b4:9e:f7:39:69: 66:20:05:be:65:b4:06:d3:6d:04:6b:25:76:bb:14: 23:c9:3a:ec:69:87:e0:38:d6:5c:db:4b:8a:a8:bc: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:04:A1:40:24:EE:96:97:2D:AD:B2:3E:F8:2B:49:8D:DD:30:51:B4 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:53:5b:40:4a:42:99:14:9c:2b:aa:cc:bd:2b:cc:02:25:b5: f6:71:48:af:e9:4c:15:67:be:c1:5b:65:3c:67:05:20:13:aa: f0:a9:ef:bd:41:c4:80:7b:a2:b1:36:27:ba:bc:66:45:c0:03: 00:0f:38:24:00:3e:36:02:4c:df:c8:75:ed:3d:cd:5d:24:12: d0:06:9b:bf:41:55:bf:c5:76:9c:35:ea:4c:33:a6:cc:d7:11: b5:f6:0b:e6:88:86:58:a4:2e:64:13:be:81:a8:d4:2f:ec:ce: f9:18:ff:a8:93:c4:59:71:4e:50:4c:88:40:ad:ca:e9:34:0d: 81:e9:7c:4a:58:6e:24:77:b0:cf:9b:c7:de:69:47:a9:7e:84: 8b:0b:b3:f6:a8:f3:4d:0f:03:ae:ad:af:97:63:2c:40:6a:78: 33:81:56:09:6e:4b:00:a2:eb:0b:e5:05:61:c5:7c:c8:59:aa: 4f:64:9c:1e:08:33:e3:fc:09:cf:c7:66:a5:4a:9f:23:f4:06: 68:07:77:9d:ed:61:28:29:bd:a1:56:86:27:b5:27:45:1b:9e: b5:1c:44:7d:0c:94:3b:6f:8c:1f:15:ef:3f:f2:48:a3:02:06: 84:a5:e2:41:59:3f:77:4d:c2:6c:1a:e0:1d:f8:d7:a9:99:bb: 05:ab:04:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwNjE3MDIzMTEwWhcNMjUwNjI0MDIzMTEwWjAYMRYwFAYD VQQDEw02ODUwZDM2ZS1iYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yG75JPEsqCAv1FGteWo0oofslhk8iQasFHYaPIkKkafv4bkQquMj78J1j8q lW3saM4ug4L3ucu5EbJEhAocu3ySwaq0xpiLD/BAQVb8P3w13ZQ9k4dYAeEcT/VN zbtEGxMZMyETUY2zMVZ++cc2e/iaKDGtGZMU9qsa9mCGOirPQ+8LwxUFewXJxvxM eMmJUwLtaH1cn8D2F/v083y/NqMv4EaLl/BNIXcf6QCN+RELTOoOwHp0LYmjpujb 6UuY6Rw/n/b0nEUiUYvQVKdT0xwbrUZFE8mt0/HbtJ73OWlmIAW+ZbQG020EayV2 uxQjyTrsaYfgONZc20uKqLzqbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAEoUAk 7paXLa2yPvgrSY3dMFG0MB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWU1tASkKZFJwrqsy9K8wCJbX2cUiv6UwVZ77BW2U8ZwUgE6rwqe+9 QcSAe6KxNie6vGZFwAMADzgkAD42AkzfyHXtPc1dJBLQBpu/QVW/xXacNepMM6bM 1xG19gvmiIZYpC5kE76BqNQv7M75GP+ok8RZcU5QTIhArcrpNA2B6XxKWG4kd7DP m8feaUepfoSLC7P2qPNNDwOura+XYyxAangzgVYJbksAousL5QVhxXzIWapPZJwe CDPj/AnPx2alSp8j9AZoB3ed7WEoKb2hVoYntSdFG561HER9DJQ7b4wfFe8/8kij AgaEpeJBWT93TcJsGuAd+NepmbsFqwRd -----END CERTIFICATE-----Generated at Tue Jun 17 22:57:35 2025 by rpki-client