$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft File: QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json) Hash identifier: i6qD+oOcSJd7I/vMZ+W6b5kbZZGZtdVp0BZuc89+4Yc= Subject key identifier: AB:E6:FC:CB:3B:48:77:18:35:CF:5F:FB:E5:3E:83:7C:14:5E:C3:35 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 25EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft Manifest number: 1A27 Signing time: Sat 26 Apr 2025 17:33:51 +0000 Manifest this update: Sat 26 Apr 2025 17:33:51 +0000 Manifest next update: Sat 03 May 2025 17:33:51 +0000 Files and hashes: 1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: CghK+h7W7BYkv9/kdsBhA/hUIeQN1l+2uwr6sDh6rko=) 2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: B9/ZOaKJ3mY7sCCRxWSrCr6EkWxFbiFs/1gThM69MvA=) 3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: IhxFd8GWyvHy4QvuXOqSBd0gnR5njQJdJ+TT3XDY6Ow=) 4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: w54klPBWsGxsJLf7o8O4d/YfYtzij9sx4wGXmrfgKPU=) 5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: Pfx0RtJcLLW5ZFj5crlklO0jOVyz0bjwf3XIGvazerQ=) 6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: hPYWDoyVhEAFfc0fBZwx5qajT1d+KFZshP+N3pa3wbk=) 7: B53FD334575411ECAA094876C4F9AE02.roa (hash: 296EaDfJGmx3e6D5O8LxaSDfTjgH5YD0MQVWUb0ic6U=) 8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: mjR3c+t+smHjLqMf4drJmz9rxODMszK1LD6+M9LGeIY=) 9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: 7dbxR4gR6b4iL0edOOJstgfP/HsQqg2y54IOaM0DIP0=) 10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: Y2jR//Hrw7Q/ZKuGuaywqyH4sSYkPxB7WKTzQDJJ9BQ=) 11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: bBPQcajtfbRygLugvzoj923We+I2sql4kYKXhjN1UGc=) 12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: cBkg3LGcn5rgVL8BTrJzLbW/3oKuwqj01X4Fx7CuIw8=) 13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: WUbEEgBTBdPZdhiwH726GQ5G4iBR6E6r7k+ETLp88Ns=) 14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: phbymQiMHWNNzrnLfh17wazzvcgfnjQBs+kEUNXCkRg=) 15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: 5XY9aEQMhi/DaHdge1N42tPN5dbj/xlmiK62csHhzwM=) 16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: DTA7CeW7cqTZop+4UQyYEWCDfju8wSx8DHDxAzeibSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9706 (0x25ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Apr 26 17:33:51 2025 GMT Not After : May 3 17:33:51 2025 GMT Subject: CN=680d18ff-71d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:2b:11:e3:2f:a9:88:ba:0a:4a:b2:aa:03: c8:48:3e:ea:38:fd:6c:e5:f8:95:a9:01:9b:25:8d: ce:e4:0e:d8:4d:5d:e6:f3:b3:f1:fb:ff:6e:cc:d2: 02:01:c3:aa:30:b4:3e:9e:d9:67:56:52:d1:89:38: 45:0b:34:dc:79:3d:23:2c:76:44:d8:0c:06:d5:5f: ce:ff:55:6d:c9:c8:32:72:65:ae:fd:30:50:56:40: a4:5b:7e:65:7f:e6:3d:8c:08:7a:7b:d9:51:26:23: c0:73:7d:04:16:d1:5d:05:33:d7:ba:2e:29:0e:09: 6d:0f:5a:4d:db:0f:9a:ce:94:21:db:c9:75:41:15: 5e:87:0d:4c:7e:d6:63:e2:bd:71:22:f0:51:64:fc: 4c:f1:aa:a4:73:3d:b4:c8:db:55:fd:23:29:00:cc: f6:5f:d3:27:b6:71:cc:52:0e:1c:00:55:71:c2:cf: c1:1a:94:1c:df:8e:b1:0b:d6:70:d4:d3:a3:5c:ea: 43:24:6a:b9:30:5e:ee:d2:ee:e3:8e:a6:19:c2:c5: 7b:5d:0b:13:cc:11:2f:1b:0c:6a:2d:b4:06:27:5b: b1:11:fa:b9:d0:64:db:2e:8a:86:07:ac:2f:d6:cf: d2:43:9b:62:aa:20:02:e1:50:cd:a3:ff:32:e3:35: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E6:FC:CB:3B:48:77:18:35:CF:5F:FB:E5:3E:83:7C:14:5E:C3:35 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b2:46:ee:c2:34:51:60:6d:2a:7e:bf:90:15:8b:4c:f0:ed: 65:59:9a:98:87:9e:b7:f2:a4:ac:af:7d:c8:79:ec:7b:a0:0e: 5d:a4:f8:8a:02:62:43:5b:da:20:e2:63:37:51:76:76:59:5d: 4e:64:40:ca:e0:3c:55:6e:d1:52:a4:4a:ac:bc:4c:b3:04:74: fe:28:85:92:f4:e7:98:eb:72:75:e0:c0:74:0a:07:b0:4f:87: 08:2c:b0:dc:6b:9f:57:e3:2f:10:3b:b2:dd:19:25:aa:14:54: 98:ed:b3:51:51:2a:f7:1a:33:03:0b:e1:b9:79:45:56:8f:60: 7b:12:d3:9b:3c:6c:4d:55:e0:7a:73:be:84:ad:64:02:16:4e: 72:04:1e:a6:64:65:e2:7c:9d:ec:d0:1f:7b:37:d0:bb:62:4e: 15:d1:44:50:ef:15:86:88:c8:cc:1b:ff:25:d3:62:d1:95:9f: ee:d7:50:18:9a:e2:33:02:fa:61:b4:26:d5:ea:85:b9:c4:9f: d0:bf:6b:3b:23:5d:eb:9a:af:73:0e:68:d0:e9:eb:ca:f4:6b: cf:4a:de:6c:f0:8e:26:57:2f:a3:4b:41:22:8e:55:3f:db:f5: 23:41:59:8f:91:ed:73:24:4f:46:b9:da:e4:9b:5f:69:ea:a2: 1b:2e:76:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjUwNDI2MTczMzUxWhcNMjUwNTAzMTczMzUxWjAYMRYwFAYD VQQDEw02ODBkMThmZi03MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBMrEeMvqYi6CkqyqgPISD7qOP1s5fiVqQGbJY3O5A7YTV3m87Px+/9uzNIC AcOqMLQ+ntlnVlLRiThFCzTceT0jLHZE2AwG1V/O/1VtycgycmWu/TBQVkCkW35l f+Y9jAh6e9lRJiPAc30EFtFdBTPXui4pDgltD1pN2w+azpQh28l1QRVehw1MftZj 4r1xIvBRZPxM8aqkcz20yNtV/SMpAMz2X9MntnHMUg4cAFVxws/BGpQc346xC9Zw 1NOjXOpDJGq5MF7u0u7jjqYZwsV7XQsTzBEvGwxqLbQGJ1uxEfq50GTbLoqGB6wv 1s/SQ5tiqiAC4VDNo/8y4zW03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvm/Ms7 SHcYNc9f++U+g3wUXsM1MB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgskbuwjRRYG0qfr+QFYtM8O1lWZqYh5638qSsr33Ieex7oA5dpPiK AmJDW9og4mM3UXZ2WV1OZEDK4DxVbtFSpEqsvEyzBHT+KIWS9OeY63J14MB0Cgew T4cILLDca59X4y8QO7LdGSWqFFSY7bNRUSr3GjMDC+G5eUVWj2B7EtObPGxNVeB6 c76ErWQCFk5yBB6mZGXifJ3s0B97N9C7Yk4V0URQ7xWGiMjMG/8l02LRlZ/u11AY muIzAvphtCbV6oW5xJ/Qv2s7I13rmq9zDmjQ6evK9GvPSt5s8I4mVy+jS0EijlU/ 2/UjQVmPke1zJE9Gudrkm19p6qIbLnYg -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:50 2025 by rpki-client on console.sobornost.net