$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: PqpqGMWUUqtU6FdP+kLRxzvg534WDQLETWAUEJRb+ho= Subject key identifier: CB:2C:05:B2:33:AB:7D:18:34:2B:DE:55:12:F8:9B:FA:00:87:A7:D5 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2DF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2DE6 Signing time: Mon 28 Apr 2025 15:34:47 +0000 Manifest this update: Mon 28 Apr 2025 15:34:46 +0000 Manifest next update: Mon 05 May 2025 15:34:46 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: /UHYD/M1wWtR7+ww2gTYgOlUmmTskBTcrB2sNYdNW28=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11763 (0x2df3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Apr 28 15:34:46 2025 GMT Not After : May 5 15:34:46 2025 GMT Subject: CN=680fa017-30af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:8d:93:b1:97:b5:42:cc:08:9e:34:8a:72: 67:52:3b:73:81:b9:e5:2f:83:27:47:18:b4:06:e2: dd:c7:8e:71:87:b5:3f:7c:b7:31:6d:0c:02:0d:a9: 44:2c:a4:60:f8:5e:0a:60:18:10:a6:d6:a8:03:2e: e3:a1:70:b0:7d:09:69:2f:25:60:ac:e4:59:48:0d: 49:13:ca:e6:6b:f8:ee:dd:79:22:ff:1b:a1:ed:5f: 9c:86:d4:ea:1c:47:fe:a3:d3:03:65:2a:a9:74:76: 70:ec:12:ca:68:b4:9e:58:03:b9:64:0b:72:07:a5: c8:c6:99:45:33:2e:88:4c:49:27:f3:f0:f5:83:75: 2a:79:68:9d:c2:8c:1b:ea:5c:ad:94:fb:35:8b:b1: 53:e3:c1:61:33:b0:be:c5:1a:57:bd:41:5d:5b:47: d7:62:0f:39:50:b3:a6:50:a2:76:6c:e1:51:32:d8: a2:c2:89:c4:3d:69:a9:89:36:44:ff:74:36:62:c1: 9d:fb:34:90:22:6f:be:b1:34:20:7b:c2:01:5b:2f: cb:e0:51:d4:97:58:26:c3:56:43:1e:ac:81:17:3d: 3c:34:99:48:45:e5:a9:03:1e:fb:22:e7:c9:76:76: d3:30:fc:4e:b5:fe:c7:c8:f1:ca:08:7e:3c:0f:d9: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:05:B2:33:AB:7D:18:34:2B:DE:55:12:F8:9B:FA:00:87:A7:D5 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1e:65:d2:ae:7b:59:e7:af:9f:b1:f9:50:84:60:a9:6e:b8: bd:8d:71:42:db:51:e8:03:46:a8:9f:27:7c:1e:10:0d:94:d5: 7f:a9:d0:70:49:14:59:08:7b:e1:05:20:93:80:8f:df:87:51: 58:80:ba:c6:ad:2d:52:03:3c:9b:12:53:4c:8e:3e:2c:d3:67: 82:f8:87:48:54:df:08:1e:9f:4f:df:26:63:ca:e2:26:54:21: 08:10:3f:af:36:99:58:d1:c8:97:d8:48:88:99:99:9d:ed:d7: 5c:4c:c7:69:8b:61:95:2f:b5:10:f4:a7:f4:fa:c7:53:86:5a: 66:30:68:0d:80:1c:a0:eb:90:4c:ed:4f:aa:d0:73:ee:82:16: ff:6a:ae:2e:4f:b3:78:f4:8b:5d:39:65:5a:2e:bd:77:8b:cb: 4a:ef:4e:e7:8b:e1:45:b1:6c:f6:6d:92:0a:79:c5:1a:b2:ab: b8:fc:d9:48:a8:34:57:a6:fc:78:54:15:d4:9e:d7:5b:2f:5f: fc:de:0c:17:7b:05:5e:4c:7a:f6:eb:ca:8c:fe:1f:73:aa:71: 50:bf:30:2a:10:d3:66:10:90:d7:ba:bf:7b:76:37:fe:56:ad: 88:43:59:9e:5b:47:5c:a7:93:b3:64:78:72:84:50:6f:ab:b8: d3:24:7c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwNDI4MTUzNDQ2WhcNMjUwNTA1MTUzNDQ2WjAYMRYwFAYD VQQDEw02ODBmYTAxNy0zMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUWNk7GXtULMCJ40inJnUjtzgbnlL4MnRxi0BuLdx45xh7U/fLcxbQwCDalE LKRg+F4KYBgQptaoAy7joXCwfQlpLyVgrORZSA1JE8rma/ju3Xki/xuh7V+chtTq HEf+o9MDZSqpdHZw7BLKaLSeWAO5ZAtyB6XIxplFMy6ITEkn8/D1g3UqeWidwowb 6lytlPs1i7FT48FhM7C+xRpXvUFdW0fXYg85ULOmUKJ2bOFRMtiiwonEPWmpiTZE /3Q2YsGd+zSQIm++sTQge8IBWy/L4FHUl1gmw1ZDHqyBFz08NJlIReWpAx77IufJ dnbTMPxOtf7HyPHKCH48D9lcQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMssBbIz q30YNCveVRL4m/oAh6fVMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApHmXSrntZ56+fsflQhGCpbri9jXFC21HoA0aonyd8HhANlNV/qdBw SRRZCHvhBSCTgI/fh1FYgLrGrS1SAzybElNMjj4s02eC+IdIVN8IHp9P3yZjyuIm VCEIED+vNplY0ciX2EiImZmd7ddcTMdpi2GVL7UQ9Kf0+sdThlpmMGgNgByg65BM 7U+q0HPughb/aq4uT7N49ItdOWVaLr13i8tK707ni+FFsWz2bZIKecUasqu4/NlI qDRXpvx4VBXUntdbL1/83gwXewVeTHr268qM/h9zqnFQvzAqENNmEJDXur97djf+ Vq2IQ1meW0dcp5OzZHhyhFBvq7jTJHwK -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:06 2025 by rpki-client on console.sobornost.net