$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: 8PNshpybBQ1wXV7638q8deCUJeklCUxJnbXN23ITn3s= Subject key identifier: E1:DF:FB:51:16:61:46:CB:D4:05:A6:31:7C:AA:EE:32:F6:05:C6:18 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 129B Signing time: Mon 28 Apr 2025 17:18:26 +0000 Manifest this update: Mon 28 Apr 2025 17:18:25 +0000 Manifest next update: Mon 05 May 2025 17:18:25 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: X4F/jTKtD39VFsoL65u15TaYesXcom0NA0zYkSfU+bc=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: HkQW1ELmD+iLXWXgNsuJGsFujvrmVSrBFXmyCQkIzxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4772 (0x12a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Apr 28 17:18:25 2025 GMT Not After : May 5 17:18:25 2025 GMT Subject: CN=680fb861-1c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:0b:1d:f2:a5:65:f6:eb:ab:2c:a8:08:91: c8:4d:78:ea:7c:36:76:bf:ff:1d:e2:0d:9f:f8:e6: d7:2a:55:b5:84:13:f9:e5:97:dc:87:03:04:1e:0c: cd:0e:25:90:c6:ce:08:88:f7:f6:cc:07:0e:30:a4: 35:78:da:e4:9d:79:7f:7f:af:e8:9d:ab:24:26:27: 6b:a0:4e:80:82:eb:52:24:b8:10:ba:d6:fb:73:85: c3:6d:38:c3:40:2f:f4:f3:de:52:78:ce:d4:3b:08: ce:23:40:40:76:06:81:fe:41:aa:fa:d5:41:16:8d: 3e:ee:1b:20:5c:cd:6c:02:d3:c9:7c:90:84:9d:ef: 9e:24:6f:03:7c:29:5a:75:48:7d:63:06:6f:83:57: 47:92:05:e8:bd:5f:48:62:36:f4:9f:05:54:34:7e: 1a:44:cc:ee:18:b5:fd:04:ee:9b:24:ff:f1:35:b2: 82:08:42:4a:48:95:52:63:5d:7d:ad:fe:23:d2:92: 8d:fa:85:48:92:de:85:c4:8c:b1:b5:34:ae:55:31: 27:67:7e:92:f8:d5:e2:6d:f6:4d:c5:24:95:b3:b8: e7:7a:9f:cf:ab:40:35:38:45:4e:a5:c0:4a:e4:4c: 5e:12:67:17:9f:24:0a:e7:87:cb:c0:78:ce:5c:79: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DF:FB:51:16:61:46:CB:D4:05:A6:31:7C:AA:EE:32:F6:05:C6:18 X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:26:fa:06:cb:58:17:47:86:70:79:ee:44:a0:b5:7b:8b:c5: 8e:65:05:1f:1b:40:8a:5d:4e:01:dc:ba:84:51:43:29:46:21: e0:be:18:be:c3:fb:ca:03:62:14:f1:95:b3:e9:b0:95:4e:83: 5d:ef:2f:c8:db:a8:aa:ce:e5:6a:79:40:1a:3a:f3:a0:d2:7c: a9:30:be:8f:0b:92:8d:69:43:45:0e:8e:71:b9:db:63:b0:8a: 31:9a:3b:c6:d1:3a:85:f9:fa:62:c8:00:95:0e:e7:8f:2f:98: 6c:e6:f1:9a:6f:b1:c7:0e:9e:5a:5e:49:a7:ab:24:30:03:71: 1d:14:a9:59:b1:f7:0c:73:28:f8:21:ac:5c:ce:8f:07:90:08: 51:bc:54:ee:b5:c0:b5:28:aa:55:e6:8f:13:d1:e5:d7:b8:8a: 20:e1:08:c9:23:58:7e:ca:0a:83:59:67:8f:fa:78:35:0c:94: 10:fb:d7:2c:b9:e8:aa:22:08:db:b3:a8:65:a0:30:8a:e3:c7: 55:e7:5d:4d:db:15:41:fc:52:1e:30:27:24:18:68:11:91:80: 6c:d0:4b:ef:2e:92:41:18:47:05:23:45:f1:87:91:74:40:12: 19:0d:ab:e6:a2:c3:80:7a:6f:8d:cb:dc:2c:1a:59:56:6b:aa: 27:7c:c1:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwNDI4MTcxODI1WhcNMjUwNTA1MTcxODI1WjAYMRYwFAYD VQQDEw02ODBmYjg2MS0xYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iMLHfKlZfbrqyyoCJHITXjqfDZ2v/8d4g2f+ObXKlW1hBP55ZfchwMEHgzN DiWQxs4IiPf2zAcOMKQ1eNrknXl/f6/onaskJidroE6AgutSJLgQutb7c4XDbTjD QC/0895SeM7UOwjOI0BAdgaB/kGq+tVBFo0+7hsgXM1sAtPJfJCEne+eJG8DfCla dUh9YwZvg1dHkgXovV9IYjb0nwVUNH4aRMzuGLX9BO6bJP/xNbKCCEJKSJVSY119 rf4j0pKN+oVIkt6FxIyxtTSuVTEnZ36S+NXibfZNxSSVs7jnep/Pq0A1OEVOpcBK 5ExeEmcXnyQK54fLwHjOXHlWZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHf+1EW YUbL1AWmMXyq7jL2BcYYMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcJvoGy1gXR4Zwee5EoLV7i8WOZQUfG0CKXU4B3LqEUUMpRiHgvhi+ w/vKA2IU8ZWz6bCVToNd7y/I26iqzuVqeUAaOvOg0nypML6PC5KNaUNFDo5xudtj sIoxmjvG0TqF+fpiyACVDuePL5hs5vGab7HHDp5aXkmnqyQwA3EdFKlZsfcMcyj4 Iaxczo8HkAhRvFTutcC1KKpV5o8T0eXXuIog4QjJI1h+ygqDWWeP+ng1DJQQ+9cs ueiqIgjbs6hloDCK48dV511N2xVB/FIeMCckGGgRkYBs0EvvLpJBGEcFI0Xxh5F0 QBIZDavmosOAem+Ny9wsGllWa6onfMG4 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:42 2025 by rpki-client on console.sobornost.net