$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: HHP+3eDCgyWI/9arCV5RGv1W4DbJaVpI6UEqMar/nqY= Subject key identifier: 65:C6:69:27:F6:36:B0:76:13:F3:DB:65:69:07:3D:C3:7D:38:FB:E4 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 041B Signing time: Sun 27 Apr 2025 00:06:15 +0000 Manifest this update: Sun 27 Apr 2025 00:06:14 +0000 Manifest next update: Sun 04 May 2025 00:06:14 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: 0NjBzap/Sn+8YBZlnAeWpDndinrUwCSJuc1+7iFzKnc=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Apr 27 00:06:14 2025 GMT Not After : May 4 00:06:14 2025 GMT Subject: CN=680d74f6-3aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:ed:81:c3:0e:58:7c:8e:49:9a:a4:a1:34: a8:a4:70:f2:b1:8d:e4:50:6c:d7:d9:7c:99:c7:5b: 75:e9:a1:65:c0:52:da:51:4c:8e:e7:84:7f:78:20: 9e:79:fe:54:87:37:dc:fe:a1:09:0d:d3:0d:22:b6: 56:02:d7:68:93:4f:88:f7:78:80:e4:40:1b:44:b9: dd:c1:c3:ce:e3:90:78:04:e6:34:ed:5b:ae:ae:6b: 48:73:6e:62:33:23:7c:56:70:45:eb:5c:7c:a2:4b: e9:d6:fa:62:fa:a5:dc:75:59:78:2b:79:f0:ef:03: 7d:fd:80:c6:08:5a:b6:bb:c3:5a:92:62:99:0a:c6: fc:21:0d:91:68:bc:b9:9f:8e:d5:01:e5:b0:0a:e9: 58:42:d2:17:ba:eb:ec:22:1b:27:1d:d5:4b:1d:af: af:f3:f7:7d:20:d1:46:8c:85:4c:8f:e5:72:d6:0a: d3:f5:13:2f:9b:a9:45:bd:67:3e:fe:48:c8:84:8c: ee:6f:5b:fd:cf:79:8a:7a:9b:8a:87:f5:2e:1c:e0: 6a:98:12:a9:68:f9:8a:93:63:72:5a:5b:02:5b:3f: 0f:2c:e5:a1:c8:a9:59:eb:ee:a9:3f:53:96:f0:d4: 12:e4:64:b5:89:f4:2c:bd:f0:64:f6:4c:0d:d2:10: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:69:27:F6:36:B0:76:13:F3:DB:65:69:07:3D:C3:7D:38:FB:E4 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d7:ab:62:52:ce:e2:c0:b2:a5:1f:88:a0:05:0a:e7:3d:72: 0e:1a:1a:12:5a:3d:68:62:7d:61:83:20:37:9a:2b:1e:9c:64: bc:f2:73:ab:ce:41:6c:5d:0a:6d:a4:ea:48:f0:3d:39:aa:ef: cd:0c:9a:3a:b4:4e:b4:e5:c8:36:e4:4f:7f:c3:89:51:59:59: 8a:fe:66:85:ce:cf:e6:35:5e:5e:51:8f:b8:3f:9d:e5:cd:3a: 8b:ad:f8:ee:a5:9f:65:fe:6f:92:2a:8f:b6:10:cf:25:c0:23: 83:e2:cb:cf:ac:f5:f2:e6:f5:ba:13:7a:a7:c3:1a:69:35:41: b4:07:3a:49:62:97:01:9d:d3:49:09:17:ed:6c:45:15:3b:2a: ba:25:a2:ae:33:91:69:ec:09:46:4c:ec:e9:c1:99:90:77:19: b3:7f:45:e1:ff:2d:7a:14:ec:6e:e8:12:85:80:fe:52:a7:d8: ca:9b:30:4f:53:ac:4e:8a:04:f8:0a:6b:aa:93:43:1d:99:51: 5d:a6:92:b0:47:d9:00:54:d2:9b:a0:a2:f6:84:fc:3a:b4:1f: 1f:c0:7b:41:60:7e:af:37:64:94:68:01:e6:bf:b6:9f:4d:e1: 5c:96:ae:b1:cf:92:d7:bf:6c:7c:c0:1b:60:df:8d:e8:e3:28: fa:37:98:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNDI3MDAwNjE0WhcNMjUwNTA0MDAwNjE0WjAYMRYwFAYD VQQDEw02ODBkNzRmNi0zYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKDtgcMOWHyOSZqkoTSopHDysY3kUGzX2XyZx1t16aFlwFLaUUyO54R/eCCe ef5Uhzfc/qEJDdMNIrZWAtdok0+I93iA5EAbRLndwcPO45B4BOY07VuurmtIc25i MyN8VnBF61x8okvp1vpi+qXcdVl4K3nw7wN9/YDGCFq2u8NakmKZCsb8IQ2RaLy5 n47VAeWwCulYQtIXuuvsIhsnHdVLHa+v8/d9INFGjIVMj+Vy1grT9RMvm6lFvWc+ /kjIhIzub1v9z3mKepuKh/UuHOBqmBKpaPmKk2NyWlsCWz8PLOWhyKlZ6+6pP1OW 8NQS5GS1ifQsvfBk9kwN0hDTEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXGaSf2 NrB2E/PbZWkHPcN9OPvkMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi16tiUs7iwLKlH4igBQrnPXIOGhoSWj1oYn1hgyA3misenGS88nOr zkFsXQptpOpI8D05qu/NDJo6tE605cg25E9/w4lRWVmK/maFzs/mNV5eUY+4P53l zTqLrfjupZ9l/m+SKo+2EM8lwCOD4svPrPXy5vW6E3qnwxppNUG0BzpJYpcBndNJ CRftbEUVOyq6JaKuM5Fp7AlGTOzpwZmQdxmzf0Xh/y16FOxu6BKFgP5Sp9jKmzBP U6xOigT4Cmuqk0MdmVFdppKwR9kAVNKboKL2hPw6tB8fwHtBYH6vN2SUaAHmv7af TeFclq6xz5LXv2x8wBtg343o4yj6N5gs -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net