$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: l5jx9+WUVgwzYUwI6ULEtZ2hmzQTvgf1yHweJRG4zIg= Subject key identifier: FE:F9:F2:0D:CC:EE:95:C4:20:5B:3E:25:9D:51:F6:47:A9:84:6C:6D Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B4B Signing time: Mon 28 Apr 2025 19:31:49 +0000 Manifest this update: Mon 28 Apr 2025 19:31:49 +0000 Manifest next update: Mon 05 May 2025 19:31:49 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: 68MdxCd2QriVuqI+1aqMjz9kAYOOyH4SiumRIIAHiek=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Apr 28 19:31:49 2025 GMT Not After : May 5 19:31:49 2025 GMT Subject: CN=680fd7a5-4a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:ca:b3:85:94:81:94:6e:d2:b9:0f:6f:cb: 8b:ea:c4:d7:60:9f:14:0e:53:15:94:87:b3:b6:34: 3f:fe:0f:6f:68:ad:07:86:41:de:06:8a:93:31:73: 06:06:49:a0:9c:74:f0:64:f3:cf:8b:bd:cf:2c:03: 1b:4e:55:ed:20:86:8c:72:0a:81:bb:86:37:87:60: 96:da:8a:cc:79:15:fb:04:ca:a4:0f:32:cc:06:98: 3b:c5:f6:5c:8b:63:1d:9d:a9:84:2c:bf:c3:a9:9d: 9c:ba:17:e4:5b:e9:82:01:dd:48:f2:c3:a0:f7:61: 8e:a8:f9:14:95:17:5b:06:e0:e9:99:82:12:4c:14: 64:c4:95:fd:05:ae:2f:79:3f:20:e2:80:58:da:c1: d3:8a:f7:4a:52:21:51:9a:81:15:be:1d:0d:33:15: de:7b:ed:bf:2e:8c:fc:00:34:43:47:5f:5f:c0:cb: 2e:57:cb:85:37:c4:fe:18:19:45:52:8e:d4:a4:25: de:1c:78:12:7a:28:4e:28:3b:f4:be:70:ff:97:1e: 00:58:9a:b3:de:e6:15:02:c8:d5:fc:61:58:3a:4f: 42:8b:09:f9:40:16:82:74:72:72:d6:40:98:72:f0: d9:f4:02:4c:48:c8:39:0f:83:f1:bf:6b:b2:25:24: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F9:F2:0D:CC:EE:95:C4:20:5B:3E:25:9D:51:F6:47:A9:84:6C:6D X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:42:38:88:7c:cf:0d:7d:06:19:8f:80:60:93:a8:e6:f7:a2: 8f:27:52:a6:78:e1:ad:6c:b2:90:b9:6f:14:d5:7c:4d:a0:dd: 00:a3:f6:0b:b9:b0:c5:d2:31:40:43:c8:89:39:82:3e:43:bb: 69:d9:ec:38:3e:7d:57:ab:e4:b3:2a:64:30:5e:9a:fc:06:ad: 09:f4:ac:a8:e1:9c:45:f4:77:7b:56:83:65:9a:be:7b:5c:f8: c7:98:eb:18:f7:53:4a:08:01:d4:cd:6b:2a:16:e4:82:97:1e: 49:60:31:95:bc:42:b7:24:ff:09:50:ad:c8:9f:63:27:7f:e0: 88:f5:b4:85:1f:c5:60:73:5f:e2:05:1d:a5:ad:e6:57:83:89: 87:28:da:0a:2d:09:b3:1b:7e:f3:2c:b5:be:7c:e8:cc:c6:95: c5:05:d7:d4:38:82:d7:55:67:76:67:f7:59:e7:b4:fe:2c:d2: cb:c8:44:aa:1e:3e:26:4d:c1:14:0d:9c:c1:ae:6b:1d:c9:d8: f5:43:5d:e1:60:cf:de:30:b3:db:58:a2:74:48:4f:b3:52:0a: 36:5a:98:33:78:5e:5e:92:82:43:c7:c1:e2:54:ff:e9:fd:cf: 18:1a:c9:35:2e:7b:39:ef:7c:5a:5d:11:fc:e0:88:94:4d:88: c8:5c:fc:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwNDI4MTkzMTQ5WhcNMjUwNTA1MTkzMTQ5WjAYMRYwFAYD VQQDEw02ODBmZDdhNS00YTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4PKs4WUgZRu0rkPb8uL6sTXYJ8UDlMVlIeztjQ//g9vaK0HhkHeBoqTMXMG BkmgnHTwZPPPi73PLAMbTlXtIIaMcgqBu4Y3h2CW2orMeRX7BMqkDzLMBpg7xfZc i2MdnamELL/DqZ2cuhfkW+mCAd1I8sOg92GOqPkUlRdbBuDpmYISTBRkxJX9Ba4v eT8g4oBY2sHTivdKUiFRmoEVvh0NMxXee+2/Loz8ADRDR19fwMsuV8uFN8T+GBlF Uo7UpCXeHHgSeihOKDv0vnD/lx4AWJqz3uYVAsjV/GFYOk9Ciwn5QBaCdHJy1kCY cvDZ9AJMSMg5D4Pxv2uyJSQ1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP758g3M 7pXEIFs+JZ1R9kephGxtMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQjiIfM8NfQYZj4Bgk6jm96KPJ1KmeOGtbLKQuW8U1XxNoN0Ao/YL ubDF0jFAQ8iJOYI+Q7tp2ew4Pn1Xq+SzKmQwXpr8Bq0J9Kyo4ZxF9Hd7VoNlmr57 XPjHmOsY91NKCAHUzWsqFuSClx5JYDGVvEK3JP8JUK3In2Mnf+CI9bSFH8Vgc1/i BR2lreZXg4mHKNoKLQmzG37zLLW+fOjMxpXFBdfUOILXVWd2Z/dZ57T+LNLLyESq Hj4mTcEUDZzBrmsdydj1Q13hYM/eMLPbWKJ0SE+zUgo2WpgzeF5ekoJDx8HiVP/p /c8YGsk1Lns573xaXRH84IiUTYjIXPyy -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:54 2025 by rpki-client on console.sobornost.net