$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: aw2Xk1jusMWfNVQaWBOAqdOqhn/NqlhVxOI9jrCbD2k= Subject key identifier: BC:B7:AF:08:83:BF:E7:9C:22:0C:57:7E:9D:7D:83:AE:7F:DE:6E:10 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 075A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0751 Signing time: Fri 18 Jul 2025 21:58:26 +0000 Manifest this update: Fri 18 Jul 2025 21:58:26 +0000 Manifest next update: Fri 25 Jul 2025 21:58:26 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: oYomwC3+UjpWStjiomRfLpa7/cpocA1lB9pLI2egjmM=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Jul 18 21:58:26 2025 GMT Not After : Jul 25 21:58:26 2025 GMT Subject: CN=687ac382-32f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:43:61:42:0d:a9:d9:f2:69:62:d7:98:4d: 40:4d:f4:f5:72:e1:8c:63:25:56:a7:ce:35:31:c5: 0a:7a:15:58:58:dd:4c:ac:ae:80:b0:56:57:82:ac: 3b:57:cf:a6:2c:86:3f:4a:9f:f5:80:6c:25:f6:c9: 4d:1a:35:84:57:ee:95:e5:48:83:e0:d6:18:1d:c3: 90:cc:69:de:80:82:1e:00:76:d7:06:94:ce:aa:3e: de:47:5c:43:27:b1:1c:f4:21:0f:34:13:6e:9d:43: f5:8b:94:28:be:34:5e:65:1f:b0:ff:ae:e1:33:bb: 1e:08:b3:8f:73:16:44:56:56:87:c1:fc:ae:43:ce: f2:bc:3c:ec:a6:68:40:08:d3:6f:f7:3c:48:88:f1: a3:0c:e6:8b:9b:52:79:c9:62:bb:62:88:f7:d0:5a: 39:ca:f9:bc:04:93:e1:19:57:0f:37:8d:ea:a1:94: 07:1c:11:70:49:7b:93:21:ab:55:70:50:e0:3a:f6: 73:bf:06:ac:6a:3f:c9:5b:ee:e4:8f:30:61:53:21: 26:90:7a:f5:50:f6:b9:b9:27:ae:ba:8e:b3:fa:50: 23:cf:c9:50:93:af:f5:e6:bd:83:68:83:1a:50:28: f8:a8:65:39:10:f8:30:d5:ab:ac:03:d8:56:29:06: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:AF:08:83:BF:E7:9C:22:0C:57:7E:9D:7D:83:AE:7F:DE:6E:10 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4b:4e:af:5a:cd:df:6b:bd:0a:2e:e7:f6:13:26:a3:77:11: 4d:cb:b3:4b:df:1b:62:73:cd:56:e5:6f:79:7c:55:f5:32:0d: 36:67:d8:48:86:e0:69:2b:ca:a8:cf:95:05:74:c9:df:c0:91: 08:97:2c:c6:12:d6:5e:d1:97:3f:fa:f2:16:07:12:86:f1:1e: 1c:62:34:fa:63:36:0a:70:46:1f:7b:a3:a9:dc:8b:f2:2c:c2: 43:7b:87:4a:74:3b:e2:3c:9c:8e:93:b3:34:e0:5b:ab:c7:09: 23:19:e5:b0:22:ce:a2:fa:b2:c2:ed:f4:e5:0e:33:69:cc:1a: cd:5f:b2:0a:94:19:4e:71:62:40:59:7b:b4:bb:c7:26:8b:0a: 50:c6:72:45:fc:44:dc:ca:97:c0:ce:df:f6:1e:35:a6:7d:9b: b2:43:d4:f5:71:79:0d:e5:32:b3:41:cb:72:75:69:ce:ef:9b: 4c:57:f5:51:78:46:d1:0b:eb:26:78:57:bb:70:c0:50:5f:14: 2e:b1:bf:11:f2:17:dd:f3:32:ca:2d:59:11:8e:01:46:27:d9: 55:e3:ca:8d:c7:8d:1c:40:fb:3e:9f:d3:8d:7a:1a:e5:9c:19: 71:ba:38:23:82:96:10:45:63:32:78:c5:e2:19:c1:17:71:dc: ce:04:40:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUwNzE4MjE1ODI2WhcNMjUwNzI1MjE1ODI2WjAYMRYwFAYD VQQDEw02ODdhYzM4Mi0zMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzlDYUINqdnyaWLXmE1ATfT1cuGMYyVWp841McUKehVYWN1MrK6AsFZXgqw7 V8+mLIY/Sp/1gGwl9slNGjWEV+6V5UiD4NYYHcOQzGnegIIeAHbXBpTOqj7eR1xD J7Ec9CEPNBNunUP1i5QovjReZR+w/67hM7seCLOPcxZEVlaHwfyuQ87yvDzspmhA CNNv9zxIiPGjDOaLm1J5yWK7Yoj30Fo5yvm8BJPhGVcPN43qoZQHHBFwSXuTIatV cFDgOvZzvwasaj/JW+7kjzBhUyEmkHr1UPa5uSeuuo6z+lAjz8lQk6/15r2DaIMa UCj4qGU5EPgw1ausA9hWKQb89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy3rwiD v+ecIgxXfp19g65/3m4QMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLS06vWs3fa70KLuf2EyajdxFNy7NL3xtic81W5W95fFX1Mg02Z9hI huBpK8qoz5UFdMnfwJEIlyzGEtZe0Zc/+vIWBxKG8R4cYjT6YzYKcEYfe6Op3Ivy LMJDe4dKdDviPJyOk7M04FurxwkjGeWwIs6i+rLC7fTlDjNpzBrNX7IKlBlOcWJA WXu0u8cmiwpQxnJF/ETcypfAzt/2HjWmfZuyQ9T1cXkN5TKzQctydWnO75tMV/VR eEbRC+smeFe7cMBQXxQusb8R8hfd8zLKLVkRjgFGJ9lV48qNx40cQPs+n9ONehrl nBlxujgjgpYQRWMyeMXiGcEXcdzOBEBV -----END CERTIFICATE-----Generated at Sun Jul 20 03:24:09 2025 by rpki-client