$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: QyqetN8FmguhT6sx7F9h8qQ6APTo4t+KYlW3RLTYGC4= Subject key identifier: 94:23:59:4D:3A:FC:40:55:EA:9B:76:A1:86:67:3B:52:F0:39:80:E0 Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 1900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 18D6 Signing time: Sun 20 Jul 2025 16:30:54 +0000 Manifest this update: Sun 20 Jul 2025 16:30:53 +0000 Manifest next update: Sun 27 Jul 2025 16:30:53 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: 5ZeKfCjKRYira1PFJYznJAuXDO31+g1QUzFa1O/Skfw=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8=) 3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: irpR0h3jscaijLl59Cc3m/8UUXHvczEBFVSowrAT4Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6400 (0x1900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: Jul 20 16:30:53 2025 GMT Not After : Jul 27 16:30:53 2025 GMT Subject: CN=687d19bd-a0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:ae:bb:71:09:02:48:52:c4:f0:f9:55:cc: 40:81:0f:7a:b1:a6:9e:d8:60:cc:31:ca:57:90:c7: bc:f2:f3:fe:2f:ac:99:9f:d9:4d:ce:90:f4:0a:eb: d9:cb:54:a2:8c:31:de:67:b5:00:26:b7:8d:1f:48: 7e:73:71:5d:d7:62:89:3a:4e:7a:27:8e:22:77:23: 2f:45:83:ed:28:fe:cd:bd:00:0e:bc:95:e2:bf:ca: 96:9d:29:2a:97:84:57:28:b6:90:4e:34:9e:17:e8: bd:b0:6d:62:1d:9b:c3:0e:31:54:80:ea:43:e2:6d: d8:d2:99:75:d5:3a:d5:38:9c:55:2b:6b:7b:b3:00: d7:7f:58:cb:c3:e5:56:8d:ca:fa:2a:9a:69:cf:ae: 38:9d:5d:36:af:f9:39:65:33:00:cf:f5:1d:d6:90: ed:e7:78:7b:ae:5a:2d:6c:92:52:85:4d:65:9f:3c: dd:44:8a:6c:7b:b0:3a:99:f1:b4:e3:3e:d1:ca:8d: 78:11:08:8a:a3:47:87:a4:a9:66:8d:b4:7d:50:c2: 67:35:bf:c8:ff:07:d6:55:0f:77:3e:fa:3c:2d:60: f9:a7:6c:19:c3:7e:6b:d3:ea:c1:5d:32:b8:04:cf: 96:59:fe:31:69:54:06:9f:57:00:26:40:da:4b:fa: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:23:59:4D:3A:FC:40:55:EA:9B:76:A1:86:67:3B:52:F0:39:80:E0 X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:48:1c:eb:bc:ed:21:fd:75:54:05:77:d2:3e:74:41:2f:7e: ff:9f:c9:b8:3f:a9:fd:23:5b:af:1b:20:df:7b:3a:fb:d0:b7: b1:6e:1b:c4:50:b8:c3:b1:3f:13:a1:b4:a9:bd:85:bb:39:9f: 20:13:19:df:a0:16:39:c8:5f:ae:75:e9:ca:6a:db:1d:7b:e8: 1f:cd:a4:f6:0f:05:9b:01:d2:2e:01:d4:c3:ff:ec:7d:28:37: 80:64:5d:89:99:9c:0e:f6:ea:e8:2a:7e:f6:3f:73:00:67:fe: df:aa:83:6b:2d:78:fb:0b:a7:db:ff:ac:4f:8d:05:0d:b6:5e: 3b:69:db:93:a5:96:25:8d:d1:38:28:ea:07:48:05:1b:9c:04: 21:38:a3:65:21:f4:69:ad:97:50:55:d5:2c:15:33:13:f9:48: 93:13:05:e8:a7:7c:3f:5c:7a:47:94:c9:37:47:47:8b:f6:97: f1:3a:86:cf:40:5e:2c:ce:04:1c:d9:51:88:0f:6c:b7:47:6b: 53:b8:57:a4:34:29:b4:f8:c7:0f:8e:be:b7:c2:8e:05:59:88: 3d:8c:35:d7:8d:2b:1b:2a:21:d0:a1:c7:35:3c:65:92:be:4d: 5a:bd:e1:9c:30:20:6b:c1:80:b2:a9:9b:ed:ce:bd:38:73:c1: f3:c7:1e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjUwNzIwMTYzMDUzWhcNMjUwNzI3MTYzMDUzWjAYMRYwFAYD VQQDEw02ODdkMTliZC1hMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdmuu3EJAkhSxPD5VcxAgQ96saae2GDMMcpXkMe88vP+L6yZn9lNzpD0CuvZ y1SijDHeZ7UAJreNH0h+c3Fd12KJOk56J44idyMvRYPtKP7NvQAOvJXiv8qWnSkq l4RXKLaQTjSeF+i9sG1iHZvDDjFUgOpD4m3Y0pl11TrVOJxVK2t7swDXf1jLw+VW jcr6Kpppz644nV02r/k5ZTMAz/Ud1pDt53h7rlotbJJShU1lnzzdRIpse7A6mfG0 4z7Ryo14EQiKo0eHpKlmjbR9UMJnNb/I/wfWVQ93Pvo8LWD5p2wZw35r0+rBXTK4 BM+WWf4xaVQGn1cAJkDaS/oXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQjWU06 /EBV6pt2oYZnO1LwOYDgMB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClSBzrvO0h/XVUBXfSPnRBL37/n8m4P6n9I1uvGyDfezr70LexbhvE ULjDsT8TobSpvYW7OZ8gExnfoBY5yF+udenKatsde+gfzaT2DwWbAdIuAdTD/+x9 KDeAZF2JmZwO9uroKn72P3MAZ/7fqoNrLXj7C6fb/6xPjQUNtl47aduTpZYljdE4 KOoHSAUbnAQhOKNlIfRprZdQVdUsFTMT+UiTEwXop3w/XHpHlMk3R0eL9pfxOobP QF4szgQc2VGID2y3R2tTuFekNCm0+McPjr63wo4FWYg9jDXXjSsbKiHQocc1PGWS vk1aveGcMCBrwYCyqZvtzr04c8Hzxx4a -----END CERTIFICATE-----Generated at Tue Jul 22 00:01:24 2025 by rpki-client