$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: BMj0szBw+Un/n7oPjD59Zzh2grqTVNor3m3N3QuMcsM= Subject key identifier: 6F:B5:BF:D2:00:B5:DE:BC:14:13:AB:A7:76:B8:6B:1F:4E:03:74:DB Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0771 Signing time: Thu 18 Sep 2025 21:52:13 +0000 Manifest this update: Thu 18 Sep 2025 21:52:13 +0000 Manifest next update: Thu 25 Sep 2025 21:52:13 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: 0o/ERfqlKg7yBvSc56a0puV/EGjJWkVubBOnhQbd0GI=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Sep 18 21:52:13 2025 GMT Not After : Sep 25 21:52:13 2025 GMT Subject: CN=68cc7f0d-3a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:50:85:9b:a2:88:0c:39:31:19:76:6d:20: c6:5f:0e:ff:7f:17:38:a7:9d:9d:c0:9d:58:48:aa: 18:95:da:ce:10:80:a3:70:20:bc:9a:2c:e6:78:c9: d1:0e:ec:60:76:a4:7c:44:41:df:4d:37:06:df:03: a2:a5:f3:95:52:8d:1b:98:5e:cc:90:38:0a:e4:af: f4:f9:19:bf:6d:0d:7a:1c:e1:49:8f:bc:10:f7:5d: fe:e1:35:81:f9:d1:32:8f:29:b1:58:d7:4a:37:ab: 00:98:24:54:bf:b8:80:d9:71:27:fd:49:a2:66:79: 77:3f:1c:cd:ff:6a:07:70:96:a8:e4:17:15:90:9b: 66:0c:a0:86:2e:17:ce:22:d1:91:aa:8c:9b:30:a8: ec:47:5d:f4:cf:bc:bf:70:99:87:c1:24:de:2e:e5: 16:a0:8a:4e:9f:f8:1b:50:3d:73:63:86:d2:37:f8: 64:c1:62:e8:c3:93:5e:ca:27:cd:96:da:a6:d0:c1: 15:f4:a2:82:47:e5:35:18:8e:18:3e:e3:0a:4e:87: 0a:4f:d6:7b:b3:8e:84:6f:8b:2f:60:5a:2b:c3:37: c3:61:b5:fc:9b:dc:56:db:d3:f8:3e:9d:42:94:d0: 3a:62:8b:10:f2:41:18:b4:74:e7:e3:d3:52:35:89: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:BF:D2:00:B5:DE:BC:14:13:AB:A7:76:B8:6B:1F:4E:03:74:DB X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:52:40:aa:46:a2:d1:9d:72:b7:cd:3b:16:05:59:fc:85:21: eb:b1:78:b5:26:28:f5:a0:36:4b:79:b2:c2:a2:60:2d:0b:39: 2e:16:a3:d6:c2:69:b2:85:c8:c7:a9:3f:be:4b:0d:7e:38:c2: 57:fc:11:cc:28:e9:48:48:13:1c:09:0f:18:62:f5:fe:94:e9: f1:10:8f:2a:fd:b9:fe:a7:f7:30:ac:86:46:86:18:cf:2a:9d: 95:7e:3a:df:46:45:85:37:6d:ef:a9:12:30:6e:39:0d:fe:03: 43:11:e5:70:23:51:40:dc:32:f7:5c:c3:51:4f:3f:e2:fc:21: 7b:41:70:ab:20:8b:29:b0:b0:85:c6:d2:69:28:f1:63:e7:2e: 05:a2:08:4b:52:e4:f2:ef:c4:4a:3b:bc:16:03:9e:6b:2f:f7: 87:ce:c9:04:fd:33:ce:a8:e7:cd:6d:29:27:36:bf:2a:22:bc: a2:56:f4:3a:16:e4:f3:83:46:8e:6c:e6:4d:e5:33:9b:fb:35: 08:48:f5:3b:e6:db:66:91:05:4b:dd:6e:73:77:5d:23:cf:b8: d0:96:63:6a:23:09:e9:41:95:d9:a0:91:98:0e:ff:d1:87:57: b3:33:be:bb:75:7a:27:6f:52:20:cf:23:39:ea:d2:bc:18:0a: 95:d7:2c:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUwOTE4MjE1MjEzWhcNMjUwOTI1MjE1MjEzWjAYMRYwFAYD VQQDEw02OGNjN2YwZC0zYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSFQhZuiiAw5MRl2bSDGXw7/fxc4p52dwJ1YSKoYldrOEICjcCC8mizmeMnR DuxgdqR8REHfTTcG3wOipfOVUo0bmF7MkDgK5K/0+Rm/bQ16HOFJj7wQ913+4TWB +dEyjymxWNdKN6sAmCRUv7iA2XEn/UmiZnl3PxzN/2oHcJao5BcVkJtmDKCGLhfO ItGRqoybMKjsR130z7y/cJmHwSTeLuUWoIpOn/gbUD1zY4bSN/hkwWLow5NeyifN ltqm0MEV9KKCR+U1GI4YPuMKTocKT9Z7s46Eb4svYForwzfDYbX8m9xW29P4Pp1C lNA6YosQ8kEYtHTn49NSNYn1JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+1v9IA td68FBOrp3a4ax9OA3TbMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASUkCqRqLRnXK3zTsWBVn8hSHrsXi1Jij1oDZLebLComAtCzkuFqPW wmmyhcjHqT++Sw1+OMJX/BHMKOlISBMcCQ8YYvX+lOnxEI8q/bn+p/cwrIZGhhjP Kp2VfjrfRkWFN23vqRIwbjkN/gNDEeVwI1FA3DL3XMNRTz/i/CF7QXCrIIspsLCF xtJpKPFj5y4FoghLUuTy78RKO7wWA55rL/eHzskE/TPOqOfNbSknNr8qIryiVvQ6 FuTzg0aObOZN5TOb+zUISPU75ttmkQVL3W5zd10jz7jQlmNqIwnpQZXZoJGYDv/R h1ezM767dXonb1IgzyM56tK8GAqV1yzJ -----END CERTIFICATE-----Generated at Fri Sep 19 10:48:59 2025 by rpki-client