$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json) Hash identifier: yFW/FmvaTp2BE/GTTI7om/2XtALymmIegb8ViSCkzrg= Subject key identifier: 2A:CC:EC:01:B6:06:D6:F6:DE:AC:F9:E5:DD:3E:A6:13:25:75:F7:D1 Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft Manifest number: 0806 Signing time: Tue 16 Sep 2025 21:09:34 +0000 Manifest this update: Tue 16 Sep 2025 21:09:34 +0000 Manifest next update: Tue 23 Sep 2025 21:09:34 +0000 Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: 0VLB9Zyf0eTD1F2zp56KQTMMlUmXiCJKMRtHNv3b9k4=) 2: 6944587246B311F090CDB927C4F9AE02.roa (hash: N5DJ/lWFfI48sdx6BvFVpFHkaPP8kCCAOxZfmLMaFUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Validity Not Before: Sep 16 21:09:34 2025 GMT Not After : Sep 23 21:09:34 2025 GMT Subject: CN=68c9d20e-d8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:90:14:07:2a:94:32:c8:f4:66:ff:2c:eb: d4:75:35:4b:0c:16:41:fd:fa:7d:48:64:86:50:7b: d7:b2:ed:33:f1:f9:be:55:d2:60:b4:40:86:0d:85: 4b:12:0e:c8:d8:f1:92:82:a3:af:2c:75:62:a4:0a: 3f:e5:d8:ad:68:17:c5:67:2f:32:90:58:9e:52:9f: 14:bc:94:d7:e2:43:30:04:bc:d7:5b:e9:10:c1:8d: 77:15:14:37:71:1b:42:4e:36:15:e9:5e:f5:6a:a7: 79:89:3e:f9:54:45:9f:a5:9b:05:94:11:f4:41:28: 49:ef:b7:87:40:f1:71:0b:ee:fc:6e:91:9f:2c:32: 0c:29:2b:6e:98:79:86:2c:95:84:50:b7:22:4d:92: b9:cc:0d:99:c4:ff:0d:76:2f:41:92:3d:e9:4f:5d: b4:33:a0:91:27:ba:a0:c0:15:03:bd:ba:81:e3:02: 26:aa:ff:67:be:08:99:d7:71:de:e3:81:c9:6b:7f: 72:9c:cd:e2:e4:b3:8a:9d:d3:e7:c0:63:1a:d5:c3: 66:85:50:01:bc:33:05:a2:82:49:10:f4:1a:8d:82: d8:ce:53:79:e1:52:a3:c2:f4:f3:8d:5a:d6:3e:06: c6:55:65:c5:f1:a4:eb:9b:d8:40:16:11:94:81:69: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CC:EC:01:B6:06:D6:F6:DE:AC:F9:E5:DD:3E:A6:13:25:75:F7:D1 X509v3 Authority Key Identifier: keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:95:19:c5:47:0a:3a:36:31:0f:ef:3b:89:40:f9:d6:24:37: f0:11:d1:c6:e5:c8:64:21:64:15:a9:75:33:87:31:1b:bd:23: 21:56:35:6d:75:00:c7:ee:a7:ec:1d:f7:de:c7:03:ca:95:dc: 11:95:34:a3:90:a3:06:e9:be:f0:1c:f9:a0:4e:db:fc:1a:7c: 66:7b:a5:50:87:89:95:c4:69:89:19:2a:10:c1:06:15:b0:91: e6:47:29:ab:e4:9e:7e:68:ec:59:48:b2:63:4d:bb:ac:da:2b: cd:1f:e0:3e:34:7c:9b:23:ae:c7:99:ca:11:5c:8f:61:ef:e1: 53:48:cd:de:f1:ea:08:68:39:47:84:65:e7:15:68:6f:84:39: 7d:6b:b9:ae:2e:bc:cf:61:80:08:80:2c:aa:d0:48:7f:40:73: cc:05:e9:84:5b:c8:f7:f7:14:de:6a:7e:d7:e3:51:93:93:f6: 90:fe:1a:ad:bc:9a:de:2a:55:d4:c5:7f:ed:41:0f:1f:ee:54: 17:b8:e6:0b:6f:5f:82:0d:ef:6f:6f:95:a9:d7:ca:3e:13:08: f6:7f:a0:13:e2:f4:0e:31:8f:16:86:8c:97:d7:3a:da:5a:8c: 7a:32:79:c4:46:a6:68:72:51:00:ea:76:64:1d:9d:a5:f6:d7: 27:50:02:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIzRTQxMTAvBgNVBAUTKDQwMTRCQ0I0QUY5QjE4MTk2NEQ3QjdBNDBEMUJGOUQ2 Rjg5RTA4RkYwHhcNMjUwOTE2MjEwOTM0WhcNMjUwOTIzMjEwOTM0WjAYMRYwFAYD VQQDEw02OGM5ZDIwZS1kOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtCQFAcqlDLI9Gb/LOvUdTVLDBZB/fp9SGSGUHvXsu0z8fm+VdJgtECGDYVL Eg7I2PGSgqOvLHVipAo/5ditaBfFZy8ykFieUp8UvJTX4kMwBLzXW+kQwY13FRQ3 cRtCTjYV6V71aqd5iT75VEWfpZsFlBH0QShJ77eHQPFxC+78bpGfLDIMKStumHmG LJWEULciTZK5zA2ZxP8Ndi9Bkj3pT120M6CRJ7qgwBUDvbqB4wImqv9nvgiZ13He 44HJa39ynM3i5LOKndPnwGMa1cNmhVABvDMFooJJEPQajYLYzlN54VKjwvTzjVrW PgbGVWXF8aTrm9hAFhGUgWmJHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrM7AG2 Btb23qz55d0+phMldffRMB8GA1UdIwQYMBaAFEAUvLSvmxgZZNe3pA0b+db4ngj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjNFNC8xOTBCMEQwNkYy NjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdCbGsxN2VrRFJ2NTF2aWVD UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCUzh0Sy1iR0JsazE3ZWtEUnY1MXZpZUNQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjNFNC8xOTBCMEQwNkYyNjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdC bGsxN2VrRFJ2NTF2aWVDUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBolRnFRwo6NjEP7zuJQPnWJDfwEdHG5chkIWQVqXUzhzEbvSMhVjVt dQDH7qfsHffexwPKldwRlTSjkKMG6b7wHPmgTtv8Gnxme6VQh4mVxGmJGSoQwQYV sJHmRymr5J5+aOxZSLJjTbus2ivNH+A+NHybI67HmcoRXI9h7+FTSM3e8eoIaDlH hGXnFWhvhDl9a7muLrzPYYAIgCyq0Eh/QHPMBemEW8j39xTean7X41GTk/aQ/hqt vJreKlXUxX/tQQ8f7lQXuOYLb1+CDe9vb5Wp18o+Ewj2f6AT4vQOMY8WhoyX1zra Wox6MnnERqZoclEA6nZkHZ2l9tcnUAKa -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:29 2025 by rpki-client