$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: 0QwWRkFAmKsMTDKa5Q+v/xUFLepnAYQL707sLWQlxcM= Subject key identifier: 76:B8:5B:13:C2:E0:3D:CD:60:7B:BB:99:A9:5C:EA:40:4E:FE:8A:85 Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 34C2 Signing time: Thu 18 Sep 2025 14:40:59 +0000 Manifest this update: Thu 18 Sep 2025 14:40:58 +0000 Manifest next update: Thu 25 Sep 2025 14:40:58 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: hoVAQVSCdjZQk2JmVq495Rcrj5CfztvWoBe9EWvrCbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: Sep 18 14:40:58 2025 GMT Not After : Sep 25 14:40:58 2025 GMT Subject: CN=68cc19fa-698b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:b6:88:75:22:2f:be:c4:3c:9d:77:fd:fe: 0a:7c:ae:19:7c:3a:a3:f4:33:8a:d3:fd:bf:c2:f6: f4:16:58:71:34:b7:6a:b3:c6:04:de:e1:d5:6d:49: fa:f0:97:db:1a:86:70:2b:f4:29:c6:0c:3a:0e:39: 78:e8:e8:4b:17:69:83:8b:07:17:32:ee:86:dd:6a: b8:31:e8:46:48:c8:7c:fb:78:28:45:62:90:71:04: 97:91:b0:11:14:1f:f2:49:fb:31:2b:a9:b8:27:a7: 2f:a3:00:d7:83:87:a7:bb:92:47:97:fe:06:d4:71: 8a:e7:1e:12:37:c1:1d:a7:84:68:21:3e:d7:75:15: 37:dd:89:4b:3f:30:e1:3f:5d:37:dc:0f:87:27:90: b6:53:19:59:cb:9b:30:78:ac:3f:58:79:23:a7:10: 04:3f:ac:a7:cb:83:1a:38:69:e4:a8:10:d2:e2:ec: 79:9d:5c:61:5e:7f:39:7b:15:f0:20:3a:c2:3c:bf: 5e:f9:9a:7c:6b:b5:4c:98:17:e1:a1:76:03:b7:b0: 30:30:91:6e:ed:a9:ad:ad:52:db:9f:69:72:82:55: 12:17:1c:d3:c3:d5:72:e5:68:af:56:54:84:d0:ff: ae:f3:b4:b4:d9:6a:a9:a1:c2:a3:80:01:f0:e6:4f: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B8:5B:13:C2:E0:3D:CD:60:7B:BB:99:A9:5C:EA:40:4E:FE:8A:85 X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:45:32:d6:fa:42:e5:c3:31:73:f2:88:80:45:9f:f4:0d:ba: 66:23:97:6c:5a:33:68:dd:9c:7b:a3:8c:67:0d:64:6a:76:a4: 68:58:03:72:62:1c:03:07:9a:0f:28:a0:0a:87:77:9f:79:84: 6a:73:dd:c7:ee:00:38:0c:92:a6:a7:4b:91:ef:1b:03:bc:bc: 3e:0f:df:13:40:77:26:13:77:c6:8e:3d:9e:4b:e2:42:98:66: 25:3b:17:f4:11:75:78:cf:ca:cc:7a:11:24:bd:63:a0:71:86: ef:08:16:ba:b2:76:54:0d:18:e8:bc:5c:87:3d:de:37:e5:78: 79:b2:18:36:d3:3c:ef:9d:68:c8:9e:fb:66:e6:06:cd:0c:e4: 15:84:f8:2a:73:43:20:33:5d:c4:e8:d9:23:03:f2:b2:91:4d: c5:1b:c0:8c:f1:63:c2:74:c8:c7:de:22:10:59:48:ba:4c:a0: 73:21:05:af:7a:6a:b1:f3:51:66:c4:59:c0:1c:3e:1b:7c:31: 1b:bf:d7:9a:05:96:ec:62:16:3b:bf:10:4c:f8:79:54:96:27: d7:ae:e7:49:ec:d9:da:36:27:ee:b8:c2:0b:c2:80:0f:58:e6: e5:25:d2:75:66:d8:a3:31:1d:2b:b7:e5:bd:23:40:96:b0:54: 0b:72:f4:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjUwOTE4MTQ0MDU4WhcNMjUwOTI1MTQ0MDU4WjAYMRYwFAYD VQQDEw02OGNjMTlmYS02OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IC2iHUiL77EPJ13/f4KfK4ZfDqj9DOK0/2/wvb0FlhxNLdqs8YE3uHVbUn6 8JfbGoZwK/Qpxgw6Djl46OhLF2mDiwcXMu6G3Wq4MehGSMh8+3goRWKQcQSXkbAR FB/ySfsxK6m4J6cvowDXg4enu5JHl/4G1HGK5x4SN8Edp4RoIT7XdRU33YlLPzDh P1033A+HJ5C2UxlZy5sweKw/WHkjpxAEP6yny4MaOGnkqBDS4ux5nVxhXn85exXw IDrCPL9e+Zp8a7VMmBfhoXYDt7AwMJFu7amtrVLbn2lyglUSFxzTw9Vy5WivVlSE 0P+u87S02WqpocKjgAHw5k+4vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa4WxPC 4D3NYHu7malc6kBO/oqFMB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1RTLW+kLlwzFz8oiARZ/0DbpmI5dsWjNo3Zx7o4xnDWRqdqRoWANy YhwDB5oPKKAKh3efeYRqc93H7gA4DJKmp0uR7xsDvLw+D98TQHcmE3fGjj2eS+JC mGYlOxf0EXV4z8rMehEkvWOgcYbvCBa6snZUDRjovFyHPd435Xh5shg20zzvnWjI nvtm5gbNDOQVhPgqc0MgM13E6NkjA/KykU3FG8CM8WPCdMjH3iIQWUi6TKBzIQWv emqx81FmxFnAHD4bfDEbv9eaBZbsYhY7vxBM+HlUlifXrudJ7NnaNifuuMILwoAP WOblJdJ1ZtijMR0rt+W9I0CWsFQLcvQJ -----END CERTIFICATE-----Generated at Fri Sep 19 02:53:18 2025 by rpki-client