$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json) Hash identifier: dFtnu/RHRHf0Wc+Kp2yQB8asWaEPxtpdzXbiz1Q/cMc= Subject key identifier: D4:DC:C7:03:3A:DB:47:DA:40:04:FE:69:0B:42:96:87:C2:38:B9:08 Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft Manifest number: 06 Signing time: Mon 21 Jul 2025 08:24:35 +0000 Manifest this update: Mon 21 Jul 2025 08:24:34 +0000 Manifest next update: Mon 28 Jul 2025 08:24:34 +0000 Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: ej6otZi4ZacDU+c9XiqgylMH3Bpz2yKyaaN6DfmdrMk=) 2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Validity Not Before: Jul 21 08:24:34 2025 GMT Not After : Jul 28 08:24:34 2025 GMT Subject: CN=687df943-743a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:ab:dc:47:b5:78:b7:81:31:65:fd:87:54: 75:2d:11:2c:fe:7a:51:1b:c8:f4:47:28:8e:eb:60: 14:e2:5c:0f:d1:da:64:85:06:54:78:55:0d:53:1c: fd:ba:99:9b:10:1d:ee:f2:b6:5b:60:2c:6f:b3:33: 38:8f:12:ae:0c:ce:34:db:99:04:b1:e4:93:fc:b6: 9d:92:1f:ba:6f:b7:74:43:43:89:57:99:aa:f5:29: f9:e1:22:d0:13:10:25:b1:12:6e:6a:16:b6:14:3d: 92:95:ed:8d:8e:91:ef:fa:bf:00:60:c8:31:75:71: 70:ec:93:52:fe:cb:2d:9f:2a:78:5f:8b:10:6b:4b: a0:66:6a:fe:c6:f1:de:85:69:5c:b5:98:4b:89:3b: 3b:db:21:58:f5:cb:02:31:6c:c1:d5:ac:5a:be:30: 47:e5:78:55:3c:e2:9c:1c:8c:40:5b:34:b2:5b:74: ab:4a:79:1f:77:c2:99:5b:3f:8c:38:c2:f1:7c:ff: 0a:d5:03:bc:28:f9:43:48:8d:cb:47:c9:1e:19:85: 27:28:d7:64:61:06:f3:ac:f1:56:8f:4b:83:b9:d2: 32:33:fe:4f:b7:62:75:52:89:b8:67:1f:af:4f:b8: 8e:ae:81:15:67:5c:75:d9:b5:94:35:88:8b:6b:bf: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:C7:03:3A:DB:47:DA:40:04:FE:69:0B:42:96:87:C2:38:B9:08 X509v3 Authority Key Identifier: keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:81:88:c9:69:ed:79:97:bb:45:bd:f9:c4:2e:76:73:0b:ed: 3f:c7:d2:0b:aa:ca:19:47:34:d6:02:0d:7f:aa:05:89:9e:e8: a6:a8:dc:3c:4b:e1:45:31:f7:33:d8:45:54:ef:ad:33:c0:5b: 43:c9:48:7a:8e:ba:10:cf:ef:50:df:c5:11:07:35:6d:ef:0c: 6c:f1:cd:33:b6:80:ef:88:b7:3a:91:2e:24:6f:59:03:a6:53: da:b6:f3:98:42:cf:df:c6:02:66:da:5b:b9:a9:ff:ca:ef:b2: f5:c8:98:ea:bc:a2:ed:37:12:05:1c:e4:06:af:57:2c:6e:d6: 18:b2:58:c4:4a:f5:4a:b3:b5:33:71:72:81:7e:31:e0:da:21: b2:6c:d1:9f:b7:19:3d:d8:5c:89:df:b2:23:c0:c8:09:5a:b2: d9:1a:7f:6e:a6:a0:20:69:6e:a5:3b:0a:72:94:fe:6b:6b:32: 19:6e:d7:2b:23:db:e9:98:a5:2c:c0:a2:2a:fe:dd:a7:f8:b9: bd:0c:74:98:08:26:f3:aa:72:b7:dc:94:21:71:01:80:75:da: dc:0f:dd:da:3a:80:b0:a0:5f:5b:d7:d8:2a:7f:b1:52:37:49: 74:68:ab:bb:bc:ae:71:98:48:c7:2a:68:e2:f0:03:f4:bd:1d: 25:56:7f:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDU4NzExMC8GA1UEBRMoQTlCNTNGN0I2MTk2MzE4NzA5Mjg5MDJGRjQ4NDc2NTc0 MUJEQTJFOTAeFw0yNTA3MjEwODI0MzRaFw0yNTA3MjgwODI0MzRaMBgxFjAUBgNV BAMTDTY4N2RmOTQzLTc0M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7GqvcR7V4t4ExZf2HVHUtESz+elEbyPRHKI7rYBTiXA/R2mSFBlR4VQ1THP26 mZsQHe7ytltgLG+zMziPEq4MzjTbmQSx5JP8tp2SH7pvt3RDQ4lXmar1KfnhItAT ECWxEm5qFrYUPZKV7Y2Oke/6vwBgyDF1cXDsk1L+yy2fKnhfixBrS6Bmav7G8d6F aVy1mEuJOzvbIVj1ywIxbMHVrFq+MEfleFU84pwcjEBbNLJbdKtKeR93wplbP4w4 wvF8/wrVA7wo+UNIjctHyR4ZhSco12RhBvOs8VaPS4O50jIz/k+3YnVSibhnH69P uI6ugRVnXHXZtZQ1iItrv4gtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1NzHAzrb R9pABP5pC0KWh8I4uQgwHwYDVR0jBBgwFoAUqbU/e2GWMYcJKJAv9IR2V0G9oukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNTg3LzkwRjE0MzVBNjIx ODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWJVX2UyR1dNWWNKS0pBdjlJUjJWMEc5b3VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw NTg3LzkwRjE0MzVBNjIxODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVlj SktKQXY5SVIyVjBHOW91ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADuBiMlp7XmXu0W9+cQudnML7T/H0guqyhlHNNYCDX+qBYme6Kao3DxL 4UUx9zPYRVTvrTPAW0PJSHqOuhDP71DfxREHNW3vDGzxzTO2gO+ItzqRLiRvWQOm U9q285hCz9/GAmbaW7mp/8rvsvXImOq8ou03EgUc5AavVyxu1hiyWMRK9UqztTNx coF+MeDaIbJs0Z+3GT3YXInfsiPAyAlastkaf26moCBpbqU7CnKU/mtrMhlu1ysj 2+mYpSzAoir+3af4ub0MdJgIJvOqcrfclCFxAYB12twP3do6gLCgX1vX2Cp/sVI3 SXRoq7u8rnGYSMcqaOLwA/S9HSVWf/A= -----END CERTIFICATE-----Generated at Mon Jul 21 18:20:21 2025 by rpki-client