$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json) Hash identifier: DGVl1CI76uZE/A809vbfYbEwdX8x8QvWH1HnYhn7u8o= Subject key identifier: CF:C5:6D:3E:59:C8:77:5D:AD:E5:02:9C:E9:92:72:99:35:58:79:EF Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 0843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft Manifest number: 0837 Signing time: Wed 20 Aug 2025 20:49:20 +0000 Manifest this update: Wed 20 Aug 2025 20:49:19 +0000 Manifest next update: Wed 27 Aug 2025 20:49:19 +0000 Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: xwCJzzKsaOl9C6A3K0EnvIILupY16ocJbO6O7jSYkWI=) 2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: bG1CPCZHlQw0haejcYIgqU237lgngpKLBdJOI7duxPA=) 3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: rI+OmwliYI4AIuxYGKkkX7tZiKeGui6vIR2hfPTKsLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2115 (0x843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Aug 20 20:49:19 2025 GMT Not After : Aug 27 20:49:19 2025 GMT Subject: CN=68a634cf-ed16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:15:a4:64:fc:89:76:1e:98:bf:bd:06:b3: a6:af:7d:c1:69:24:9e:ce:4e:ca:ad:90:b5:3c:d9: 89:a9:0a:6d:96:7b:c3:db:8b:ca:38:ce:c3:1d:84: 1e:bc:d1:3c:85:8e:3b:62:f6:7b:bc:2b:4b:7d:a7: e6:88:16:4b:6d:ca:d1:ef:f5:04:61:37:06:a3:bf: 97:b6:7e:33:ac:95:b8:f5:11:f4:d0:61:3f:32:65: 53:cf:78:47:25:98:a2:c2:dc:bb:41:30:55:01:e3: 5c:f2:0f:84:28:3e:af:88:46:5a:fe:94:45:f2:fc: 51:98:bc:66:29:40:1c:37:08:04:28:4a:2e:05:1d: e5:4d:b3:26:5d:fb:4f:81:fd:47:f9:d1:7e:f3:41: ed:48:75:38:cb:b6:b8:96:2f:79:b4:f3:a2:64:81: 16:6d:81:54:e7:ea:ec:f8:07:ca:81:6c:c6:8d:3c: 9b:d8:d2:6b:a3:41:48:f3:d7:01:26:c9:67:75:03: fa:9c:4e:a5:4c:af:55:ba:ea:a9:ac:d2:af:be:a9: 11:82:85:77:4f:1d:58:1f:8a:99:cf:55:9e:42:6a: fb:80:4a:f3:f9:60:24:0e:ab:75:4a:80:e3:9c:5e: de:95:34:67:67:83:fd:d6:4a:ad:ad:6e:88:54:b6: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C5:6D:3E:59:C8:77:5D:AD:E5:02:9C:E9:92:72:99:35:58:79:EF X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:20:a0:22:e0:00:73:76:e5:d6:df:b7:70:2a:a3:6c:9f:85: 68:a4:8b:3f:17:c2:86:ba:88:83:c2:b3:89:d2:6c:c9:4b:0d: a3:9e:16:0a:bb:ba:9e:60:a5:76:55:90:24:ff:6e:8a:04:c5: 82:99:93:a2:5f:84:62:2b:26:02:e9:79:57:1d:92:7e:fa:d2: cd:d1:80:bb:ca:84:fb:e0:87:d4:1c:52:ad:17:81:06:27:b4: 80:11:ce:25:2c:51:66:af:77:94:da:28:92:f7:88:c0:dc:78: ad:47:34:56:55:16:87:ba:2e:b4:30:f1:03:3b:73:2b:6a:94: 71:28:48:0e:e9:ba:56:63:c5:b7:b3:3d:ad:10:b2:86:fa:e5: 8f:1b:e9:db:34:aa:d9:21:a5:ef:70:0d:f0:9e:86:fc:da:b9: 0a:4a:c8:57:13:1c:5f:a8:33:74:c6:fb:c6:7e:72:dd:5e:41: 0c:17:12:0c:2d:8b:5a:f8:4a:e6:b6:88:39:60:a8:41:c8:ea: d1:58:80:9d:fb:c0:88:cb:89:b2:fe:f8:0c:6b:d4:1d:ca:e1: b9:7f:49:e9:a6:e4:00:e4:89:0a:63:53:6b:35:f8:40:14:16: 80:2f:8a:3f:e9:d8:24:8d:ff:00:de:f1:c8:09:2e:16:05:70: 53:5c:db:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjUwODIwMjA0OTE5WhcNMjUwODI3MjA0OTE5WjAYMRYwFAYD VQQDEw02OGE2MzRjZi1lZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofAVpGT8iXYemL+9BrOmr33BaSSezk7KrZC1PNmJqQptlnvD24vKOM7DHYQe vNE8hY47YvZ7vCtLfafmiBZLbcrR7/UEYTcGo7+Xtn4zrJW49RH00GE/MmVTz3hH JZiiwty7QTBVAeNc8g+EKD6viEZa/pRF8vxRmLxmKUAcNwgEKEouBR3lTbMmXftP gf1H+dF+80HtSHU4y7a4li95tPOiZIEWbYFU5+rs+AfKgWzGjTyb2NJro0FI89cB JslndQP6nE6lTK9VuuqprNKvvqkRgoV3Tx1YH4qZz1WeQmr7gErz+WAkDqt1SoDj nF7elTRnZ4P91kqtrW6IVLY3NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/FbT5Z yHddreUCnOmScpk1WHnvMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/IKAi4ABzduXW37dwKqNsn4VopIs/F8KGuoiDwrOJ0mzJSw2jnhYK u7qeYKV2VZAk/26KBMWCmZOiX4RiKyYC6XlXHZJ++tLN0YC7yoT74IfUHFKtF4EG J7SAEc4lLFFmr3eU2iiS94jA3HitRzRWVRaHui60MPEDO3MrapRxKEgO6bpWY8W3 sz2tELKG+uWPG+nbNKrZIaXvcA3wnob82rkKSshXExxfqDN0xvvGfnLdXkEMFxIM LYta+Ermtog5YKhByOrRWICd+8CIy4my/vgMa9QdyuG5f0nppuQA5IkKY1NrNfhA FBaAL4o/6dgkjf8A3vHICS4WBXBTXNth -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:03 2025 by rpki-client