$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: BWugR8zzRYUR6EJNMUJosprhgGwkQTRL+1RFQVknb68= Subject key identifier: 20:F6:58:B6:F1:DE:2F:45:8E:19:0B:13:4B:31:F6:78:BB:46:C8:A0 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C47 Signing time: Sun 24 Aug 2025 18:34:13 +0000 Manifest this update: Sun 24 Aug 2025 18:34:12 +0000 Manifest next update: Sun 31 Aug 2025 18:34:12 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: VgDlvnFTQgM6Z5qUr5S5+7LVG3HCvUFqtzVUj0SfdqE=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Aug 24 18:34:12 2025 GMT Not After : Aug 31 18:34:12 2025 GMT Subject: CN=68ab5b24-d23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:12:46:10:1e:0d:10:e5:a9:13:2c:a4:61: 94:29:8a:6a:f0:9f:73:a4:ad:5c:c4:87:99:81:31: 88:2e:d6:ad:41:b9:a2:e6:63:cb:96:95:62:f6:17: e3:e8:7e:9c:22:4e:d7:4f:52:2a:f0:33:c6:78:29: 3d:84:d3:a5:c0:cf:a5:7a:45:1d:c3:ec:6d:ee:ec: 82:1c:ce:b3:19:5e:3b:e2:2c:24:c9:f2:42:0a:8c: f9:75:aa:10:0a:6d:60:21:8c:bd:da:2a:0e:9e:21: 0c:c7:49:80:a4:4c:13:f6:fc:31:1a:90:b9:f1:e9: 9e:5c:ce:4e:19:e5:a3:9a:62:47:67:13:c1:87:96: 7f:4a:82:e6:bf:21:b4:31:0d:35:69:d5:7b:ba:58: 95:71:24:41:70:3f:25:a6:1f:34:41:8c:d4:4c:05: c7:20:8d:71:d5:e9:fa:fc:87:20:aa:c6:31:e6:80: 15:cd:1f:d1:03:88:f2:7f:8c:b7:4f:95:03:37:15: d2:6b:d5:9e:a0:ed:e9:98:66:32:25:63:32:4d:de: 33:9e:a0:39:f6:dc:c4:65:be:44:be:95:c3:81:f4: 77:73:b2:56:fb:ab:c7:4a:40:c1:8a:df:73:b9:d3: 2c:3f:0b:fd:ef:c6:4d:77:04:ee:1a:43:75:b4:0f: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:58:B6:F1:DE:2F:45:8E:19:0B:13:4B:31:F6:78:BB:46:C8:A0 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:28:d2:fb:fb:07:40:96:ec:5f:c7:ba:80:87:2b:76:9b:1d: a1:4b:4a:27:64:f0:32:54:1d:f5:4a:b4:f1:36:27:73:6d:47: 8c:8c:79:9d:d4:79:89:31:b5:32:33:e8:62:48:ac:b5:39:40: 71:00:9e:cd:4b:da:43:ec:df:1c:65:92:10:63:9b:4f:4d:e1: 52:0b:dc:2e:44:18:2c:8b:aa:c3:52:2e:e4:ad:9a:02:7f:3b: fa:df:c8:e2:fc:7e:b0:c7:7f:8a:15:d2:1f:a0:ab:12:c8:0e: cb:ae:b7:14:0e:dd:c1:17:9a:12:0d:a5:42:5e:15:06:bd:23: 7b:6c:e1:8d:ef:89:ed:3b:8e:50:e2:2d:b5:69:6a:22:61:6c: e4:b0:08:e3:30:87:ed:a5:4d:df:2a:43:fc:2e:5a:9e:64:20: 2e:fd:55:b4:73:02:3d:cb:5e:55:72:71:8c:a6:c9:c0:57:e6: 61:41:98:65:77:6d:de:89:2c:86:83:99:d0:d3:b7:8f:8a:af: 06:f9:df:73:b8:3f:c6:82:71:1f:da:17:98:ff:4c:31:1c:4a: 97:35:66:66:71:a8:ca:32:bf:4b:56:57:5a:43:9c:08:b1:67: 59:76:4d:0b:63:23:35:2c:94:d1:c8:ba:d5:d7:fa:48:27:c6: 71:69:c3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwODI0MTgzNDEyWhcNMjUwODMxMTgzNDEyWjAYMRYwFAYD VQQDEw02OGFiNWIyNC1kMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AgSRhAeDRDlqRMspGGUKYpq8J9zpK1cxIeZgTGILtatQbmi5mPLlpVi9hfj 6H6cIk7XT1Iq8DPGeCk9hNOlwM+lekUdw+xt7uyCHM6zGV474iwkyfJCCoz5daoQ Cm1gIYy92ioOniEMx0mApEwT9vwxGpC58emeXM5OGeWjmmJHZxPBh5Z/SoLmvyG0 MQ01adV7uliVcSRBcD8lph80QYzUTAXHII1x1en6/IcgqsYx5oAVzR/RA4jyf4y3 T5UDNxXSa9WeoO3pmGYyJWMyTd4znqA59tzEZb5EvpXDgfR3c7JW+6vHSkDBit9z udMsPwv978ZNdwTuGkN1tA9YVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD2WLbx 3i9FjhkLE0sx9ni7RsigMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvKNL7+wdAluxfx7qAhyt2mx2hS0onZPAyVB31SrTxNidzbUeMjHmd 1HmJMbUyM+hiSKy1OUBxAJ7NS9pD7N8cZZIQY5tPTeFSC9wuRBgsi6rDUi7krZoC fzv638ji/H6wx3+KFdIfoKsSyA7LrrcUDt3BF5oSDaVCXhUGvSN7bOGN74ntO45Q 4i21aWoiYWzksAjjMIftpU3fKkP8LlqeZCAu/VW0cwI9y15VcnGMpsnAV+ZhQZhl d23eiSyGg5nQ07ePiq8G+d9zuD/GgnEf2heY/0wxHEqXNWZmcajKMr9LVldaQ5wI sWdZdk0LYyM1LJTRyLrV1/pIJ8ZxacPb -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:17 2025 by rpki-client