$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: OxvvUUxPF6mFdtncVhkwpJUyAM4qXPuynyORO6qotuc= Subject key identifier: 80:BA:56:E4:E8:70:1A:70:59:8C:BE:D3:C6:DB:1A:56:1A:8B:35:84 Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 0452 Signing time: Sun 07 Sep 2025 00:37:27 +0000 Manifest this update: Sun 07 Sep 2025 00:37:26 +0000 Manifest next update: Sun 14 Sep 2025 00:37:26 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: J656yuxl0bhfl3ErJ8MBwKWIoMc9xu5bPVr+6Zp+jf4=) 2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: 5latq2+YRolk+7/RCZ77DIkjarUkzR1toXI6OoV7ng8=) 3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: 06e2Kd9kP50w5XlMiJZ3tSgrZONMMPBPJ5HjMD4Ujzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Sep 7 00:37:26 2025 GMT Not After : Sep 14 00:37:26 2025 GMT Subject: CN=68bcd3c6-c596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:06:26:e7:ba:fa:fe:f3:98:9f:b7:c3:7e: 30:20:41:6f:f4:e3:bf:c0:2d:81:e3:45:da:6e:a8: 80:0d:ab:20:11:70:a6:ea:47:91:92:a6:32:1d:c7: d7:0c:a2:ba:67:53:0a:aa:57:22:7b:e2:39:42:5f: 0d:ed:2c:b7:c8:83:15:5a:24:d1:5a:7f:bf:f5:90: 1b:f5:f6:34:b6:78:ad:7a:4c:08:db:d5:3f:e1:b4: d6:3d:ca:af:9e:5a:28:df:0b:52:b5:5d:06:89:9c: e8:c1:6f:48:b3:72:d5:a3:b3:a4:1d:fa:12:a4:c7: e9:34:00:f5:e8:cd:25:1a:1e:a0:46:6c:aa:e8:bb: a9:43:3c:06:ac:93:40:31:54:f5:b2:1d:12:57:20: eb:4c:bf:e3:ff:35:6d:fd:9c:fa:19:7b:04:57:23: dd:ae:05:39:e7:c2:58:c5:a8:3d:5a:08:d8:27:f9: f6:14:8d:4f:77:38:d7:b0:ac:35:5a:7b:cc:ec:7e: 78:25:e3:18:8a:7f:d6:38:fc:7a:c8:f8:91:8b:bc: 0f:10:17:10:cb:66:d6:43:15:11:29:89:bf:10:35: 1d:06:b7:44:cc:48:f9:12:d4:cf:73:56:25:e9:dc: 25:ea:85:fc:df:2b:ad:19:89:40:dd:4c:f7:84:c5: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:56:E4:E8:70:1A:70:59:8C:BE:D3:C6:DB:1A:56:1A:8B:35:84 X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:c7:7d:a9:13:cb:30:c1:ac:54:64:d3:a9:68:13:d9:6f: ad:ad:bc:fd:34:1f:a0:e5:fd:be:fe:3e:87:8e:b5:e1:4f:4f: 0f:e3:83:ee:3f:38:fb:c4:83:5f:32:77:0c:75:24:4e:9b:59: e4:c2:8c:58:be:c6:a3:00:87:9f:b5:8a:56:ae:c7:9e:d2:1e: 64:54:46:ce:1b:67:ef:60:7a:04:75:0e:00:28:92:af:3c:4b: 43:0e:26:14:fe:6a:25:a1:34:ca:8c:40:d4:4e:3d:bd:d0:1f: a1:d5:b2:2f:13:43:e6:66:45:49:dc:e6:8e:52:8c:e0:87:ee: c0:5f:ba:70:7f:41:c9:c1:a8:93:da:54:28:54:89:3d:af:89: c0:82:56:43:af:dd:0e:09:8d:18:f0:d6:c9:e6:c6:e2:b5:7e: 30:b8:a3:a4:a4:06:1a:6c:8f:3c:a7:fd:18:03:66:4f:1c:b8: dc:3a:f4:39:80:39:c3:fa:ad:53:5d:2a:d8:3e:6c:29:c0:a9: eb:22:2f:cc:fb:e2:c1:47:5f:50:99:41:71:51:0d:3b:2a:41: a4:b9:d1:72:18:13:3d:5d:c9:1c:fd:19:78:31:2e:71:ad:12: 5e:ce:be:e5:94:0c:2b:a3:79:9b:4c:00:bb:19:c4:b6:f6:44: 67:2d:d2:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjUwOTA3MDAzNzI2WhcNMjUwOTE0MDAzNzI2WjAYMRYwFAYD VQQDEw02OGJjZDNjNi1jNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1QGJue6+v7zmJ+3w34wIEFv9OO/wC2B40XabqiADasgEXCm6keRkqYyHcfX DKK6Z1MKqlcie+I5Ql8N7Sy3yIMVWiTRWn+/9ZAb9fY0tnitekwI29U/4bTWPcqv nloo3wtStV0GiZzowW9Is3LVo7OkHfoSpMfpNAD16M0lGh6gRmyq6LupQzwGrJNA MVT1sh0SVyDrTL/j/zVt/Zz6GXsEVyPdrgU558JYxag9WgjYJ/n2FI1PdzjXsKw1 WnvM7H54JeMYin/WOPx6yPiRi7wPEBcQy2bWQxURKYm/EDUdBrdEzEj5EtTPc1Yl 6dwl6oX83yutGYlA3Uz3hMX0ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC6VuTo cBpwWYy+08bbGlYaizWEMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeZsd9qRPLMMGsVGTTqWgT2W+trbz9NB+g5f2+/j6HjrXhT08P44Pu Pzj7xINfMncMdSROm1nkwoxYvsajAIeftYpWrsee0h5kVEbOG2fvYHoEdQ4AKJKv PEtDDiYU/moloTTKjEDUTj290B+h1bIvE0PmZkVJ3OaOUozgh+7AX7pwf0HJwaiT 2lQoVIk9r4nAglZDr90OCY0Y8NbJ5sbitX4wuKOkpAYabI88p/0YA2ZPHLjcOvQ5 gDnD+q1TXSrYPmwpwKnrIi/M++LBR19QmUFxUQ07KkGkudFyGBM9Xckc/Rl4MS5x rRJezr7llAwro3mbTAC7GcS29kRnLdJF -----END CERTIFICATE-----Generated at Mon Sep 8 02:19:09 2025 by rpki-client