$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: nIwHtLHhAuVnQbiss/iVahvezAsd9gfTfgz1zV8yp78= Subject key identifier: 5B:E6:48:EC:B0:E7:42:6E:05:5E:11:A6:50:53:5D:68:D5:2C:91:35 Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 06AB Signing time: Fri 22 Aug 2025 22:18:57 +0000 Manifest this update: Fri 22 Aug 2025 22:18:57 +0000 Manifest next update: Fri 29 Aug 2025 22:18:57 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: mDvwEIfrQ+VgwhbZEsAaMG7hYnL674YggUVKx92/U24=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Aug 22 22:18:57 2025 GMT Not After : Aug 29 22:18:57 2025 GMT Subject: CN=68a8ecd1-cbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:d1:5b:ec:46:c1:1f:3a:b5:ae:90:ff:e5: 77:67:bf:b6:c1:96:36:89:94:d6:c8:04:2d:84:35: de:90:2d:3c:e3:96:05:64:f9:7d:95:6c:9e:29:ab: 01:35:d2:d1:aa:e1:f2:48:84:a3:63:50:69:97:87: c9:48:3e:74:e3:1f:57:8d:99:b6:2a:a0:b7:3c:b0: 08:6c:13:b8:c0:f2:82:67:b3:5d:a4:44:1d:c3:dc: bf:38:12:bc:90:20:09:bb:1f:5f:12:d0:a6:b8:bd: 83:c1:e5:49:ef:f7:62:5e:02:36:63:ff:df:59:b6: 4a:b3:c9:2a:a3:48:c6:8f:03:e9:c6:0b:5b:52:a5: 78:fd:ef:32:87:73:a6:16:d7:de:32:af:ce:df:6c: 64:1a:4e:d0:03:96:fa:68:90:d7:ba:69:d7:06:c6: a3:3d:3f:47:82:73:64:21:66:bd:ff:a1:15:96:dc: cd:a2:d6:e6:e5:16:9f:b8:45:d2:c7:07:1e:1d:44: 0e:38:8d:39:b4:c8:91:e0:2d:e5:0b:26:81:00:20: c1:92:a2:a1:b0:b8:47:85:0b:ed:c8:aa:e0:f6:98: 87:f7:9d:7b:e5:c5:dd:c4:7d:f6:21:37:c8:eb:de: 7f:78:a9:af:5f:73:d9:38:df:5f:7e:8a:76:4d:6b: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E6:48:EC:B0:E7:42:6E:05:5E:11:A6:50:53:5D:68:D5:2C:91:35 X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3b:24:4e:11:38:23:1a:a9:9f:0f:84:cc:e9:a0:2a:2c:10: eb:5b:7d:0a:e1:ff:80:59:9e:ff:b5:ad:52:bc:87:77:92:76: 52:f1:8b:11:df:46:ea:b0:1d:b5:1f:d4:c6:37:f8:4d:77:01: 90:c5:36:77:64:cd:8f:65:7c:c2:e0:18:e7:99:50:c9:65:9f: 4d:6c:80:a3:b7:b5:d2:ed:16:25:9b:c3:d5:65:4d:8d:f9:df: 68:74:08:04:dc:18:ce:34:04:62:79:9d:c7:cb:7a:a3:24:1f: 6d:71:4e:50:bf:9c:fb:d3:09:93:f6:78:9b:f0:e1:31:54:ab: 09:29:8d:81:23:16:d5:a3:ed:59:0f:ea:7a:36:b6:6a:dc:af: 9e:12:ec:0e:b5:3c:79:56:82:89:7e:81:58:af:e1:7d:c0:46: 4b:de:21:39:20:e4:fb:4c:6f:7f:f7:02:b9:fc:7e:20:4e:1b: 20:12:0f:1a:35:b2:a5:d3:2d:63:e7:66:df:1e:97:d6:8c:39: 12:05:b9:99:ae:48:69:3e:33:4c:d5:fe:5c:29:d2:de:c7:7c: 21:03:82:5b:b8:5b:32:df:1b:c8:8a:ac:17:7f:6f:f0:82:30: 40:56:7c:39:dd:cb:4b:d8:5d:c5:0f:e5:b6:2c:dd:3b:97:c4: 07:2c:81:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUwODIyMjIxODU3WhcNMjUwODI5MjIxODU3WjAYMRYwFAYD VQQDEw02OGE4ZWNkMS1jYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9LRW+xGwR86ta6Q/+V3Z7+2wZY2iZTWyAQthDXekC0845YFZPl9lWyeKasB NdLRquHySISjY1Bpl4fJSD504x9XjZm2KqC3PLAIbBO4wPKCZ7NdpEQdw9y/OBK8 kCAJux9fEtCmuL2DweVJ7/diXgI2Y//fWbZKs8kqo0jGjwPpxgtbUqV4/e8yh3Om FtfeMq/O32xkGk7QA5b6aJDXumnXBsajPT9HgnNkIWa9/6EVltzNotbm5RafuEXS xwceHUQOOI05tMiR4C3lCyaBACDBkqKhsLhHhQvtyKrg9piH95175cXdxH32ITfI 695/eKmvX3PZON9ffop2TWuWgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvmSOyw 50JuBV4RplBTXWjVLJE1MB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOOyROETgjGqmfD4TM6aAqLBDrW30K4f+AWZ7/ta1SvId3knZS8YsR 30bqsB21H9TGN/hNdwGQxTZ3ZM2PZXzC4BjnmVDJZZ9NbICjt7XS7RYlm8PVZU2N +d9odAgE3BjONARieZ3Hy3qjJB9tcU5Qv5z70wmT9nib8OExVKsJKY2BIxbVo+1Z D+p6NrZq3K+eEuwOtTx5VoKJfoFYr+F9wEZL3iE5IOT7TG9/9wK5/H4gThsgEg8a NbKl0y1j52bfHpfWjDkSBbmZrkhpPjNM1f5cKdLex3whA4JbuFsy3xvIiqwXf2/w gjBAVnw53ctL2F3FD+W2LN07l8QHLIEq -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:37 2025 by rpki-client