$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: Tx3oxvm6NV7ZdgyeG65gnrEApnpi3wbx8IKSrP8uTYI= Subject key identifier: 3C:46:94:95:6C:9C:5D:35:F8:F5:C3:9A:8D:16:EE:B6:34:70:A6:83 Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 35 Signing time: Fri 05 Sep 2025 08:08:27 +0000 Manifest this update: Fri 05 Sep 2025 08:08:26 +0000 Manifest next update: Fri 12 Sep 2025 08:08:26 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: mn9+yvHNgU12NJkOKH5UVnYwe0KNRDkTKKifJhPXprs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Sep 5 08:08:26 2025 GMT Not After : Sep 12 08:08:26 2025 GMT Subject: CN=68ba9a7b-9bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:6c:f2:d2:2c:c4:a6:e2:6c:a7:5e:51:a8: bf:f6:e6:b6:f3:0f:3c:0d:9d:73:c7:f1:9a:21:9a: 00:41:d3:69:44:d3:0a:b3:27:3c:7c:19:66:88:c9: 8c:a6:c6:55:72:ab:95:76:e4:9c:23:9b:0c:e6:c6: 81:00:b7:c4:1f:7f:0b:7e:da:b1:9a:21:cc:1e:e6: 52:38:51:47:b2:f7:83:3a:5d:b8:00:70:63:ea:06: 51:59:5d:77:d8:b5:da:af:9f:f5:40:b5:54:ba:13: 4d:23:63:db:c7:c9:11:b1:d3:ca:e1:4e:75:18:9a: 98:a9:43:98:9f:1a:fa:90:0c:d7:63:d9:6c:a1:ac: f5:91:a1:5d:f9:ab:d6:53:9e:2d:95:82:99:0b:f6: dd:b9:8b:6a:b4:c1:d2:f6:2b:f2:24:68:9a:7e:d9: 87:4a:14:c1:13:51:87:22:ba:15:97:68:40:d3:bc: ac:9c:ad:b0:21:17:46:02:e3:68:45:7e:75:92:33: bc:f0:b6:68:c3:85:85:a7:4e:6a:46:8b:fb:8b:4f: 84:e2:00:ea:18:33:f6:0f:cb:3f:d9:6e:0a:07:c0: 1c:06:18:ba:aa:1d:e4:5c:e4:c5:7c:4e:88:ba:e2: a6:c9:4c:53:da:e9:ad:0a:c5:a1:77:c6:3d:ce:b1: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:94:95:6C:9C:5D:35:F8:F5:C3:9A:8D:16:EE:B6:34:70:A6:83 X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:69:c0:0c:d2:f9:b5:f7:f1:37:24:7f:8f:4b:fc:9b:bc:5e: d6:46:9f:a2:bc:c1:8e:18:14:a9:02:5c:79:fe:8d:2f:4e:a2: 54:26:9d:b5:d6:e1:b9:50:87:42:56:bb:8f:cb:de:9d:c8:ad: c7:c2:6b:1e:40:c7:1b:4d:a2:85:d8:a3:42:3e:14:28:f3:6b: 91:ca:65:75:01:a9:6b:9c:1b:4a:9d:01:c6:86:b6:db:46:57: 5c:6b:94:ff:80:9c:78:2b:96:df:b7:88:a9:ee:60:7f:5a:db: 76:82:bd:55:62:b1:a7:17:e4:24:7d:c9:c7:7a:31:a1:07:00: 51:27:be:d5:25:8c:c2:ad:5c:1e:7f:c8:60:0d:ea:58:de:e4: 7e:57:81:0a:bf:d1:05:9c:da:02:44:f0:83:9d:34:f2:e9:b5: 47:92:f8:55:b5:18:7f:6c:a3:72:40:8e:7f:d1:f3:94:f2:ab: 80:5d:d5:fb:36:1c:d7:ea:cb:02:ca:d3:42:73:a9:a2:1e:e0: 88:3e:b0:b3:28:50:0b:97:29:66:a3:d4:25:ce:18:c6:c5:a7: 13:f3:fc:c7:da:18:f4:0b:09:a4:d9:9f:1f:2b:06:d4:d4:3a: 27:bb:54:33:bd:a6:89:e9:06:8d:d1:34:5c:c5:3f:e3:a2:73: 08:7c:b1:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTA5MDUwODA4MjZaFw0yNTA5MTIwODA4MjZaMBgxFjAUBgNV BAMTDTY4YmE5YTdiLTliZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3EWzy0izEpuJsp15RqL/25rbzDzwNnXPH8ZohmgBB02lE0wqzJzx8GWaIyYym xlVyq5V25JwjmwzmxoEAt8Qffwt+2rGaIcwe5lI4UUey94M6XbgAcGPqBlFZXXfY tdqvn/VAtVS6E00jY9vHyRGx08rhTnUYmpipQ5ifGvqQDNdj2WyhrPWRoV35q9ZT ni2VgpkL9t25i2q0wdL2K/IkaJp+2YdKFMETUYciuhWXaEDTvKycrbAhF0YC42hF fnWSM7zwtmjDhYWnTmpGi/uLT4TiAOoYM/YPyz/ZbgoHwBwGGLqqHeRc5MV8Toi6 4qbJTFPa6a0KxaF3xj3OsQqPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPEaUlWyc XTX49cOajRbutjRwpoMwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVpwAzS+bX38Tckf49L/Ju8XtZGn6K8wY4YFKkCXHn+jS9OolQmnbXW 4blQh0JWu4/L3p3IrcfCax5AxxtNooXYo0I+FCjza5HKZXUBqWucG0qdAcaGtttG V1xrlP+AnHgrlt+3iKnuYH9a23aCvVVisacX5CR9ycd6MaEHAFEnvtUljMKtXB5/ yGAN6lje5H5XgQq/0QWc2gJE8IOdNPLptUeS+FW1GH9so3JAjn/R85Tyq4Bd1fs2 HNfqywLK00JzqaIe4Ig+sLMoUAuXKWaj1CXOGMbFpxPz/MfaGPQLCaTZnx8rBtTU Oie7VDO9ponpBo3RNFzFP+Oicwh8sec= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:18 2025 by rpki-client