$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json) Hash identifier: V2HCxRE3VlMYFNxvnQ67jhz7qIKZ9CaubRfNxwQ/kek= Subject key identifier: 83:D4:34:E4:76:56:D9:EB:1C:85:E6:78:1F:2F:FA:9A:52:02:72:E2 Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft Manifest number: 0A59 Signing time: Sun 24 Aug 2025 19:40:55 +0000 Manifest this update: Sun 24 Aug 2025 19:40:54 +0000 Manifest next update: Sun 31 Aug 2025 19:40:54 +0000 Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: GMJvaDT5YFmUsorlXD8vGH28nbN0BnbXjrMrt5ZW7MI=) 2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: RbBtMUxEM5O1piu47myWbtaMm/ZIwxdcYTXVUwgD12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: Aug 24 19:40:54 2025 GMT Not After : Aug 31 19:40:54 2025 GMT Subject: CN=68ab6ac7-4207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:41:8a:b3:3e:9f:cc:28:64:47:ee:2f:9e: 41:bc:fd:79:6a:91:6d:1a:38:1a:40:a9:f5:de:24: e9:e1:12:18:b5:3b:59:08:8f:7d:a6:8c:6c:7c:d9: b7:93:a8:9f:95:48:eb:35:3e:a5:76:a1:4c:30:88: f7:0f:0d:a1:66:33:b0:5a:fa:e9:b5:74:f6:f3:ec: af:81:bc:60:d8:74:32:8d:23:bb:c9:f6:b7:7c:17: 97:17:85:92:cd:5b:97:fa:48:cd:e8:74:cd:40:e4: a4:73:8a:03:5e:c5:63:bf:2e:53:7a:c7:18:17:a4: 30:31:29:7e:08:8c:bb:ef:93:5f:ad:eb:14:d5:b7: 1e:f2:f1:aa:b6:a2:94:2a:25:02:24:77:21:7a:c8: 38:1e:61:56:82:1c:a2:df:5d:87:60:38:1c:7a:59: 28:fd:50:9a:f2:86:40:e5:1d:cf:bc:a7:b3:bc:69: 3c:68:b2:a4:39:d3:c2:b0:03:a2:45:ff:01:ce:c7: 40:fa:6a:c6:f8:74:93:0b:77:e9:a7:ed:e3:61:34: 0b:a0:b9:59:f9:42:24:17:c7:87:b3:0d:18:fe:0b: d0:38:dc:61:1b:87:80:86:fd:ff:2a:f4:01:a4:b1: 1c:ad:e5:31:f1:57:19:4a:44:5a:d9:7c:84:de:69: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D4:34:E4:76:56:D9:EB:1C:85:E6:78:1F:2F:FA:9A:52:02:72:E2 X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e9:51:20:95:40:51:c9:7d:ad:48:c0:03:79:d2:d6:37:13: e5:3b:47:62:e5:fc:5f:a2:70:3a:4a:3e:1a:da:d7:51:1b:e6: a5:1e:ef:42:ae:03:83:72:58:90:ea:5d:00:10:91:71:cd:ca: 7f:5a:dc:51:bf:5e:a9:7a:2c:c8:39:eb:1a:d4:b7:c9:7f:57: 94:10:83:aa:cf:31:80:7e:b4:f5:33:09:7f:dd:2b:c5:c9:d6: f1:65:80:86:21:73:45:38:69:73:a0:9c:24:69:73:3d:3c:fb: aa:97:c3:21:93:cd:d9:5d:f7:df:e6:72:ef:0f:f8:34:f2:03: 20:cb:ac:a3:e1:61:dd:43:70:c4:bb:0c:02:96:4e:60:27:76: a2:02:51:3f:95:bc:6b:33:7b:6c:9a:f2:b1:8c:d8:e5:3a:8b: e1:47:09:fa:3b:15:a7:f8:b1:df:dc:6b:6e:0c:f4:de:11:34: 75:94:22:05:99:c0:0d:70:81:07:d4:29:88:ea:ee:81:f4:b8: 77:8f:93:03:de:5e:d6:72:2e:a4:d4:79:01:cb:58:83:39:eb: ce:90:25:bd:18:fe:e8:e8:81:30:05:d1:b8:00:04:8b:ad:8b: 69:f9:d3:24:12:da:99:9d:47:f6:ac:43:46:42:ea:fc:e8:5c: 93:15:a1:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjUwODI0MTk0MDU0WhcNMjUwODMxMTk0MDU0WjAYMRYwFAYD VQQDEw02OGFiNmFjNy00MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnItBirM+n8woZEfuL55BvP15apFtGjgaQKn13iTp4RIYtTtZCI99poxsfNm3 k6iflUjrNT6ldqFMMIj3Dw2hZjOwWvrptXT28+yvgbxg2HQyjSO7yfa3fBeXF4WS zVuX+kjN6HTNQOSkc4oDXsVjvy5TescYF6QwMSl+CIy775NfresU1bce8vGqtqKU KiUCJHchesg4HmFWghyi312HYDgcelko/VCa8oZA5R3PvKezvGk8aLKkOdPCsAOi Rf8BzsdA+mrG+HSTC3fpp+3jYTQLoLlZ+UIkF8eHsw0Y/gvQONxhG4eAhv3/KvQB pLEcreUx8VcZSkRa2XyE3mn3GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPUNOR2 VtnrHIXmeB8v+ppSAnLiMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkJENy9GOTMyMTkxMjZDQjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlq dHlpRE8tQ3RaaU41YnNpaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu6VEglUBRyX2tSMADedLWNxPlO0di5fxfonA6Sj4a2tdRG+alHu9C rgODcliQ6l0AEJFxzcp/WtxRv16peizIOesa1LfJf1eUEIOqzzGAfrT1Mwl/3SvF ydbxZYCGIXNFOGlzoJwkaXM9PPuql8Mhk83ZXfff5nLvD/g08gMgy6yj4WHdQ3DE uwwClk5gJ3aiAlE/lbxrM3tsmvKxjNjlOovhRwn6OxWn+LHf3GtuDPTeETR1lCIF mcANcIEH1CmI6u6B9Lh3j5MD3l7Wci6k1HkBy1iDOevOkCW9GP7o6IEwBdG4AASL rYtp+dMkEtqZnUf2rENGQur86FyTFaGb -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:03 2025 by rpki-client