$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: urfj3sqmSUmvLpIGL3p8wcV/ODaGM9TqFrbeFwH/04Q= Subject key identifier: 24:C0:44:91:56:7C:CF:FE:4C:DE:4E:FE:1B:21:83:52:05:30:82:17 Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 191B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 18F1 Signing time: Wed 10 Sep 2025 16:34:33 +0000 Manifest this update: Wed 10 Sep 2025 16:34:32 +0000 Manifest next update: Wed 17 Sep 2025 16:34:32 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: TXPcfqdjShC9dyHtg2YVqnDzB0t2ESLPd0mT8/QJRwQ=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8=) 3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: irpR0h3jscaijLl59Cc3m/8UUXHvczEBFVSowrAT4Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 16:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: Sep 10 16:34:32 2025 GMT Not After : Sep 17 16:34:32 2025 GMT Subject: CN=68c1a899-f524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:68:21:e0:0a:17:7e:fb:dc:a3:5a:45:c4: 82:b4:26:97:6d:74:8b:3e:79:52:e8:00:62:d7:a7: ec:2d:7e:91:db:41:96:b4:13:87:78:8e:d3:01:8c: 1b:33:43:8c:76:04:5c:8e:7e:4f:64:60:06:94:cc: 2a:8e:00:75:4c:81:99:ec:9a:12:d1:92:c3:68:76: 41:39:62:0e:2c:8c:42:63:16:a5:a5:5f:d5:38:ea: b9:e0:f7:d6:a3:43:4f:2c:97:03:a1:68:a3:a8:81: 11:bd:4a:c5:96:24:1d:05:f2:26:bb:7a:c9:30:bc: 7f:a9:97:7a:23:86:2a:3e:2b:e9:00:09:04:51:d5: 6f:7a:2d:05:e1:74:14:2f:c1:fa:33:a4:04:94:5c: 80:bb:46:95:3a:e8:55:ea:47:85:0e:2a:e5:d5:e0: 7c:58:c2:8a:bf:9d:bd:de:47:89:f2:8b:d7:d9:8a: ea:44:7f:5e:30:fb:c1:02:2a:d0:21:ab:4f:2c:d2: 58:cb:c4:3b:34:49:1c:36:ab:03:9d:a2:87:cd:e0: 8f:d2:2b:89:59:37:22:90:8d:f8:8e:bc:20:84:9b: 83:ad:4f:ef:bc:63:a9:f0:ed:51:de:37:5c:b5:f9: 94:fa:d4:cf:f5:ba:a9:2f:47:43:25:58:b3:09:9c: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:44:91:56:7C:CF:FE:4C:DE:4E:FE:1B:21:83:52:05:30:82:17 X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ba:03:66:44:61:96:05:18:7e:04:bd:08:84:85:0f:bc:97: d3:67:8b:a0:b1:80:da:eb:ea:51:d9:e5:b9:4e:41:f4:2a:a9: 88:14:d9:3e:f7:8c:96:99:85:35:b0:2b:7c:e7:1f:ce:93:97: fd:d6:38:01:8f:b2:f8:5f:1a:76:dd:82:68:04:57:e6:61:0b: 1d:24:39:38:12:b2:be:ac:89:d3:e6:79:2f:ea:89:ce:ab:86: 16:fc:eb:41:8a:f7:75:20:c7:58:0d:73:7c:39:ba:1f:5f:a6: e1:bb:67:46:78:43:d5:01:aa:1e:28:43:f8:34:b5:f0:1c:a0: 94:99:94:56:58:27:35:8e:f4:f6:9d:ec:31:66:3b:7f:71:06: 55:3d:36:cf:84:89:d6:b9:04:1d:fd:19:5a:92:46:6c:03:a9: d0:8d:d1:30:0e:c1:ee:a2:98:b4:6d:6a:34:03:27:6e:26:69: 7d:d4:09:d1:60:ef:a9:e0:8e:1e:ee:33:b9:8c:11:16:8a:56: 2b:aa:a0:7f:53:47:e8:26:1e:d1:b9:3f:73:f6:39:6f:2d:8d: 7d:6f:31:62:34:6c:b0:bf:b3:a1:31:6c:77:03:65:d9:e5:4d: d5:b0:f7:84:ee:10:56:d5:c5:8e:45:28:96:1d:cd:37:61:95: 56:3d:b6:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjUwOTEwMTYzNDMyWhcNMjUwOTE3MTYzNDMyWjAYMRYwFAYD VQQDEw02OGMxYTg5OS1mNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrBoIeAKF3773KNaRcSCtCaXbXSLPnlS6ABi16fsLX6R20GWtBOHeI7TAYwb M0OMdgRcjn5PZGAGlMwqjgB1TIGZ7JoS0ZLDaHZBOWIOLIxCYxalpV/VOOq54PfW o0NPLJcDoWijqIERvUrFliQdBfImu3rJMLx/qZd6I4YqPivpAAkEUdVvei0F4XQU L8H6M6QElFyAu0aVOuhV6keFDirl1eB8WMKKv5293keJ8ovX2YrqRH9eMPvBAirQ IatPLNJYy8Q7NEkcNqsDnaKHzeCP0iuJWTcikI34jrwghJuDrU/vvGOp8O1R3jdc tfmU+tTP9bqpL0dDJVizCZyjYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTARJFW fM/+TN5O/hshg1IFMIIXMB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRugNmRGGWBRh+BL0IhIUPvJfTZ4ugsYDa6+pR2eW5TkH0KqmIFNk+ 94yWmYU1sCt85x/Ok5f91jgBj7L4Xxp23YJoBFfmYQsdJDk4ErK+rInT5nkv6onO q4YW/OtBivd1IMdYDXN8ObofX6bhu2dGeEPVAaoeKEP4NLXwHKCUmZRWWCc1jvT2 newxZjt/cQZVPTbPhInWuQQd/RlakkZsA6nQjdEwDsHuopi0bWo0AyduJml91AnR YO+p4I4e7jO5jBEWilYrqqB/U0foJh7RuT9z9jlvLY19bzFiNGywv7OhMWx3A2XZ 5U3VsPeE7hBW1cWORSiWHc03YZVWPbZB -----END CERTIFICATE-----Generated at Thu Sep 11 00:11:27 2025 by rpki-client