$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft File: qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json) Hash identifier: h2owKpF8hyl4tWcLn73ZHIGvMw4xIaaUMdX/J+4dcdY= Subject key identifier: 2C:A5:BF:2E:4B:41:6B:24:3F:BD:60:80:36:9B:0D:AB:79:B5:C7:68 Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 Certificate issuer: /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft Manifest number: 1D Signing time: Thu 19 Jun 2025 07:16:08 +0000 Manifest this update: Thu 19 Jun 2025 07:16:08 +0000 Manifest next update: Thu 26 Jun 2025 07:16:08 +0000 Files and hashes: 1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: BnAl/sE9seuOFlxen2aK26tlXh/pcGCPXKCoO8mbLwA=) 2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Validity Not Before: Jun 19 07:16:08 2025 GMT Not After : Jun 26 07:16:08 2025 GMT Subject: CN=6853b938-1d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:75:43:97:4a:db:17:e1:62:1e:67:8c:f4: 76:08:34:88:9e:11:73:af:6b:7a:bd:6e:6a:49:17: 4d:75:92:2d:58:d9:64:28:1d:dd:c9:e7:84:f0:7b: a1:92:7d:5a:30:20:ee:be:7c:7e:da:6e:85:01:ac: 68:20:a4:58:e4:9a:4e:ba:7a:7e:ea:6c:f4:f3:cb: d3:a5:21:22:2b:17:2a:25:8d:ad:4d:0b:b1:19:37: 66:ac:53:00:fc:0d:2d:92:ab:65:2c:3e:a8:7b:ce: eb:b2:3c:87:25:60:da:f1:cd:ad:e3:04:9f:1c:90: 58:95:9e:43:e2:2b:a1:94:5d:d4:84:f5:97:9a:2c: 4c:3d:29:20:9d:60:40:8d:86:d9:bc:ae:19:d6:ef: 08:3d:ee:04:bd:d3:97:5c:42:67:61:bc:10:e4:d1: 3b:bd:d3:5f:95:a0:95:da:58:e6:6f:3b:45:d9:bc: 74:27:47:f9:b9:95:54:63:77:24:30:4c:2c:a9:8f: f9:a8:aa:40:64:1b:76:43:de:2f:1c:52:63:7e:0a: 06:2f:4b:10:b6:ba:d3:67:aa:c3:f8:44:c6:75:9c: 90:e4:ac:88:ff:d3:e5:db:5c:8c:91:89:95:74:ca: ae:39:7c:00:7b:de:1a:eb:44:37:c9:52:18:66:0a: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A5:BF:2E:4B:41:6B:24:3F:BD:60:80:36:9B:0D:AB:79:B5:C7:68 X509v3 Authority Key Identifier: keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1e:3d:83:72:e5:e7:b8:41:1e:8e:f3:1b:9b:c3:11:4d:9f: 2d:d2:84:ee:cd:cb:4c:5a:3c:b6:6b:17:21:46:f0:f8:35:6e: bf:54:c0:d8:6f:c9:63:72:84:2c:0e:c1:ce:4f:be:08:a7:c7: fd:d9:a3:ca:55:36:63:e6:51:7c:65:69:7a:92:34:eb:d2:98: 09:dd:e8:ae:4b:83:3e:1b:4e:23:a5:0d:f9:4e:c0:6c:a0:e6: 14:55:0c:ea:7d:9a:bd:97:42:44:84:2b:4e:eb:34:cc:ba:fa: 51:70:e4:aa:77:c4:6f:2c:0f:7e:28:31:65:a9:a3:fc:28:11: f5:de:67:0d:1d:2a:98:0f:51:b8:ea:40:f2:16:60:8b:73:ee: af:79:11:44:e2:99:70:10:e4:c2:df:85:62:18:31:dd:98:dc: bb:51:6e:29:6e:a9:b1:bc:21:e1:bb:d2:48:d6:c2:f2:be:b2: 4b:e8:4e:2b:00:5d:a8:e0:d0:5c:39:2d:3c:33:28:0a:bd:80: 07:8c:19:1c:fd:a3:00:a0:90:60:79:2f:73:8d:96:36:15:0d: 68:a7:e9:03:c7:cb:57:4e:b0:74:52:95:a0:be:63:96:b2:ac: 97:fb:40:ca:b2:ca:af:c1:8c:9c:b3:07:56:38:90:69:a3:e5: 5f:01:e6:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjBCQjExMC8GA1UEBRMoQTlCQkVEMkQ3M0I4RDRCRTAxMTYzNzNENTc0ODNBMEIw MTk4RTkxNDAeFw0yNTA2MTkwNzE2MDhaFw0yNTA2MjYwNzE2MDhaMBgxFjAUBgNV BAMTDTY4NTNiOTM4LTFkMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzi3VDl0rbF+FiHmeM9HYINIieEXOva3q9bmpJF011ki1Y2WQoHd3J54Twe6GS fVowIO6+fH7aboUBrGggpFjkmk66en7qbPTzy9OlISIrFyolja1NC7EZN2asUwD8 DS2Sq2UsPqh7zuuyPIclYNrxza3jBJ8ckFiVnkPiK6GUXdSE9ZeaLEw9KSCdYECN htm8rhnW7wg97gS905dcQmdhvBDk0Tu901+VoJXaWOZvO0XZvHQnR/m5lVRjdyQw TCypj/moqkBkG3ZD3i8cUmN+CgYvSxC2utNnqsP4RMZ1nJDkrIj/0+XbXIyRiZV0 yq45fAB73hrrRDfJUhhmCpGXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULKW/LktB ayQ/vWCANpsNq3m1x2gwHwYDVR0jBBgwFoAUqbvtLXO41L4BFjc9V0g6CwGY6RQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MEJCLzQxQ0Q1RDY2MjA5 RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0QkZqYzlWMGc2Q3dHWTZS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJ2dExYTzQxTDRCRmpjOVYwZzZDd0dZNlJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MEJCLzQxQ0Q1RDY2MjA5RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0 QkZqYzlWMGc2Q3dHWTZSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYePYNy5ee4QR6O8xubwxFNny3ShO7Ny0xaPLZrFyFG8Pg1br9UwNhv yWNyhCwOwc5Pvginx/3Zo8pVNmPmUXxlaXqSNOvSmAnd6K5Lgz4bTiOlDflOwGyg 5hRVDOp9mr2XQkSEK07rNMy6+lFw5Kp3xG8sD34oMWWpo/woEfXeZw0dKpgPUbjq QPIWYItz7q95EUTimXAQ5MLfhWIYMd2Y3LtRbiluqbG8IeG70kjWwvK+skvoTisA Xajg0Fw5LTwzKAq9gAeMGRz9owCgkGB5L3ONljYVDWin6QPHy1dOsHRSlaC+Y5ay rJf7QMqyyq/BjJyzB1Y4kGmj5V8B5rg= -----END CERTIFICATE-----Generated at Thu Jun 19 23:08:01 2025 by rpki-client