$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: MsBhBy/zj2FHy8GCMQg/yvlk0i1QeQ5k2noN8g3BvzA= Subject key identifier: EC:62:A1:C2:F8:33:EA:A2:86:81:33:E5:8A:09:6F:05:07:A0:3A:34 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:35:13 +0000 Manifest this update: Sat 09 Aug 2025 08:35:12 +0000 Manifest next update: Sat 16 Aug 2025 08:35:12 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: 1U/1ZkTJr7aXUsSmAFdDrgQnu6z5jQvFw2LA3fy81oo=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Aug 9 08:35:12 2025 GMT Not After : Aug 16 08:35:12 2025 GMT Subject: CN=68970841-f62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:b9:7b:31:5f:5d:ab:ec:d0:28:3a:74:42: 15:1e:23:94:8e:7e:4c:98:74:47:4c:53:bf:36:31: 01:d3:52:86:64:e5:85:0e:58:29:09:a5:07:ba:d7: 33:57:42:16:e0:ea:4e:37:78:d6:6b:75:70:e0:33: bb:4d:16:d8:7e:03:a2:65:c2:bf:8d:1a:30:3f:fe: a7:26:10:c3:85:fd:66:4c:e1:c3:9f:88:6d:2a:c0: d8:fd:9c:54:19:19:6d:aa:25:aa:c2:79:e2:cd:36: 6a:9d:57:01:4e:87:b3:33:69:53:27:8c:c5:16:89: 06:1b:1f:c7:00:ba:a2:4f:a3:4d:16:a3:83:6b:4e: 79:96:34:fa:f1:9e:a9:6a:1a:5a:bc:7f:75:26:e1: f1:f2:e6:a1:df:72:53:8c:b8:ac:eb:81:b8:42:47: 8f:1a:10:89:1d:18:16:6e:19:cc:6e:ec:32:93:95: d2:6a:78:bc:94:95:42:50:01:fc:de:43:fa:72:e2: 4f:93:b2:8c:b6:de:a2:50:ea:64:14:5b:b5:c6:67: 94:a8:75:21:99:d3:7c:98:29:d9:f6:68:d8:27:9d: e8:15:c7:3d:62:a5:69:91:c5:81:74:83:e0:9d:39: e0:bf:8e:b5:8f:af:a2:c6:88:52:96:6f:06:47:2f: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:62:A1:C2:F8:33:EA:A2:86:81:33:E5:8A:09:6F:05:07:A0:3A:34 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:d8:b7:35:cb:87:a8:c8:c2:ca:58:ee:d6:cd:01:4b:1c:cb: 77:15:8e:93:47:83:07:10:fd:6b:a1:ef:66:c8:fc:0d:c1:4b: 55:ba:51:e0:de:00:db:ed:2d:f2:06:7a:fa:3b:a5:6e:86:1b: 55:7a:a9:b0:24:7a:d8:92:12:75:db:e3:39:4d:1a:5f:da:28: 8d:50:15:5c:67:e5:da:30:fb:3d:78:f0:29:55:f0:00:d1:c8: 1e:f8:78:cd:b1:0e:ad:d1:55:75:6a:8c:60:56:2f:f3:39:04: 0a:d1:b8:90:e2:7f:98:41:5e:07:69:65:85:bf:08:90:e0:d5: d0:c2:99:6b:99:dd:4f:eb:fb:9e:a7:05:ef:dd:ae:46:ee:23: 27:e8:f8:be:41:99:91:5c:a1:40:b0:9f:1a:12:8c:9e:e9:2a: 92:15:41:63:7c:5d:aa:5d:2e:7c:df:c6:ae:80:96:f1:43:2d: 70:3a:c5:f9:49:a2:c5:26:04:3e:de:dd:65:db:3e:25:02:26: 77:f1:79:9f:6a:96:8e:f5:38:46:3c:f5:16:3e:69:6a:1c:61: 0c:5b:d8:09:06:5a:99:50:16:84:7c:f1:76:eb:7b:11:be:29: 64:2d:2e:14:60:b4:71:b2:73:69:3f:76:7c:f4:e1:7d:4c:08: 91:f2:c6:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTA4MDkwODM1MTJaFw0yNTA4MTYwODM1MTJaMBgxFjAUBgNV BAMTDTY4OTcwODQxLWY2MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz0bl7MV9dq+zQKDp0QhUeI5SOfkyYdEdMU782MQHTUoZk5YUOWCkJpQe61zNX Qhbg6k43eNZrdXDgM7tNFth+A6Jlwr+NGjA//qcmEMOF/WZM4cOfiG0qwNj9nFQZ GW2qJarCeeLNNmqdVwFOh7MzaVMnjMUWiQYbH8cAuqJPo00Wo4NrTnmWNPrxnqlq Glq8f3Um4fHy5qHfclOMuKzrgbhCR48aEIkdGBZuGcxu7DKTldJqeLyUlUJQAfze Q/py4k+Tsoy23qJQ6mQUW7XGZ5SodSGZ03yYKdn2aNgnnegVxz1ipWmRxYF0g+Cd OeC/jrWPr6LGiFKWbwZHL0cTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7GKhwvgz 6qKGgTPliglvBQegOjQwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOnYtzXLh6jIwspY7tbNAUscy3cVjpNHgwcQ/Wuh72bI/A3BS1W6UeDe ANvtLfIGevo7pW6GG1V6qbAketiSEnXb4zlNGl/aKI1QFVxn5dow+z148ClV8ADR yB74eM2xDq3RVXVqjGBWL/M5BArRuJDif5hBXgdpZYW/CJDg1dDCmWuZ3U/r+56n Be/drkbuIyfo+L5BmZFcoUCwnxoSjJ7pKpIVQWN8XapdLnzfxq6AlvFDLXA6xflJ osUmBD7e3WXbPiUCJnfxeZ9qlo71OEY89RY+aWocYQxb2AkGWplQFoR88XbrexG+ KWQtLhRgtHGyc2k/dnz04X1MCJHyxsI= -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:24 2025 by rpki-client