$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json) Hash identifier: YBSeM5rx5NpUdEjVB6vQ4SUxfOncrtmt1k1+5sccWOQ= Subject key identifier: 70:2D:D9:C0:00:20:20:BA:2D:7E:8B:7A:97:E3:E4:71:D9:3D:B9:A8 Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:37:15 +0000 Manifest this update: Sat 09 Aug 2025 08:37:15 +0000 Manifest next update: Sat 16 Aug 2025 08:37:15 +0000 Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: knhgGX2fgu7Gd+lyipwzvai6JihY+KnHvxu9Qc972Wg=) 2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Validity Not Before: Aug 9 08:37:15 2025 GMT Not After : Aug 16 08:37:15 2025 GMT Subject: CN=689708bb-9990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:a0:7c:69:c4:8d:4d:6c:d8:19:26:8c:f8: e2:74:f4:8f:9d:1e:5e:d8:cb:e5:6e:d2:e7:a8:84: 0c:79:fd:b5:e1:d1:fb:29:3c:4e:e8:be:ff:da:49: 65:df:29:c1:0a:fb:9b:e2:27:0b:4a:b1:13:92:4b: 16:23:da:11:34:49:a8:9b:47:e2:72:73:a7:c9:c3: f0:6a:b2:eb:4a:4c:ae:43:b2:ac:b5:55:3f:fa:b9: e7:d3:7e:5a:8f:04:e2:3a:2b:b9:5e:a9:76:b7:57: 97:1d:59:32:ad:90:e9:49:53:c4:e0:f8:61:d0:89: ba:b1:1c:59:f6:dd:ac:29:5e:37:d4:21:73:ce:b9: 4c:b2:0d:01:84:d8:82:de:8a:f4:75:cc:5c:e4:c5: 9d:7a:7e:dd:33:0c:35:bf:e0:33:7d:bf:b2:a5:7c: 41:03:86:47:6b:b2:9c:95:28:12:b0:a5:69:d6:52: 07:1e:2b:2e:b8:c2:be:66:b0:ac:e0:26:bf:df:82: f1:92:c0:b9:ea:cf:d2:a0:60:95:95:71:f3:49:9a: 98:fd:96:7f:31:8a:40:e3:27:c6:b9:63:32:3f:64: 92:aa:04:37:69:c7:19:24:d6:4c:10:22:5d:ae:99: b2:82:b8:f7:06:5b:0f:c1:f7:f0:d2:90:40:49:7a: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:D9:C0:00:20:20:BA:2D:7E:8B:7A:97:E3:E4:71:D9:3D:B9:A8 X509v3 Authority Key Identifier: keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:50:fd:cb:eb:1b:18:7f:2c:ed:92:26:ee:59:89:94:19:e7: 88:56:ae:fb:2d:97:13:61:b9:ae:86:d2:40:3f:60:e0:95:ca: 1d:cb:82:b3:e6:48:82:4f:7c:ca:e7:78:57:3a:9e:ec:bb:49: 01:e6:fa:ee:29:2e:54:40:c7:bb:fb:c8:80:94:6f:00:fa:a8: 9d:8c:78:9c:fd:6f:51:25:6b:2d:79:2c:e1:46:2a:38:4c:04: 54:0b:d1:c6:3e:2a:5c:b3:37:1b:15:b0:4d:ab:9d:91:dc:8e: 87:8c:9e:95:20:17:ec:86:ba:e1:7f:82:fa:57:1b:1d:4a:a6: 91:fa:fd:4a:fb:84:01:9b:d3:e7:18:22:e3:34:4c:78:54:c2: dd:0c:32:ed:f7:e7:9d:3b:09:e5:c3:80:e1:bb:91:f1:8c:cc: fb:a5:45:13:f0:28:b5:4c:90:ae:50:ab:c7:f2:c5:51:70:11: 70:d3:93:de:4d:ce:26:4c:69:40:5d:c1:a4:a8:fe:fc:4a:93: 32:ba:64:42:f5:37:9f:af:d8:a8:5c:86:a0:6e:7c:b4:60:f0: 34:bc:26:a0:df:b4:5f:f6:0b:28:88:7a:3f:a1:1c:18:43:c5: c0:39:b2:56:57:27:d8:56:c2:5a:f7:aa:62:0a:16:b6:40:0f: d8:c8:4d:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDU4NzExMC8GA1UEBRMoQTlCNTNGN0I2MTk2MzE4NzA5Mjg5MDJGRjQ4NDc2NTc0 MUJEQTJFOTAeFw0yNTA4MDkwODM3MTVaFw0yNTA4MTYwODM3MTVaMBgxFjAUBgNV BAMTDTY4OTcwOGJiLTk5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIGKB8acSNTWzYGSaM+OJ09I+dHl7Yy+Vu0ueohAx5/bXh0fspPE7ovv/aSWXf KcEK+5viJwtKsROSSxYj2hE0SaibR+Jyc6fJw/BqsutKTK5Dsqy1VT/6uefTflqP BOI6K7leqXa3V5cdWTKtkOlJU8Tg+GHQibqxHFn23awpXjfUIXPOuUyyDQGE2ILe ivR1zFzkxZ16ft0zDDW/4DN9v7KlfEEDhkdrspyVKBKwpWnWUgceKy64wr5msKzg Jr/fgvGSwLnqz9KgYJWVcfNJmpj9ln8xikDjJ8a5YzI/ZJKqBDdpxxkk1kwQIl2u mbKCuPcGWw/B9/DSkEBJen9DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcC3ZwAAg ILotfot6l+Pkcdk9uagwHwYDVR0jBBgwFoAUqbU/e2GWMYcJKJAv9IR2V0G9oukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNTg3LzkwRjE0MzVBNjIx ODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWJVX2UyR1dNWWNKS0pBdjlJUjJWMEc5b3VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw NTg3LzkwRjE0MzVBNjIxODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVlj SktKQXY5SVIyVjBHOW91ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMZQ/cvrGxh/LO2SJu5ZiZQZ54hWrvstlxNhua6G0kA/YOCVyh3LgrPm SIJPfMrneFc6nuy7SQHm+u4pLlRAx7v7yICUbwD6qJ2MeJz9b1Elay15LOFGKjhM BFQL0cY+KlyzNxsVsE2rnZHcjoeMnpUgF+yGuuF/gvpXGx1KppH6/Ur7hAGb0+cY IuM0THhUwt0MMu335507CeXDgOG7kfGMzPulRRPwKLVMkK5Qq8fyxVFwEXDTk95N ziZMaUBdwaSo/vxKkzK6ZEL1N5+v2KhchqBufLRg8DS8JqDftF/2CyiIej+hHBhD xcA5slZXJ9hWwlr3qmIKFrZAD9jITdE= -----END CERTIFICATE-----Generated at Sun Aug 10 03:55:51 2025 by rpki-client