$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json) Hash identifier: BI7Urlf4n394Vtz3vXl6kHpN6JXLKxT8kOtJ1XIdNmg= Subject key identifier: 4B:4A:B6:A6:C1:52:E0:21:A2:0D:F0:3B:3F:3F:B1:13:BF:60:14:5D Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft Manifest number: 0812 Signing time: Thu 12 Jun 2025 20:34:52 +0000 Manifest this update: Thu 12 Jun 2025 20:34:52 +0000 Manifest next update: Thu 19 Jun 2025 20:34:52 +0000 Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: 1ShFra2XZK7SS3rQ8hRkkrkVSMQuzDnpj1BT75TlzUQ=) 2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: b5aUsASBnsIOTpMPwep8wURlLe5syVCTwDPawKkUzSQ=) 3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: uwJuVm6AlMvySENN89snQUpf9n5HdrFH2LmfnmM6GGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Jun 12 20:34:52 2025 GMT Not After : Jun 19 20:34:52 2025 GMT Subject: CN=684b39ec-79e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:c6:eb:3e:cb:bc:b5:a9:6f:d4:ac:77:78: 9d:17:72:bf:0a:a9:2a:0a:5f:da:14:b4:b7:cc:1a: bb:92:6f:64:47:b4:31:ff:d9:7b:9e:d4:15:e6:80: a6:48:d1:66:c7:93:68:a7:3c:ad:f2:d4:6a:3f:b5: b8:9e:5a:71:da:9a:7e:9a:65:17:48:a6:f6:7a:1c: 44:09:e8:bd:f7:76:6d:70:11:82:9d:bc:a4:64:67: d5:c2:23:19:00:fa:d9:b0:41:3e:49:c6:8d:4e:ce: 79:66:ae:fb:0d:ea:70:f6:c8:9c:12:91:cf:bd:c7: 7c:68:95:ae:c8:7e:11:d9:67:36:d0:c6:10:f7:b2: 3d:70:d0:94:ba:17:7b:0b:31:ba:bf:1e:25:87:c4: 8f:5c:24:67:43:33:58:32:95:8a:6b:61:8d:87:02: 5a:02:07:07:ea:ef:35:a7:03:9f:08:44:ac:ff:2f: 28:ba:a9:11:e0:d0:a3:84:47:a2:15:56:f8:00:46: 61:0a:74:5c:12:92:8c:38:94:7d:24:15:53:78:4f: 47:8b:c9:f9:44:c2:a7:9c:36:c8:c1:b6:cb:f7:c3: 28:82:96:d8:6e:9f:d5:5a:ec:1c:b2:0a:f8:c8:87: 50:13:ec:ee:45:e2:49:35:f3:28:ff:f0:cc:ea:24: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4A:B6:A6:C1:52:E0:21:A2:0D:F0:3B:3F:3F:B1:13:BF:60:14:5D X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:77:93:ce:87:d9:50:db:f9:78:aa:bb:2c:e9:b4:1b:4c:1f: 9d:4c:e2:a2:41:2b:dc:ce:c8:c9:42:92:66:0a:b3:a5:cb:60: 6a:37:bb:54:64:81:2a:f0:40:dc:68:26:63:c0:7a:ab:b0:20: 63:b1:68:4d:b7:15:0d:64:d0:7b:75:02:c8:21:ca:74:8d:73: d6:7d:01:db:56:68:ab:6a:77:78:a1:2b:55:37:39:b7:d1:ea: 59:ec:fd:73:72:56:d1:4d:f2:d8:a7:1f:a4:4c:62:14:99:0c: ef:66:fd:50:87:5e:31:bd:a2:f9:b3:6f:f1:74:1a:6b:9a:d4: 93:0a:bb:ce:c0:bd:d2:99:46:26:40:20:25:b0:9d:dc:b4:99: 75:7f:22:20:e7:80:08:9e:ad:40:15:0b:af:0c:2c:00:6b:a8: 65:d1:5c:01:b6:20:79:13:ab:e6:78:33:70:0b:2b:b5:6a:72: 6b:69:21:4d:a3:36:9e:34:fb:cc:53:8f:cc:5f:46:98:9f:da: 4f:5a:f5:2d:f5:f0:98:ed:75:2c:e5:38:59:98:af:ea:5c:8a: 26:eb:93:5d:78:0d:a4:91:40:9a:d6:b9:72:4a:ea:bd:26:8b: 2f:40:34:35:db:d8:e9:26:68:8f:97:ac:f9:60:0a:9c:78:d5: 2a:c0:93:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjUwNjEyMjAzNDUyWhcNMjUwNjE5MjAzNDUyWjAYMRYwFAYD VQQDEw02ODRiMzllYy03OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1LG6z7LvLWpb9Ssd3idF3K/CqkqCl/aFLS3zBq7km9kR7Qx/9l7ntQV5oCm SNFmx5Nopzyt8tRqP7W4nlpx2pp+mmUXSKb2ehxECei993ZtcBGCnbykZGfVwiMZ APrZsEE+ScaNTs55Zq77Depw9sicEpHPvcd8aJWuyH4R2Wc20MYQ97I9cNCUuhd7 CzG6vx4lh8SPXCRnQzNYMpWKa2GNhwJaAgcH6u81pwOfCESs/y8ouqkR4NCjhEei FVb4AEZhCnRcEpKMOJR9JBVTeE9Hi8n5RMKnnDbIwbbL98MogpbYbp/VWuwcsgr4 yIdQE+zuReJJNfMo//DM6iR0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtKtqbB UuAhog3wOz8/sRO/YBRdMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRd5POh9lQ2/l4qrss6bQbTB+dTOKiQSvczsjJQpJmCrOly2BqN7tU ZIEq8EDcaCZjwHqrsCBjsWhNtxUNZNB7dQLIIcp0jXPWfQHbVmirand4oStVNzm3 0epZ7P1zclbRTfLYpx+kTGIUmQzvZv1Qh14xvaL5s2/xdBprmtSTCrvOwL3SmUYm QCAlsJ3ctJl1fyIg54AInq1AFQuvDCwAa6hl0VwBtiB5E6vmeDNwCyu1anJraSFN ozaeNPvMU4/MX0aYn9pPWvUt9fCY7XUs5ThZmK/qXIom65NdeA2kkUCa1rlySuq9 JosvQDQ129jpJmiPl6z5YAqceNUqwJPX -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:17 2025 by rpki-client