$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: xBVlC3BhSunQAdOjMibfiJry8zldSiB9cx5h2ZO/CRk= Subject key identifier: 1A:8F:23:2A:0A:AC:1E:47:B3:59:BD:F1:71:9C:8A:CD:49:66:ED:01 Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 06A4 Signing time: Fri 08 Aug 2025 22:34:53 +0000 Manifest this update: Fri 08 Aug 2025 22:34:52 +0000 Manifest next update: Fri 15 Aug 2025 22:34:52 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: tNQW/o0ctTppIJ4O85vHsUIoehm86mNP4JEC95D1eOU=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Aug 8 22:34:52 2025 GMT Not After : Aug 15 22:34:52 2025 GMT Subject: CN=68967b8d-3917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:ea:67:e0:83:31:a0:21:74:3c:49:17:65: fd:1a:5c:5d:0b:d3:f8:98:b1:7d:fc:46:b6:6b:e3: d1:57:03:dd:fb:eb:4b:4a:1b:10:ed:bd:d4:b6:36: de:64:43:30:ce:75:54:71:0a:d7:19:d4:93:00:f6: 69:1b:18:12:ab:ab:ff:cb:aa:c0:1b:72:45:bb:ac: 68:1b:6c:c0:88:15:6f:72:0a:e6:20:27:d9:77:6a: 2f:e9:ab:3b:6f:c9:25:59:d0:88:f6:27:d9:cd:85: d6:a3:03:e6:59:c5:9b:0b:76:04:8e:48:2b:03:4f: 46:71:87:7d:53:95:32:c8:71:b3:9e:f7:60:0a:ca: 4f:57:e5:68:51:1a:59:47:2b:ec:20:8c:b9:8d:d0: f6:a8:2f:66:fd:68:87:f1:d5:42:fb:e2:8c:42:08: 98:f5:ee:7a:67:3d:34:db:cd:76:b5:fe:e8:28:b3: c5:f4:3c:21:6d:5d:69:72:72:97:49:5f:01:f2:60: fe:fd:20:dd:f8:45:09:ef:97:65:07:87:19:9c:57: b0:ec:c0:2a:36:1d:46:45:e8:8d:9d:ed:4e:3b:e4: c3:19:9f:39:11:50:f7:29:f3:02:e7:26:09:f0:8e: 20:dd:45:f2:fa:8c:e3:7e:ea:58:46:71:b4:62:17: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:23:2A:0A:AC:1E:47:B3:59:BD:F1:71:9C:8A:CD:49:66:ED:01 X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e0:02:e8:de:72:80:11:07:0a:0e:06:f8:ec:bc:30:00:2c: 5f:dd:28:dc:9e:07:ca:fb:67:e6:b2:17:07:ab:7f:0a:9a:67: 19:1d:33:10:c9:c7:e8:33:f3:d4:3d:96:08:1e:b7:51:cd:51: 93:d1:ab:a7:13:ce:9b:7e:15:2c:47:52:79:e5:c5:06:76:30: 28:15:e1:b9:4c:a5:2b:e4:07:b4:9a:ab:76:54:1d:37:06:6b: be:64:b4:d5:d3:52:b5:9b:21:8a:f2:58:d5:18:a7:0d:3f:65: 69:83:d0:8c:9f:f3:72:83:fb:98:1f:af:0b:54:1b:e6:d3:e3: 23:d5:4e:f1:5c:c2:0a:3b:e3:d5:73:ee:06:92:ab:1d:3f:0f: 24:bc:f0:a9:f1:dc:e5:9d:f9:51:82:0f:22:de:ba:1d:b8:16: ce:db:da:91:56:13:63:2e:2e:5f:25:ca:be:2b:c5:16:ae:8a: 0e:5d:3d:63:65:ab:e7:d2:ed:62:d5:69:09:40:96:00:e2:9d: 02:7b:ee:af:5c:46:c9:fd:67:a5:f7:bb:b5:fa:2b:61:8c:c7: b5:a0:44:57:dc:3b:db:1b:1b:66:b4:35:4b:99:75:50:c3:c9: 93:3b:5b:a3:26:3d:cd:af:e6:23:22:36:e3:98:5d:98:83:97: c3:89:45:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUwODA4MjIzNDUyWhcNMjUwODE1MjIzNDUyWjAYMRYwFAYD VQQDEw02ODk2N2I4ZC0zOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppXqZ+CDMaAhdDxJF2X9GlxdC9P4mLF9/Ea2a+PRVwPd++tLShsQ7b3Utjbe ZEMwznVUcQrXGdSTAPZpGxgSq6v/y6rAG3JFu6xoG2zAiBVvcgrmICfZd2ov6as7 b8klWdCI9ifZzYXWowPmWcWbC3YEjkgrA09GcYd9U5UyyHGznvdgCspPV+VoURpZ RyvsIIy5jdD2qC9m/WiH8dVC++KMQgiY9e56Zz002812tf7oKLPF9DwhbV1pcnKX SV8B8mD+/SDd+EUJ75dlB4cZnFew7MAqNh1GReiNne1OO+TDGZ85EVD3KfMC5yYJ 8I4g3UXy+ozjfupYRnG0YhdCgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqPIyoK rB5Hs1m98XGcis1JZu0BMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq4ALo3nKAEQcKDgb47LwwACxf3SjcngfK+2fmshcHq38KmmcZHTMQ ycfoM/PUPZYIHrdRzVGT0aunE86bfhUsR1J55cUGdjAoFeG5TKUr5Ae0mqt2VB03 Bmu+ZLTV01K1myGK8ljVGKcNP2Vpg9CMn/Nyg/uYH68LVBvm0+Mj1U7xXMIKO+PV c+4GkqsdPw8kvPCp8dzlnflRgg8i3roduBbO29qRVhNjLi5fJcq+K8UWrooOXT1j Zavn0u1i1WkJQJYA4p0Ce+6vXEbJ/Wel97u1+ithjMe1oERX3DvbGxtmtDVLmXVQ w8mTO1ujJj3Nr+YjIjbjmF2Yg5fDiUXE -----END CERTIFICATE-----Generated at Sun Aug 10 16:06:30 2025 by rpki-client