$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: QjuFofOFY76U1Rg7CqUWjmUXV/HQKlzy2qIuOf9+o4E= Subject key identifier: 3C:CC:68:E6:85:70:D1:73:E3:EB:82:4D:62:92:29:80:7C:2C:06:B5 Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 27 Signing time: Sat 09 Aug 2025 08:19:11 +0000 Manifest this update: Sat 09 Aug 2025 08:19:10 +0000 Manifest next update: Sat 16 Aug 2025 08:19:10 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: Vw+IWhKIDkvPCFnpoiVaR8rwZ2YbTSJN1iuZJmhBEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Aug 9 08:19:10 2025 GMT Not After : Aug 16 08:19:10 2025 GMT Subject: CN=6897047e-58d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:16:6a:d8:f1:af:ce:6d:42:cc:ff:55:70: 07:ae:53:5d:5e:a4:90:18:ba:83:81:d5:91:07:09: 64:bc:e5:73:b4:7a:0d:6a:d0:7a:ec:70:de:9f:21: 33:cc:24:96:c5:1f:6f:e7:ca:04:e7:8c:e6:46:6b: 0e:3b:16:f4:71:be:74:b8:c7:50:62:db:32:a4:81: 59:fd:c5:7e:65:6b:9a:ce:93:ec:72:ff:ee:f6:3d: c8:83:67:37:2b:79:8e:38:8d:fc:d6:e2:f4:9d:9a: 30:21:36:7f:30:0b:b9:6d:1c:c0:05:51:36:52:8b: 21:34:36:57:5e:af:68:67:d3:18:9e:f8:1b:ec:f9: 5f:f4:2e:45:72:7e:1b:3f:d2:da:fe:5e:03:ad:88: 96:bf:34:b2:6d:16:a4:f9:6e:78:16:15:61:b4:b0: e0:ab:61:6d:96:88:48:c2:0c:78:8d:80:59:03:12: 08:98:22:03:a8:6d:3e:1b:fe:cf:90:0d:42:6b:b2: 65:52:bf:47:92:bf:ac:49:5b:90:0e:94:5e:3b:01: 1a:5f:22:81:68:b9:3a:22:32:f1:d6:37:c4:96:57: df:f7:3d:b7:0a:b2:7f:d7:17:76:65:3a:7b:70:2a: b9:fe:15:e6:88:59:00:a9:48:e1:a2:6d:20:49:0c: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CC:68:E6:85:70:D1:73:E3:EB:82:4D:62:92:29:80:7C:2C:06:B5 X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:48:5a:23:e6:e6:7c:49:ef:ef:cc:62:78:6a:c4:2c:75:63: 95:8b:a4:9c:ca:bb:64:23:a6:c3:5b:a0:77:e9:a4:e6:8b:0e: 06:e1:7a:12:13:b6:b0:05:9e:8b:5e:16:20:20:5e:02:f1:d4: b3:9d:8b:64:70:aa:54:4f:03:cd:3b:b2:20:03:20:8f:e1:86: e9:2c:2f:9a:3a:59:fd:ec:e8:87:01:44:77:81:13:3e:92:d4: 01:76:c7:b8:ce:73:d8:9a:a7:5e:e6:4d:ca:65:34:e8:43:93: 22:a8:8f:e1:f6:28:26:07:dd:1f:92:b3:6b:64:4f:96:80:5e: 07:2a:f6:af:a3:4c:a3:28:a7:a9:34:90:7e:2c:54:d9:60:cc: 5b:3d:11:69:e3:99:8e:5f:c0:bc:b9:a7:fb:50:8b:f6:fb:82: 7f:df:a2:88:2e:0c:47:2e:49:7e:ae:d6:a5:08:00:01:23:42: c6:09:a3:83:d3:c6:bc:10:77:5d:ac:07:10:96:46:eb:a6:e2: 3a:9a:4f:73:8e:cf:f3:0e:96:7c:89:e0:8a:b4:33:d1:0e:f9: 9d:ce:fa:f9:95:ae:40:f2:06:c2:a0:07:f2:6f:07:a5:22:97: 88:63:f5:86:f2:4d:d5:7b:29:a4:e2:ed:fc:83:cd:36:d4:bb: 76:3f:05:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTA4MDkwODE5MTBaFw0yNTA4MTYwODE5MTBaMBgxFjAUBgNV BAMTDTY4OTcwNDdlLTU4ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfDhZq2PGvzm1CzP9VcAeuU11epJAYuoOB1ZEHCWS85XO0eg1q0HrscN6fITPM JJbFH2/nygTnjOZGaw47FvRxvnS4x1Bi2zKkgVn9xX5la5rOk+xy/+72PciDZzcr eY44jfzW4vSdmjAhNn8wC7ltHMAFUTZSiyE0Nlder2hn0xie+Bvs+V/0LkVyfhs/ 0tr+XgOtiJa/NLJtFqT5bngWFWG0sOCrYW2WiEjCDHiNgFkDEgiYIgOobT4b/s+Q DUJrsmVSv0eSv6xJW5AOlF47ARpfIoFouToiMvHWN8SWV9/3PbcKsn/XF3ZlOntw Krn+FeaIWQCpSOGibSBJDAspAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPMxo5oVw 0XPj64JNYpIpgHwsBrUwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBIWiPm5nxJ7+/MYnhqxCx1Y5WLpJzKu2QjpsNboHfppOaLDgbhehIT trAFnoteFiAgXgLx1LOdi2RwqlRPA807siADII/hhuksL5o6Wf3s6IcBRHeBEz6S 1AF2x7jOc9iap17mTcplNOhDkyKoj+H2KCYH3R+Ss2tkT5aAXgcq9q+jTKMop6k0 kH4sVNlgzFs9EWnjmY5fwLy5p/tQi/b7gn/fooguDEcuSX6u1qUIAAEjQsYJo4PT xrwQd12sBxCWRuum4jqaT3OOz/MOlnyJ4Iq0M9EO+Z3O+vmVrkDyBsKgB/JvB6Ui l4hj9YbyTdV7KaTi7fyDzTbUu3Y/BaM= -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:43 2025 by rpki-client