$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json) Hash identifier: wzrOqqM/YO9VhbKFb5euZ9eNdLz7TvO779lEFuzk66c= Subject key identifier: 50:9E:6A:74:8F:18:D4:24:C1:FB:A7:8A:56:87:3D:6A:4A:7C:4B:B0 Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft Manifest number: 03D1 Signing time: Mon 11 Aug 2025 00:46:51 +0000 Manifest this update: Mon 11 Aug 2025 00:46:50 +0000 Manifest next update: Mon 18 Aug 2025 00:46:50 +0000 Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: B1OX0Bb30BsE5RfRJ251x+J0DNU3+A4S/N4OIoga9UY=) 2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: Aug 11 00:46:50 2025 GMT Not After : Aug 18 00:46:50 2025 GMT Subject: CN=68993d7b-8d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:d3:f7:f7:18:8d:66:af:49:0c:8b:12:f1: b5:7f:75:5d:6b:41:29:95:92:22:5a:24:90:4f:d9: aa:b7:0b:37:e5:1f:c1:09:f5:2a:c8:8f:e1:0e:2e: ea:0b:0b:3c:94:95:4f:71:e6:b3:6a:6d:28:31:c1: fd:2a:48:e6:67:bc:11:97:ca:2f:64:ba:22:39:7c: f3:b9:76:17:0a:d3:d7:90:fe:41:1d:8e:e1:fb:61: 3a:20:67:b5:38:d6:62:52:ea:3a:94:00:cf:4e:a5: 98:f5:66:14:a0:a4:43:60:4a:42:a3:d6:5b:8f:a6: ef:1a:9f:b4:6d:54:4f:58:41:25:8b:67:63:81:49: c2:0d:f6:1b:d7:98:54:7a:5b:51:2e:65:b5:5f:e0: 5f:3c:b9:0b:cc:d4:7c:96:b0:c1:5c:c5:f1:7e:75: cd:c1:dc:06:d7:2e:f6:8a:7a:a4:82:91:42:e2:d7: 79:79:d7:07:17:ed:f9:2d:b9:ff:5f:7f:4b:76:30: 41:81:ae:3a:43:a9:6f:0d:9a:65:49:00:d1:d0:98: 41:30:21:ec:0c:c5:bf:03:a9:67:02:31:68:7c:a0: bb:cf:00:e8:15:92:02:53:e1:0f:9a:8c:3d:43:28: 60:b5:af:b5:7c:b0:95:06:7d:e2:49:dc:d5:33:74: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:6A:74:8F:18:D4:24:C1:FB:A7:8A:56:87:3D:6A:4A:7C:4B:B0 X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:55:9f:df:b0:e6:32:71:c4:66:a7:a7:60:03:3f:6a:03:91: 3f:d5:89:1f:42:46:a0:9d:4a:ec:75:ac:19:c6:38:71:0a:7f: 92:b0:45:02:58:59:38:ba:7a:5b:84:97:1b:ac:c5:74:9e:a4: 2b:60:60:67:c4:5b:c6:9b:04:ee:a5:21:8e:90:7e:34:5d:62: fe:18:3d:47:2f:3c:24:d4:0b:3c:f2:2f:4a:13:d8:84:fe:d1: 04:f3:4f:91:3f:f1:9c:2a:e1:9b:48:9b:ef:80:7c:1a:bc:5c: b9:7e:85:2c:78:4d:9f:5d:74:81:fc:7c:54:b6:f9:0a:44:7a: c2:9c:2a:8d:5f:6c:c0:23:d6:b3:db:03:de:70:42:65:68:f2: 1f:4c:03:55:79:29:f9:96:8d:5f:55:0e:76:fa:e6:30:3d:84: fe:bb:38:0c:15:7a:86:9d:d7:a4:9c:c5:47:fa:bc:8f:32:f7: 10:15:08:61:51:3d:c4:bf:31:7b:17:1f:c8:30:26:17:b2:98: fb:92:96:3f:77:b9:c5:d3:2f:7d:37:9b:7d:eb:95:0c:81:dd: 40:00:b0:1c:ed:f9:5c:2c:5b:69:29:9a:60:b6:30:79:b1:fe: 7a:68:06:9f:d8:12:d2:44:47:92:bb:97:9a:36:19:d0:2b:96: 14:21:6d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjUwODExMDA0NjUwWhcNMjUwODE4MDA0NjUwWjAYMRYwFAYD VQQDEw02ODk5M2Q3Yi04ZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8LT9/cYjWavSQyLEvG1f3Vda0EplZIiWiSQT9mqtws35R/BCfUqyI/hDi7q Cws8lJVPceazam0oMcH9KkjmZ7wRl8ovZLoiOXzzuXYXCtPXkP5BHY7h+2E6IGe1 ONZiUuo6lADPTqWY9WYUoKRDYEpCo9Zbj6bvGp+0bVRPWEEli2djgUnCDfYb15hU eltRLmW1X+BfPLkLzNR8lrDBXMXxfnXNwdwG1y72inqkgpFC4td5edcHF+35Lbn/ X39LdjBBga46Q6lvDZplSQDR0JhBMCHsDMW/A6lnAjFofKC7zwDoFZICU+EPmow9 Qyhgta+1fLCVBn3iSdzVM3QtJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCeanSP GNQkwfunilaHPWpKfEuwMB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhDOS83MzhEREZDNDk0QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1 OG5JQjlOdktyR3daRWhrQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNVZ/fsOYyccRmp6dgAz9qA5E/1YkfQkagnUrsdawZxjhxCn+SsEUC WFk4unpbhJcbrMV0nqQrYGBnxFvGmwTupSGOkH40XWL+GD1HLzwk1As88i9KE9iE /tEE80+RP/GcKuGbSJvvgHwavFy5foUseE2fXXSB/HxUtvkKRHrCnCqNX2zAI9az 2wPecEJlaPIfTANVeSn5lo1fVQ52+uYwPYT+uzgMFXqGndeknMVH+ryPMvcQFQhh UT3EvzF7Fx/IMCYXspj7kpY/d7nF0y99N5t965UMgd1AALAc7flcLFtpKZpgtjB5 sf56aAaf2BLSREeSu5eaNhnQK5YUIW1Q -----END CERTIFICATE-----Generated at Mon Aug 11 05:54:08 2025 by rpki-client