$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json) Hash identifier: d1q4D12CqUyxmPGCD4l/ItanOhqNjS5Ljha65zvOqoQ= Subject key identifier: 4B:67:FA:E8:4B:13:A5:89:A7:64:40:EC:EA:3D:06:98:70:9C:07:51 Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft Manifest number: 0E Signing time: Thu 07 Aug 2025 08:45:42 +0000 Manifest this update: Thu 07 Aug 2025 08:45:41 +0000 Manifest next update: Thu 14 Aug 2025 08:45:41 +0000 Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 4YYHAgIkr8OOEAvNfUXI0j0WiJjI6YbznqSpwhMlr/4=) 2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: 3+o7qebkkN1OKvUkerL7wnawvdJf5yEWl5f4sMyfaMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Validity Not Before: Aug 7 08:45:41 2025 GMT Not After : Aug 14 08:45:41 2025 GMT Subject: CN=689467b5-409c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:24:ca:f6:f1:85:08:2c:98:d2:cb:b5:99: c8:7b:67:1d:64:66:ce:f8:5d:d8:0b:b8:55:a6:c1: 9b:9e:cc:9f:0d:be:f5:e2:9f:6e:af:7d:73:2f:b3: d1:98:b8:4d:dc:28:0f:30:f3:be:5c:39:e2:fd:64: f6:ec:1d:08:b5:30:42:4f:f3:15:0e:0b:47:95:d4: d4:15:c6:b2:93:06:93:de:36:bb:b3:71:f0:84:ac: ff:25:48:6d:b8:b5:51:f7:47:29:78:6e:4b:80:33: b5:18:b3:63:02:d6:b7:8b:57:ba:62:5c:45:f8:07: 07:c9:60:f8:a2:6b:6e:3c:72:84:1c:25:8f:c4:6d: 48:94:ee:0f:89:e9:2d:e0:27:71:78:c8:0e:81:b1: 1f:2f:c7:bc:d2:cf:c8:8e:da:1f:ee:78:9c:e0:34: 0e:48:0c:c2:b5:b3:42:2d:b7:89:f2:eb:6f:57:22: eb:d2:8e:21:11:e5:d3:fb:d3:25:73:ab:07:c5:fc: 33:cc:f5:a4:bc:8e:9c:01:fd:8f:c9:3a:bf:d1:2d: 65:30:e4:3d:a3:bb:af:cd:de:ac:fa:ef:7a:97:68: 3b:73:3a:3a:7f:5b:96:c9:ef:08:b2:87:54:20:11: 20:27:5c:12:db:92:fc:2b:49:24:02:e0:54:28:14: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:67:FA:E8:4B:13:A5:89:A7:64:40:EC:EA:3D:06:98:70:9C:07:51 X509v3 Authority Key Identifier: keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:01:a2:c3:6f:85:ce:cd:b6:9e:96:ec:4c:ac:f9:0c:8e:b3: fe:f2:e1:35:87:2b:39:30:83:11:fb:9f:4c:8f:23:f3:f7:a9: ea:38:ad:38:ea:49:22:14:0a:ac:3d:3b:a3:ae:e0:5c:df:55: 28:9e:92:fe:d9:ab:17:e6:84:34:44:46:89:73:ac:a8:f5:3e: 7a:f8:63:34:2a:e5:a1:99:f7:1e:ae:24:8d:8c:be:c2:ac:20: 5f:93:94:9d:e5:70:75:cb:9c:56:26:ee:cc:86:86:fe:39:fd: 91:c2:07:e9:8b:27:f3:92:94:36:b4:59:89:a1:26:e3:3e:8e: ea:8c:fd:85:d4:dd:60:b3:8a:30:81:a2:cf:f8:bc:9a:a4:d1: 41:3f:aa:58:e7:3d:9e:53:50:dd:46:7c:21:8d:a4:b0:44:1b: 20:00:a4:c8:f3:51:96:e3:3c:03:d9:a3:6f:ae:22:37:93:0f: 19:34:cf:84:1e:f3:30:c9:61:1f:22:bb:b3:38:ad:89:8d:22: 79:34:59:f9:d0:63:25:bc:a5:e4:77:b0:bd:9b:1e:b7:36:e1: 77:f5:ee:2b:ad:66:f0:f3:f2:3a:1f:2a:5c:50:17:7d:f7:9f: 32:a0:4c:2e:d5:bb:df:e8:68:6d:16:36:7e:bb:21:09:0e:16: 77:11:d0:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2 NDIzNjJBMjAeFw0yNTA4MDcwODQ1NDFaFw0yNTA4MTQwODQ1NDFaMBgxFjAUBgNV BAMTDTY4OTQ2N2I1LTQwOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClwiTK9vGFCCyY0su1mch7Zx1kZs74XdgLuFWmwZuezJ8NvvXin26vfXMvs9GY uE3cKA8w875cOeL9ZPbsHQi1MEJP8xUOC0eV1NQVxrKTBpPeNruzcfCErP8lSG24 tVH3Ryl4bkuAM7UYs2MC1reLV7piXEX4BwfJYPiia248coQcJY/EbUiU7g+J6S3g J3F4yA6BsR8vx7zSz8iO2h/ueJzgNA5IDMK1s0Itt4ny629XIuvSjiER5dP70yVz qwfF/DPM9aS8jpwB/Y/JOr/RLWUw5D2ju6/N3qz673qXaDtzOjp/W5bJ7wiyh1Qg ESAnXBLbkvwrSSQC4FQoFCpNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS2f66EsT pYmnZEDs6j0GmHCcB1EwHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2LzZCNzI3RjMyNjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVq Sk82T2dfcE92RUdRallxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8BosNvhc7Ntp6W7Eys+QyOs/7y4TWHKzkwgxH7n0yPI/P3qeo4rTjq SSIUCqw9O6Ou4FzfVSiekv7ZqxfmhDRERolzrKj1Pnr4YzQq5aGZ9x6uJI2MvsKs IF+TlJ3lcHXLnFYm7syGhv45/ZHCB+mLJ/OSlDa0WYmhJuM+juqM/YXU3WCzijCB os/4vJqk0UE/qljnPZ5TUN1GfCGNpLBEGyAApMjzUZbjPAPZo2+uIjeTDxk0z4Qe 8zDJYR8iu7M4rYmNInk0WfnQYyW8peR3sL2bHrc24Xf17iutZvDz8jofKlxQF333 nzKgTC7Vu9/oaG0WNn67IQkOFncR0Po= -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:22 2025 by rpki-client