$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: t0Zfg3fQJvTz1hc7fEPR62gR95maZPzz73rmbuUbPOc= Subject key identifier: D4:CB:A8:DF:C1:B8:E7:BE:CA:30:78:89:1F:89:72:47:16:35:18:38 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 20AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 27D1 Signing time: Wed 06 Aug 2025 16:02:16 +0000 Manifest this update: Wed 06 Aug 2025 16:02:15 +0000 Manifest next update: Wed 13 Aug 2025 16:02:15 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: gb182Ji1EyORDzdChlnE3aYHHuE3N3RRVveHA7X5kV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8365 (0x20ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Aug 6 16:02:15 2025 GMT Not After : Aug 13 16:02:15 2025 GMT Subject: CN=68937c88-4f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:e7:94:2d:b4:75:b3:93:eb:10:10:13:48: 06:ae:9b:65:8f:fe:79:bb:c8:ba:ce:23:10:b2:1b: 7b:f9:5c:fa:1c:5c:72:d4:4a:d8:eb:90:64:06:1f: 61:7a:5c:e6:2c:5c:44:bd:8d:37:40:ec:62:31:60: 78:1f:d9:a8:50:a3:1c:31:38:bf:fa:28:95:5a:19: 2b:3f:1b:33:4f:80:f0:5c:9f:3d:77:aa:bd:45:e1: bb:e1:fa:46:bc:db:ad:81:92:19:ce:c1:7e:79:34: d1:66:f0:62:65:47:91:02:7b:c3:ac:2d:39:d6:c0: bb:39:01:59:20:72:bb:23:68:ee:46:b1:9b:16:15: 9c:77:49:81:aa:30:65:43:63:72:bc:24:39:61:97: 17:9d:4c:dc:61:68:91:86:e1:16:9e:18:12:5a:55: 67:27:1a:67:e4:f3:38:33:ea:19:ba:05:2e:28:61: 2c:ac:6c:a0:c0:be:71:03:1f:6f:4d:24:4c:ba:f4: 31:23:ee:e5:35:c5:31:7d:52:6a:d8:6e:58:cb:57: 3d:11:52:9c:35:6e:d5:7a:e2:13:34:c0:6a:12:64: 20:4f:9c:74:c6:28:1e:b6:71:e7:69:07:88:9f:1a: dd:d8:e6:d1:1c:13:ea:bf:a9:7d:a4:18:d5:90:c7: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CB:A8:DF:C1:B8:E7:BE:CA:30:78:89:1F:89:72:47:16:35:18:38 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:83:70:bc:01:67:d2:a3:a8:15:98:00:bb:4f:2e:6a:92:b4: 24:47:26:45:2c:5b:ca:22:b3:d6:2e:ca:31:d1:46:bc:b0:ed: a1:66:d1:34:ad:d8:42:d1:39:65:cb:82:ea:f8:fd:89:cf:e6: 94:ec:09:ad:e5:64:11:b7:19:c8:ac:5d:ed:0d:8f:43:da:bc: 9d:0e:3c:ec:8f:2e:fc:4b:76:60:79:a1:8b:4b:91:b0:43:c7: 4f:56:98:4b:48:17:e0:55:4b:d1:a2:13:a7:1a:67:31:f4:66: b9:40:4d:b7:ad:10:e7:b6:a7:97:60:8f:41:88:82:f3:0a:aa: e7:5a:79:c8:61:a3:17:5b:e6:1b:18:f5:ec:b8:c3:c8:9d:2f: e9:c9:f9:8c:42:92:3d:06:20:63:27:ce:17:86:2f:27:95:f1: 10:48:af:61:33:cb:bb:0e:35:19:4b:ab:7e:80:27:ae:c6:8a: 40:12:e5:b5:12:cd:f6:eb:a4:4f:fa:8e:7c:c8:3d:c1:ee:73: f2:4a:93:ee:e4:cd:cb:78:40:16:6c:a7:c3:8d:78:30:b7:fd: 31:9f:d5:a1:18:4e:0f:0e:d8:73:94:b9:93:9b:de:e4:9a:e7: c4:a2:d9:4b:73:d2:78:8c:06:ee:fd:55:aa:c7:51:b7:6e:5e: ae:bd:75:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUwODA2MTYwMjE1WhcNMjUwODEzMTYwMjE1WjAYMRYwFAYD VQQDEw02ODkzN2M4OC00ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TznlC20dbOT6xAQE0gGrptlj/55u8i6ziMQsht7+Vz6HFxy1ErY65BkBh9h elzmLFxEvY03QOxiMWB4H9moUKMcMTi/+iiVWhkrPxszT4DwXJ89d6q9ReG74fpG vNutgZIZzsF+eTTRZvBiZUeRAnvDrC051sC7OQFZIHK7I2juRrGbFhWcd0mBqjBl Q2NyvCQ5YZcXnUzcYWiRhuEWnhgSWlVnJxpn5PM4M+oZugUuKGEsrGygwL5xAx9v TSRMuvQxI+7lNcUxfVJq2G5Yy1c9EVKcNW7VeuITNMBqEmQgT5x0xigetnHnaQeI nxrd2ObRHBPqv6l9pBjVkMeRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTLqN/B uOe+yjB4iR+JckcWNRg4MB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdg3C8AWfSo6gVmAC7Ty5qkrQkRyZFLFvKIrPWLsox0Ua8sO2hZtE0 rdhC0Tlly4Lq+P2Jz+aU7Amt5WQRtxnIrF3tDY9D2rydDjzsjy78S3ZgeaGLS5Gw Q8dPVphLSBfgVUvRohOnGmcx9Ga5QE23rRDntqeXYI9BiILzCqrnWnnIYaMXW+Yb GPXsuMPInS/pyfmMQpI9BiBjJ84Xhi8nlfEQSK9hM8u7DjUZS6t+gCeuxopAEuW1 Es3266RP+o58yD3B7nPySpPu5M3LeEAWbKfDjXgwt/0xn9WhGE4PDthzlLmTm97k mufEotlLc9J4jAbu/VWqx1G3bl6uvXX0 -----END CERTIFICATE-----Generated at Thu Aug 7 05:03:21 2025 by rpki-client