$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft File: qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json) Hash identifier: GnqZOpRvISI6xypPClXy6loiHLrFKo6W/JPJMlqSF+8= Subject key identifier: AA:39:52:3F:4B:08:C5:20:E3:09:56:DC:D8:43:05:22:45:1F:E3:CA Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D Certificate issuer: /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D Certificate serial: 0B21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft Manifest number: 0B21 Signing time: Wed 06 Aug 2025 19:32:21 +0000 Manifest this update: Wed 06 Aug 2025 19:32:21 +0000 Manifest next update: Wed 13 Aug 2025 19:32:21 +0000 Files and hashes: 1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: vd2ki6lcGmxaToaBbAtNcodxQRt0yftyjDLK5BN5v7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D Validity Not Before: Aug 6 19:32:21 2025 GMT Not After : Aug 13 19:32:21 2025 GMT Subject: CN=6893adc5-aff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:bd:45:4d:86:01:fa:af:48:41:ba:ed:b3: 7c:9e:93:fd:78:32:fb:79:6c:ee:9c:dc:cc:29:2f: 5e:f2:99:df:ec:fb:0d:f1:97:27:cd:9c:27:43:62: a7:46:47:e4:0c:31:d8:23:40:cd:0a:11:bc:6c:14: 32:8a:15:78:81:63:2b:a5:c5:74:28:05:5a:6a:cb: c0:7a:91:54:a3:57:89:6a:b4:ee:9b:ed:b9:64:b4: 25:87:a7:b7:ce:4d:d2:8d:07:4c:af:b0:c0:c9:25: 65:38:85:62:28:e0:af:23:2d:35:91:f7:b5:2f:3c: f2:21:34:04:69:cf:75:4f:cc:e8:53:9e:9a:51:7e: 35:9f:26:df:65:63:ee:8e:42:1e:bc:97:29:a9:ed: d6:a8:bb:8f:5c:04:24:0d:bd:93:fc:f4:7b:de:1f: d9:c2:74:90:10:97:a8:fa:78:c6:63:5c:66:c7:2e: 3e:98:e9:84:49:68:51:c6:e5:d2:92:b9:ad:c1:4d: e7:c9:01:fe:dd:76:31:69:65:b2:86:59:c4:2a:1c: 66:02:1f:7f:a8:20:61:01:d3:da:dc:00:e5:ea:d6: 8f:2e:bf:f5:28:87:05:84:e4:81:a0:ef:68:70:04: 5d:b5:25:a3:b4:c3:e3:1c:0c:ba:35:af:55:db:44: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:52:3F:4B:08:C5:20:E3:09:56:DC:D8:43:05:22:45:1F:E3:CA X509v3 Authority Key Identifier: keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:22:9e:fa:8f:33:0d:af:17:a9:db:43:b6:fe:76:84:67: 8e:0d:e5:e8:ba:c7:5e:3f:1e:90:ed:d1:24:fe:64:79:a9:c3: 86:37:a7:ab:36:96:bf:3a:d8:7a:6b:cb:1e:1c:ff:83:ab:26: e9:75:2f:4b:d1:ed:02:6b:49:4d:a0:12:78:94:29:c0:0b:d6: 5b:e7:41:e2:47:60:05:3d:8f:1e:19:70:7c:47:a0:4c:3f:dc: 00:eb:94:3c:bc:79:f4:07:75:2a:c8:74:c1:01:44:0c:37:56: 4d:13:1c:ad:48:c3:8b:a1:16:da:7b:3b:0a:5e:1f:27:99:27: d1:80:37:5f:52:56:a1:48:0d:66:6c:63:e2:28:ee:71:1f:4c: b1:ef:ab:9a:8e:24:a7:85:21:e7:32:b9:aa:dc:f1:76:ec:17: 5c:fd:29:66:dd:21:bb:42:fc:c7:1e:cf:e3:cc:67:55:dc:47: 3f:42:23:33:0c:72:05:52:70:e6:62:9d:29:47:de:af:cd:6e: 46:e1:c5:8f:27:09:1f:54:6d:e2:4c:42:ad:6c:26:41:2e:d0: a5:bc:af:80:9c:c0:b3:41:59:fc:33:b0:e1:2a:39:c7:a8:1c: 52:3f:2c:b1:c9:13:04:9f:85:96:e0:e4:af:78:86:c9:c3:90: 4f:b4:a0:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOEYxMTAvBgNVBAUTKEE5QTZBNjgxQUIwMUJBNTE1RjIxOUEyQ0FERUEwOTQ1 QjRBRDU5OUQwHhcNMjUwODA2MTkzMjIxWhcNMjUwODEzMTkzMjIxWjAYMRYwFAYD VQQDEw02ODkzYWRjNS1hZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAi9RU2GAfqvSEG67bN8npP9eDL7eWzunNzMKS9e8pnf7PsN8ZcnzZwnQ2Kn RkfkDDHYI0DNChG8bBQyihV4gWMrpcV0KAVaasvAepFUo1eJarTum+25ZLQlh6e3 zk3SjQdMr7DAySVlOIViKOCvIy01kfe1LzzyITQEac91T8zoU56aUX41nybfZWPu jkIevJcpqe3WqLuPXAQkDb2T/PR73h/ZwnSQEJeo+njGY1xmxy4+mOmESWhRxuXS krmtwU3nyQH+3XYxaWWyhlnEKhxmAh9/qCBhAdPa3ADl6taPLr/1KIcFhOSBoO9o cARdtSWjtMPjHAy6Na9V20Qx5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo5Uj9L CMUg4wlW3NhDBSJFH+PKMB8GA1UdIwQYMBaAFKmmpoGrAbpRXyGaLK3qCUW0rVmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE4Ri8xNjgzOTI0ODQz RTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVsRmZJWm9zcmVvSlJiU3RX WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhYW1nYXNCdWxGZklab3NyZW9KUmJTdFdaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE4Ri8xNjgzOTI0ODQzRTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVs RmZJWm9zcmVvSlJiU3RXWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/CKe+o8zDa8XqdtDtv52hGeODeXousdePx6Q7dEk/mR5qcOGN6er Npa/Oth6a8seHP+DqybpdS9L0e0Ca0lNoBJ4lCnAC9Zb50HiR2AFPY8eGXB8R6BM P9wA65Q8vHn0B3UqyHTBAUQMN1ZNExytSMOLoRbaezsKXh8nmSfRgDdfUlahSA1m bGPiKO5xH0yx76uajiSnhSHnMrmq3PF27Bdc/Slm3SG7QvzHHs/jzGdV3Ec/QiMz DHIFUnDmYp0pR96vzW5G4cWPJwkfVG3iTEKtbCZBLtClvK+AnMCzQVn8M7DhKjnH qBxSPyyxyRMEn4WW4OSveIbJw5BPtKBh -----END CERTIFICATE-----Generated at Fri Aug 8 00:06:53 2025 by rpki-client