$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft File: qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json) Hash identifier: rzXqweZH5lTDY21pa8riDnObK2LjwP38p5wfYicv3t4= Subject key identifier: 4C:B0:6C:1E:44:22:41:E3:E4:A5:DE:35:25:FD:6D:F8:2F:50:60:5E Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 Certificate issuer: /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft Manifest number: 23 Signing time: Tue 01 Jul 2025 08:36:19 +0000 Manifest this update: Tue 01 Jul 2025 08:36:18 +0000 Manifest next update: Tue 08 Jul 2025 08:36:18 +0000 Files and hashes: 1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: B6eFwjYWHtVaE3xukvexOCJPNm7L47/EeyRN70KHPXc=) 2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Validity Not Before: Jul 1 08:36:18 2025 GMT Not After : Jul 8 08:36:18 2025 GMT Subject: CN=68639e03-8d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:fc:83:93:dc:ae:8a:70:3e:c4:aa:fb:04: 3e:50:e8:05:c0:0d:80:0c:14:e4:1d:1c:a4:4c:d5: 76:9a:0e:82:fe:cb:1a:87:d8:05:e7:2f:ee:5c:b8: 8e:ed:a7:3c:be:dd:22:c4:83:4c:df:69:9e:75:d6: d3:3d:9e:42:26:c4:d3:f4:24:fe:e3:1f:86:7b:e1: 5e:25:d8:19:d3:4e:ba:07:b1:c0:38:ca:59:93:a7: af:32:11:48:8b:26:c2:7f:11:c2:7c:b4:62:f6:15: 2e:f3:77:ab:19:dc:66:04:9b:3b:d6:7f:f2:be:4d: 4e:fa:9b:c3:6e:14:c7:2e:94:6b:2d:56:f7:8f:c1: 4e:9b:d4:46:75:44:d9:85:10:3d:96:76:c4:f7:f3: 48:d4:47:f0:44:61:ef:0a:af:e9:1b:9e:9c:6f:dd: c2:3a:d6:27:a6:05:31:d4:2d:09:bd:12:e2:03:64: c7:cd:56:c0:7e:e3:c6:71:57:ea:16:f5:d0:88:a9: df:77:18:06:82:fb:0d:65:e4:9f:c2:55:56:77:59: 22:42:7f:4a:d5:ab:bf:31:73:d6:5c:90:7e:af:6a: 9f:6c:47:b8:f9:80:b5:2b:b1:1a:6f:aa:26:43:9f: 74:00:5a:12:2e:77:29:4c:e0:08:51:29:82:9f:70: ef:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:6C:1E:44:22:41:E3:E4:A5:DE:35:25:FD:6D:F8:2F:50:60:5E X509v3 Authority Key Identifier: keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a5:77:5c:34:d4:2d:58:c7:9d:52:62:df:57:6b:a9:ed:4c: c3:14:11:7d:05:54:5a:77:51:20:b9:ab:dc:68:8c:7c:eb:f1: 44:76:bf:49:17:26:2d:f1:88:56:d7:e9:53:b4:c0:e3:fd:69: f7:31:88:86:12:eb:2f:a9:f2:a2:cc:1e:aa:f9:4a:0a:b2:58: eb:d2:4b:52:f0:f3:df:ab:03:93:46:e6:02:07:13:2c:39:a0: ac:30:64:41:bc:19:a0:6b:f9:6c:f0:ec:ed:79:a6:e2:8f:0a: 1b:6b:96:1d:ff:5b:e8:80:25:1c:41:cd:0e:71:cd:b5:72:2e: 9e:6a:68:b7:ec:dd:8e:6d:0f:f8:76:70:b1:96:3a:08:be:8c: 87:a2:51:ff:49:b5:fd:7a:2f:5c:df:ae:06:2b:98:e9:d4:1a: 5f:d6:e7:2d:17:3f:51:98:16:ae:d6:35:47:c5:09:04:cb:7f: c5:3a:4f:72:66:87:2c:a9:39:fa:21:99:9e:21:9e:d0:9c:10: 4a:74:5b:ad:87:dd:0a:7c:7e:54:13:c9:9f:49:57:61:96:97: 74:76:7a:73:97:9c:72:ed:c4:49:98:85:f3:b7:f9:20:6f:aa: 8d:06:04:cc:cb:86:6f:64:40:59:81:33:87:1c:b5:6f:fe:89: a6:36:46:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjBCQjExMC8GA1UEBRMoQTlCQkVEMkQ3M0I4RDRCRTAxMTYzNzNENTc0ODNBMEIw MTk4RTkxNDAeFw0yNTA3MDEwODM2MThaFw0yNTA3MDgwODM2MThaMBgxFjAUBgNV BAMTDTY4NjM5ZTAzLThkNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkWPyDk9yuinA+xKr7BD5Q6AXADYAMFOQdHKRM1XaaDoL+yxqH2AXnL+5cuI7t pzy+3SLEg0zfaZ511tM9nkImxNP0JP7jH4Z74V4l2BnTTroHscA4ylmTp68yEUiL JsJ/EcJ8tGL2FS7zd6sZ3GYEmzvWf/K+TU76m8NuFMculGstVvePwU6b1EZ1RNmF ED2WdsT380jUR/BEYe8Kr+kbnpxv3cI61iemBTHULQm9EuIDZMfNVsB+48ZxV+oW 9dCIqd93GAaC+w1l5J/CVVZ3WSJCf0rVq78xc9ZckH6vap9sR7j5gLUrsRpvqiZD n3QAWhIudylM4AhRKYKfcO/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTLBsHkQi QePkpd41Jf1t+C9QYF4wHwYDVR0jBBgwFoAUqbvtLXO41L4BFjc9V0g6CwGY6RQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MEJCLzQxQ0Q1RDY2MjA5 RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0QkZqYzlWMGc2Q3dHWTZS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJ2dExYTzQxTDRCRmpjOVYwZzZDd0dZNlJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MEJCLzQxQ0Q1RDY2MjA5RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0 QkZqYzlWMGc2Q3dHWTZSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEild1w01C1Yx51SYt9Xa6ntTMMUEX0FVFp3USC5q9xojHzr8UR2v0kX Ji3xiFbX6VO0wOP9afcxiIYS6y+p8qLMHqr5SgqyWOvSS1Lw89+rA5NG5gIHEyw5 oKwwZEG8GaBr+Wzw7O15puKPChtrlh3/W+iAJRxBzQ5xzbVyLp5qaLfs3Y5tD/h2 cLGWOgi+jIeiUf9Jtf16L1zfrgYrmOnUGl/W5y0XP1GYFq7WNUfFCQTLf8U6T3Jm hyypOfohmZ4hntCcEEp0W62H3Qp8flQTyZ9JV2GWl3R2enOXnHLtxEmYhfO3+SBv qo0GBMzLhm9kQFmBM4cctW/+iaY2Rk8= -----END CERTIFICATE-----Generated at Thu Jul 3 04:31:32 2025 by rpki-client