$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft File: qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json) Hash identifier: UaNpXo/zD7G+RCIM2Wd9LMUW2naQeo2Sl4ZWZjJ8Zyk= Subject key identifier: BC:5D:A6:1B:18:13:A9:A6:02:91:F0:CC:D7:F6:7E:D6:F8:09:F4:BC Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 357E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft Manifest number: 3520 Signing time: Fri 22 Aug 2025 14:18:52 +0000 Manifest this update: Fri 22 Aug 2025 14:18:51 +0000 Manifest next update: Fri 29 Aug 2025 14:18:51 +0000 Files and hashes: 1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: XF7D4fr5BJnFZjSP3YU2tSMSt+MwisO5N9fzUrM85WM=) 2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: F5aTMcUYsmdixUm9yQzG1VwvhsqYUF6nPzXXk9qwa44=) 3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: xfrnwW4CE8rEb6G9IL8uJB1Hv4mR3WOgjrI080cSfHc=) 4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: qedOB7JdFBTfxxMEPND3tzfrdQHqBUmjzqhuDo8ig1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13694 (0x357e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: Aug 22 14:18:51 2025 GMT Not After : Aug 29 14:18:51 2025 GMT Subject: CN=68a87c4c-a973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:88:e6:ca:43:26:97:c8:c1:1a:fb:9a:54: e6:ac:8b:8e:dc:36:7a:10:66:2b:07:de:58:45:f6: e2:d0:95:2b:03:0e:cb:fc:77:c4:3a:08:dc:fb:b0: 65:2f:68:f6:04:48:46:96:93:54:ee:9a:0b:36:bd: 0c:30:74:95:16:d3:36:cb:50:2f:fe:ed:3c:7d:4c: 16:cd:df:c4:8b:48:7c:46:c3:6c:f7:af:a7:73:0a: 35:06:28:fc:f8:e1:11:c9:cb:07:42:b4:b5:72:bc: 0f:81:e9:e6:6a:a7:69:f1:10:54:16:58:3f:70:ea: dd:fa:7d:5e:3f:61:b3:46:43:b3:28:df:06:36:b7: 59:74:bb:45:9b:4e:76:f3:f0:41:e6:f2:70:85:bd: a9:0d:bf:27:b4:6a:87:fe:b9:ca:f4:31:4a:47:6b: 8d:cd:58:f0:3a:0a:22:4c:50:54:40:52:b3:fc:a2: de:8e:7e:de:ea:40:bd:f1:19:41:7e:46:fd:07:9f: c2:3f:bf:e9:52:23:0d:82:54:51:8a:c6:c3:4b:93: 1e:55:cd:93:53:3e:a7:39:c1:a8:12:68:19:7c:ca: c9:55:6c:3b:6c:33:50:e3:bf:62:7c:c5:8d:a5:f8: 80:27:2c:ab:6f:d5:4f:3d:1b:37:c2:94:7c:16:ca: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5D:A6:1B:18:13:A9:A6:02:91:F0:CC:D7:F6:7E:D6:F8:09:F4:BC X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:66:5e:47:68:5c:b8:fc:3b:bb:52:7b:5c:a6:3a:09:56:85: 8f:55:de:07:01:21:8f:c7:26:7a:4e:94:ea:f0:5a:03:69:a7: 4b:c1:af:9f:65:64:08:d0:05:2b:eb:81:9a:80:76:73:5c:8f: d4:1e:b7:db:cc:0f:be:e3:41:2b:0f:39:c9:d1:59:55:2e:70: f4:fd:18:e5:37:b6:d3:c2:bf:13:cf:2a:b8:61:4c:7e:03:92: 65:f8:de:c0:a9:32:bc:4c:11:cd:38:f6:7b:87:3b:9f:74:87: 6e:ff:92:34:10:16:2c:db:e6:e6:24:1e:ad:e8:61:32:73:52: d6:0c:bd:2b:bd:fa:02:30:ca:29:b6:78:71:fd:ed:41:73:64: 71:da:9f:ca:20:9d:a5:b1:22:ad:e6:ba:a3:39:9e:c0:21:69: 4b:85:64:1a:f1:70:07:86:bb:2a:c9:96:da:7c:1c:ed:62:21: cf:a6:0c:60:7b:04:f5:15:13:39:11:be:07:ec:6e:9c:e0:6c: 4a:2d:be:dc:69:d1:e9:80:a7:d5:ac:19:23:0b:9e:ba:99:c6: be:93:07:fe:05:11:c2:48:4f:e8:0d:ae:a0:a7:c8:92:aa:f5: 1b:15:b8:3e:d6:4e:70:7f:bd:f0:27:51:f7:ea:11:3b:1a:2b: b9:e0:73:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjUwODIyMTQxODUxWhcNMjUwODI5MTQxODUxWjAYMRYwFAYD VQQDEw02OGE4N2M0Yy1hOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw46I5spDJpfIwRr7mlTmrIuO3DZ6EGYrB95YRfbi0JUrAw7L/HfEOgjc+7Bl L2j2BEhGlpNU7poLNr0MMHSVFtM2y1Av/u08fUwWzd/Ei0h8RsNs96+ncwo1Bij8 +OERycsHQrS1crwPgenmaqdp8RBUFlg/cOrd+n1eP2GzRkOzKN8GNrdZdLtFm052 8/BB5vJwhb2pDb8ntGqH/rnK9DFKR2uNzVjwOgoiTFBUQFKz/KLejn7e6kC98RlB fkb9B5/CP7/pUiMNglRRisbDS5MeVc2TUz6nOcGoEmgZfMrJVWw7bDNQ479ifMWN pfiAJyyrb9VPPRs3wpR8FsoAzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxdphsY E6mmApHwzNf2ftb4CfS8MB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1 TTNfVDE2bG1iRmpMakR0UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZl5HaFy4/Du7UntcpjoJVoWPVd4HASGPxyZ6TpTq8FoDaadLwa+f ZWQI0AUr64GagHZzXI/UHrfbzA++40ErDznJ0VlVLnD0/RjlN7bTwr8Tzyq4YUx+ A5Jl+N7AqTK8TBHNOPZ7hzufdIdu/5I0EBYs2+bmJB6t6GEyc1LWDL0rvfoCMMop tnhx/e1Bc2Rx2p/KIJ2lsSKt5rqjOZ7AIWlLhWQa8XAHhrsqyZbafBztYiHPpgxg ewT1FRM5Eb4H7G6c4GxKLb7cadHpgKfVrBkjC566mca+kwf+BRHCSE/oDa6gp8iS qvUbFbg+1k5wf73wJ1H36hE7Giu54HNy -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:32 2025 by rpki-client