$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft File: QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json) Hash identifier: IfnNb5eDwdbYVe4hOngk/MGW6mNsV5pxAM6v8vEDuHE= Subject key identifier: 93:9E:72:1E:9C:06:EB:F6:DD:D1:D3:60:A7:23:76:C1:CE:EC:4C:D7 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 2636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft Manifest number: 1A64 Signing time: Fri 22 Aug 2025 17:44:08 +0000 Manifest this update: Fri 22 Aug 2025 17:44:07 +0000 Manifest next update: Fri 29 Aug 2025 17:44:07 +0000 Files and hashes: 1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: 1Rh3vEtPKycsIceV5GZCcnfWgMBHnFjQQsHBehzdBUg=) 2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: xde9rcF7arjQKSpEl1z3GPvE6yFSAQhR41hdAHdnobY=) 3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: 7ymijPhFFrjNOoEBbG9QGUazILg2gwyz53xd9qGXZ7E=) 4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: an2OvMEZY7jpIn8qhWkz+zXkJdczOHSo4w/pfCuVCtg=) 5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: 0byjmZ6ihSM1FC2/IAcTNGJ9h4MRrSpansIbltNvY/U=) 6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: jAt/+7M8Clzxb8DrcJYXVCG7UBr2uwZCX3gVdw4Zrwk=) 7: B53FD334575411ECAA094876C4F9AE02.roa (hash: 9aWzxH45IEjXcE34e4q4CPPoVSXphSOVs+vWi0Mf79c=) 8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: 2xQSKnH/mFv+v9sFhs1Bx4fGKhwbaniIRH6+EJCsrJc=) 9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: S/V+FSIqi+kUgXCiZkiOqjGpUPU2a8XYGBOwtxaDH4w=) 10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: Whd7O0h6vLYtsYWJCJz6bRkTMOgBubGgIflVOzkj9YU=) 11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: XsCNsgirp/F7q8G+gXiobB8kBnUNk1PBpyNnvgrKBZg=) 12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: JxJpLnF2A58P7LiuOMa3qMF+uUW1f31BWjEOfa4AY0c=) 13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: LnuO0pX8BwvbmAbZ4dXFrMEQsulixDbbXmR6ahAH9XQ=) 14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: LsoEpwMYLf2Jasklfj3/l8n9ySvUmMIt+P8enVxoluY=) 15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: H84rUZ3KdPkBY7e6ffHfuRUehvtnIe+74xC7gkrHMCs=) 16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: ZSMVzkxJl+x2Ge+EyHiRlh5wNiGvkpQlAUSdvcGiDU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9782 (0x2636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Aug 22 17:44:07 2025 GMT Not After : Aug 29 17:44:07 2025 GMT Subject: CN=68a8ac67-6930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:8e:c6:ba:f0:72:3c:91:4d:47:f1:84:10: 40:90:88:2f:d7:d3:38:d8:6d:c9:54:d0:fd:0c:2d: ec:9a:c0:37:ab:7d:7c:78:1e:21:61:70:2d:52:5d: ed:fe:ef:b7:8b:df:28:86:c6:e7:e8:a1:77:21:8e: d4:af:b5:99:cc:65:37:b6:7d:d4:a6:7c:b3:3c:ed: b8:99:c8:67:a0:e3:75:a2:c0:9c:de:be:37:c4:42: 61:6e:2e:3c:d5:0e:f1:96:d0:09:d6:58:77:6f:7a: 67:b1:c9:30:e5:f6:34:7e:b7:01:92:31:0d:90:71: ef:75:b7:3b:2f:64:cb:a5:03:c1:52:6b:01:34:88: 3b:35:86:62:03:ca:f6:30:13:5e:25:5f:6d:28:5c: 6e:c3:eb:ca:7e:0f:90:dd:98:1c:19:d2:7b:9e:a5: 88:cb:e0:00:00:0b:3c:11:13:90:4c:5b:ac:81:a2: aa:61:e6:2a:48:c5:08:a6:dc:d6:92:53:44:ba:7e: f3:0b:0c:c8:7f:ad:b8:98:bb:e6:94:45:2a:dc:b0: fc:b4:1b:b1:52:bc:27:18:a3:85:14:9a:73:7a:f3: 32:b5:0b:44:9f:97:81:95:7a:0a:9c:5b:6b:20:a4: 4c:8c:90:a0:c8:e0:c5:a5:20:7c:77:e5:c7:33:5d: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9E:72:1E:9C:06:EB:F6:DD:D1:D3:60:A7:23:76:C1:CE:EC:4C:D7 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:15:46:bd:1f:0f:b4:9f:95:f3:9d:a4:e3:dd:ba:b7:39:bc: 00:ab:9a:f5:eb:a8:c0:81:27:57:7d:ed:3e:19:03:d4:b6:f7: ac:0e:c5:31:e8:b7:2c:9b:36:35:10:2b:09:56:b8:12:68:0f: 3f:aa:f5:9b:5e:6f:7e:08:28:3b:26:d6:5b:fa:3e:42:9e:8a: 04:a1:7e:13:f0:2c:4b:98:8a:17:cd:05:2e:a0:e0:31:87:3c: 0b:0b:6f:45:10:12:71:f5:dc:ea:23:1a:98:0f:11:db:07:9a: f9:84:1a:e9:df:80:54:27:8f:7f:f1:38:6b:07:d9:01:51:ba: 08:2a:a5:4b:48:b7:65:06:83:fb:3f:9f:a4:b7:3a:13:e6:07: 2f:5a:37:ee:2f:5f:85:8d:a3:82:40:75:57:99:90:e5:ad:3b: b8:f2:66:57:41:1c:36:af:15:ec:c9:de:9a:c8:70:ce:3d:d6: 85:42:2d:6c:26:9d:59:64:6b:b7:fc:cb:16:5c:c9:43:88:3b: e3:94:9b:95:3a:dc:53:fc:51:74:08:10:c6:7e:e8:33:8c:6b: c4:88:48:1b:27:de:56:5d:a0:1c:6b:8d:16:86:9b:5a:c4:a3: 9c:8c:e8:86:04:22:9e:aa:45:d9:7f:89:5c:df:f9:18:85:aa: 92:58:bf:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjUwODIyMTc0NDA3WhcNMjUwODI5MTc0NDA3WjAYMRYwFAYD VQQDEw02OGE4YWM2Ny02OTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomSOxrrwcjyRTUfxhBBAkIgv19M42G3JVND9DC3smsA3q318eB4hYXAtUl3t /u+3i98ohsbn6KF3IY7Ur7WZzGU3tn3UpnyzPO24mchnoON1osCc3r43xEJhbi48 1Q7xltAJ1lh3b3pnsckw5fY0frcBkjENkHHvdbc7L2TLpQPBUmsBNIg7NYZiA8r2 MBNeJV9tKFxuw+vKfg+Q3ZgcGdJ7nqWIy+AAAAs8EROQTFusgaKqYeYqSMUIptzW klNEun7zCwzIf624mLvmlEUq3LD8tBuxUrwnGKOFFJpzevMytQtEn5eBlXoKnFtr IKRMjJCgyODFpSB8d+XHM120RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOech6c Buv23dHTYKcjdsHO7EzXMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApFUa9Hw+0n5XznaTj3bq3ObwAq5r166jAgSdXfe0+GQPUtvesDsUx 6LcsmzY1ECsJVrgSaA8/qvWbXm9+CCg7JtZb+j5CnooEoX4T8CxLmIoXzQUuoOAx hzwLC29FEBJx9dzqIxqYDxHbB5r5hBrp34BUJ49/8ThrB9kBUboIKqVLSLdlBoP7 P5+ktzoT5gcvWjfuL1+FjaOCQHVXmZDlrTu48mZXQRw2rxXsyd6ayHDOPdaFQi1s Jp1ZZGu3/MsWXMlDiDvjlJuVOtxT/FF0CBDGfugzjGvEiEgbJ95WXaAca40Whpta xKOcjOiGBCKeqkXZf4lc3/kYhaqSWL8w -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:35 2025 by rpki-client