$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json) Hash identifier: x2lZJRJpIqSMywSwW/dHxwc//96HIL77/VPvpyWmN/s= Subject key identifier: BD:04:4A:33:D9:34:B8:6E:D4:EA:B8:FD:B2:59:4B:60:44:5E:46:DF Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft Manifest number: 83 Signing time: Sat 23 Aug 2025 06:56:54 +0000 Manifest this update: Sat 23 Aug 2025 06:56:53 +0000 Manifest next update: Sat 30 Aug 2025 06:56:53 +0000 Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: WYevffVBse8fRL2GrpSLejcSP9N9o97TunEHTCTUfJ8=) 2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: pAj7NdDmToipkIAovmtOfynK/RP/8C5/+xzCsvCxUC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Validity Not Before: Aug 23 06:56:53 2025 GMT Not After : Aug 30 06:56:53 2025 GMT Subject: CN=68a96635-9c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:13:47:55:06:05:b7:8c:c9:45:35:13:1e: 79:2b:69:b9:5a:c9:70:65:d0:61:85:65:07:c8:b4: 45:a0:8c:ce:61:77:27:80:54:96:3c:33:a2:be:73: 15:ec:f8:ca:ad:72:14:f0:bc:c7:83:e8:fc:e4:b9: d9:de:69:73:86:51:a8:b0:29:8d:e2:d2:eb:c8:3f: 78:27:fc:f1:9e:a1:d4:f8:63:32:ba:34:85:59:25: cd:1d:ea:f3:aa:95:21:a4:ee:80:c6:10:ba:5a:c1: 99:f6:f2:65:c1:8c:d2:d9:0d:43:f2:c7:ae:1c:04: 68:5c:3a:2e:22:e5:00:e8:d4:16:46:24:00:01:11: 32:c2:72:b1:06:8c:ed:89:5c:40:5c:6c:7e:8f:4a: 33:c5:92:22:b9:0c:80:3d:ed:03:39:2f:60:7f:b4: 7b:65:86:b2:79:ab:e4:8f:7b:c3:91:bc:94:4c:62: 43:be:e5:53:6d:69:15:6d:02:b3:42:22:6f:48:ad: 2a:15:7c:f4:9b:ac:a0:11:e0:a5:83:f2:7e:0f:42: 3f:71:b0:89:a0:3c:0f:7c:0e:f0:02:7e:33:22:58: 62:3b:a2:be:2d:7a:f0:64:64:4e:97:e9:21:cf:de: aa:0f:d4:f2:72:2d:c6:22:7c:5a:eb:94:53:d8:b6: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:4A:33:D9:34:B8:6E:D4:EA:B8:FD:B2:59:4B:60:44:5E:46:DF X509v3 Authority Key Identifier: keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:03:a9:ce:2d:5e:1c:88:9a:92:42:a8:ea:c3:a0:35:91:7f: dc:ff:65:f7:8a:b9:bb:c6:a1:59:26:fa:5f:77:fc:32:c5:bc: 0e:54:7f:04:89:53:a7:a5:79:8d:1f:92:a0:d4:15:40:0b:5d: bb:06:9c:18:e3:ff:4f:9c:f8:3c:d4:75:ce:6c:76:ea:44:dd: cd:37:aa:a0:24:c4:61:56:08:a3:f9:26:c3:d3:2f:e7:4e:c3: 15:b4:82:d4:7b:dd:0c:71:57:92:54:f4:55:4f:0c:e9:db:85: ee:46:92:f4:fd:6a:33:9b:d6:33:bf:2e:8b:c6:b9:3b:9d:24: f3:9e:f9:00:29:f6:33:f1:a2:9f:10:1e:76:b5:48:2a:f3:65: ee:e5:ba:78:ef:79:36:e3:0a:7b:75:6d:53:27:ab:91:0d:be: 7f:1a:dd:5e:4e:f1:c9:63:8a:0b:88:f0:1a:19:9c:1a:6e:1d: 57:b2:35:ec:73:36:73:89:a4:99:1f:8b:9e:d2:f2:74:34:d4: 59:51:84:ec:3c:fc:e2:14:44:36:db:6b:0b:8b:e8:8d:80:32: c6:19:09:70:c3:f5:3b:22:24:52:16:96:2c:a6:d4:73:38:5c: b6:6a:d8:17:e6:2b:e8:76:c6:87:f1:65:30:a9:89:c7:e0:a5: 6d:47:21:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKEFBMEI3ODJEQjk5MzJFMjJGRERFRjBDM0Y3NTU5NkVF MDk0NUUxMkQwHhcNMjUwODIzMDY1NjUzWhcNMjUwODMwMDY1NjUzWjAYMRYwFAYD VQQDEw02OGE5NjYzNS05YzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/UTR1UGBbeMyUU1Ex55K2m5WslwZdBhhWUHyLRFoIzOYXcngFSWPDOivnMV 7PjKrXIU8LzHg+j85LnZ3mlzhlGosCmN4tLryD94J/zxnqHU+GMyujSFWSXNHerz qpUhpO6AxhC6WsGZ9vJlwYzS2Q1D8seuHARoXDouIuUA6NQWRiQAAREywnKxBozt iVxAXGx+j0ozxZIiuQyAPe0DOS9gf7R7ZYayeavkj3vDkbyUTGJDvuVTbWkVbQKz QiJvSK0qFXz0m6ygEeClg/J+D0I/cbCJoDwPfA7wAn4zIlhiO6K+LXrwZGROl+kh z96qD9Tyci3GInxa65RT2LaG0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0ESjPZ NLhu1Oq4/bJZS2BEXkbfMB8GA1UdIwQYMBaAFKoLeC25ky4i/d7ww/dVlu4JReEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS8wNzc5N0ZFNEMw REMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExpTDkzdkREOTFXVzdnbEY0 UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FndDRMYm1UTGlMOTN2REQ5MVdXN2dsRjRTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS8wNzc5N0ZFNEMwREMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExp TDkzdkREOTFXVzdnbEY0UzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOA6nOLV4ciJqSQqjqw6A1kX/c/2X3irm7xqFZJvpfd/wyxbwOVH8E iVOnpXmNH5Kg1BVAC127BpwY4/9PnPg81HXObHbqRN3NN6qgJMRhVgij+SbD0y/n TsMVtILUe90McVeSVPRVTwzp24XuRpL0/Wozm9Yzvy6Lxrk7nSTznvkAKfYz8aKf EB52tUgq82Xu5bp473k24wp7dW1TJ6uRDb5/Gt1eTvHJY4oLiPAaGZwabh1XsjXs czZziaSZH4ue0vJ0NNRZUYTsPPziFEQ222sLi+iNgDLGGQlww/U7IiRSFpYsptRz OFy2atgX5ivodsaH8WUwqYnH4KVtRyEQ -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:27 2025 by rpki-client