$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft File: Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft (raw, json) Hash identifier: k1MSgOAhGo6vczBqtm/ece13HUITadlccTnSVn9UoKk= Subject key identifier: 44:8E:35:F7:A2:8C:32:8D:48:C1:AA:18:7B:60:A6:0A:A9:07:F5:04 Authority key identifier: 42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84 Certificate issuer: /CN=A918ABAC/serialNumber=42FFE951F9C3904738A92BACA53D08459899E884 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft Manifest number: 22 Signing time: Sat 23 Aug 2025 08:05:00 +0000 Manifest this update: Sat 23 Aug 2025 08:05:00 +0000 Manifest next update: Sat 30 Aug 2025 08:05:00 +0000 Files and hashes: 1: Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl (hash: 7HsRD0FY3o5NPGZ9S1opLD3vznRrAba6r2zYjs+OzeA=) 2: F3A1F32E51E111F0B810EE3AC4F9AE02.roa (hash: jxu2i0AbbyNEnTbuxTH6+1BC3Aaiwa6vcqioCG/wOIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=42FFE951F9C3904738A92BACA53D08459899E884 Validity Not Before: Aug 23 08:05:00 2025 GMT Not After : Aug 30 08:05:00 2025 GMT Subject: CN=68a9762c-1f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9c:83:16:3e:70:0f:60:63:9c:37:d0:f5:1a: 46:58:27:51:6e:a4:b7:35:6a:c7:2e:62:56:dc:4d: c4:8f:e0:13:6e:dd:44:be:5f:0a:45:ed:11:47:c7: f3:62:db:48:82:70:ae:96:68:73:f3:4e:d0:2a:6c: cf:3c:4c:8e:4d:fa:18:95:1f:e4:13:ce:58:9a:a2: 1a:6d:41:69:8a:4d:91:2a:76:70:aa:4f:62:eb:1c: bc:71:63:ec:42:c0:c7:9f:1d:a6:93:b4:1c:a2:b0: 97:6f:f8:a1:51:1e:f2:a9:50:5e:5a:97:58:07:2c: 78:48:56:ac:a2:94:3d:2f:b2:1c:6f:3b:2a:54:7a: 84:9e:18:a9:36:ef:cc:f8:66:1a:39:13:20:51:a2: 9c:2c:2e:12:57:d4:2d:bb:4e:ad:eb:4a:97:9b:28: 53:a7:bd:62:a6:58:46:69:f5:09:5f:2f:1b:97:45: f6:cb:18:ac:02:e9:4f:73:34:23:22:61:9c:a9:3d: f8:84:47:39:06:6e:a3:08:35:62:d3:ba:92:de:0a: d9:68:d6:06:be:4e:f5:25:20:4f:b0:ad:50:e7:34: b4:ac:83:68:37:d6:df:62:0e:02:23:00:99:ad:e4: 9a:64:8c:8b:f2:7a:7d:d7:3c:37:ba:1b:08:53:4c: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8E:35:F7:A2:8C:32:8D:48:C1:AA:18:7B:60:A6:0A:A9:07:F5:04 X509v3 Authority Key Identifier: keyid:42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:63:db:87:aa:e0:8d:48:2d:7d:47:6e:ea:a0:df:27:74:d7: 52:7c:70:f7:cd:77:2d:4b:18:5f:f0:c3:2c:85:2e:6f:32:c7: d9:d0:52:16:1d:e9:dd:8c:25:d5:6f:57:c8:11:74:80:7b:32: c0:1e:a0:c8:18:04:ba:01:c4:f1:d5:48:95:2a:ab:d2:8f:ff: 6f:cb:19:d3:05:75:6d:0b:d4:c7:20:f2:b0:97:1d:e9:64:6d: f5:59:f5:eb:11:0d:2e:d8:97:ac:3f:d6:47:62:2b:e9:45:7e: f1:ff:bf:11:77:66:be:18:84:29:62:44:d5:ae:c5:92:ac:87: df:08:04:e5:ea:f3:63:63:0d:c6:a8:a9:6a:94:d7:90:1b:8c: eb:a3:6e:a4:7d:3d:18:c9:91:7b:34:eb:92:35:10:88:12:22: 91:51:10:ce:54:67:b0:77:9d:cd:2b:55:77:45:83:04:6a:88: 32:5a:1a:8b:f7:8a:7c:f7:83:60:87:01:00:33:87:b1:6a:c0: d3:7e:7e:03:9e:d1:73:ec:69:86:88:c6:ae:41:31:fa:0f:39: 8a:87:97:6f:c7:84:d0:f4:93:fa:9e:ee:b4:0e:33:07:71:e4: 9b:bb:b7:0f:f3:33:9b:f5:07:1e:d3:1c:51:97:e2:b1:4b:45: f7:0e:64:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoNDJGRkU5NTFGOUMzOTA0NzM4QTkyQkFDQTUzRDA4NDU5 ODk5RTg4NDAeFw0yNTA4MjMwODA1MDBaFw0yNTA4MzAwODA1MDBaMBgxFjAUBgNV BAMTDTY4YTk3NjJjLTFmMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDunIMWPnAPYGOcN9D1GkZYJ1FupLc1ascuYlbcTcSP4BNu3US+XwpF7RFHx/Ni 20iCcK6WaHPzTtAqbM88TI5N+hiVH+QTzliaohptQWmKTZEqdnCqT2LrHLxxY+xC wMefHaaTtByisJdv+KFRHvKpUF5al1gHLHhIVqyilD0vshxvOypUeoSeGKk278z4 Zho5EyBRopwsLhJX1C27Tq3rSpebKFOnvWKmWEZp9QlfLxuXRfbLGKwC6U9zNCMi YZypPfiERzkGbqMINWLTupLeCtlo1ga+TvUlIE+wrVDnNLSsg2g31t9iDgIjAJmt 5JpkjIvyen3XPDe6GwhTTEibAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURI4196KM Mo1IwaoYe2CmCqkH9QQwHwYDVR0jBBgwFoAUQv/pUfnDkEc4qSuspT0IRZiZ6IQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzZENEIyOTZDNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL1F2X3BVZm5Ea0VjNHFTdXNwVDBJUlppWjZJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXZfcFVmbkRrRWM0cVN1c3BUMElSWmlaNklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzZENEIyOTZDNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL1F2X3BVZm5Ea0Vj NHFTdXNwVDBJUlppWjZJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRj24eq4I1ILX1Hbuqg3yd011J8cPfNdy1LGF/wwyyFLm8yx9nQUhYd 6d2MJdVvV8gRdIB7MsAeoMgYBLoBxPHVSJUqq9KP/2/LGdMFdW0L1Mcg8rCXHelk bfVZ9esRDS7Yl6w/1kdiK+lFfvH/vxF3Zr4YhCliRNWuxZKsh98IBOXq82NjDcao qWqU15AbjOujbqR9PRjJkXs065I1EIgSIpFREM5UZ7B3nc0rVXdFgwRqiDJaGov3 inz3g2CHAQAzh7FqwNN+fgOe0XPsaYaIxq5BMfoPOYqHl2/HhND0k/qe7rQOMwdx 5Ju7tw/zM5v1Bx7THFGX4rFLRfcOZJg= -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:17 2025 by rpki-client