$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json) Hash identifier: XNHb7Lewm4zbiVtYNhvdq0U5jRnd4lze8daD0qqn5Fg= Subject key identifier: 5B:74:C3:ED:A6:20:7E:68:81:42:B4:2A:88:E6:CE:9F:AE:AA:89:2B Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:14:42 +0000 Manifest this update: Sat 23 Aug 2025 08:14:41 +0000 Manifest next update: Sat 30 Aug 2025 08:14:41 +0000 Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: Uk1p2ffkvXpPrrp7vZUxFvtikIERxTEXvAgR2poOPZE=) 2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Validity Not Before: Aug 23 08:14:41 2025 GMT Not After : Aug 30 08:14:41 2025 GMT Subject: CN=68a97872-0dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:b5:5c:8a:85:15:35:29:71:f9:f5:f5:dc: 1e:16:0b:d5:4d:9f:17:8e:29:c2:ea:9a:1b:c5:21: 43:95:8c:9f:73:e3:44:06:6a:6f:fb:0e:81:3b:ba: 62:96:3e:a7:8b:a9:ea:88:80:2e:af:80:f6:b2:6d: ba:bb:63:70:35:28:b8:5b:95:01:f8:ed:30:da:f3: c2:cf:1e:5c:93:f0:8a:4d:3b:2a:26:b2:5e:f8:10: e5:f2:06:ad:71:cd:c2:d3:64:05:fb:45:15:3e:a7: 77:e6:ec:5e:f1:41:7c:19:75:82:27:20:0a:3b:e3: 7d:f5:6f:aa:08:54:0f:03:04:73:6e:38:9e:c1:06: 93:91:02:39:27:4b:87:eb:4b:55:1b:e3:ba:a0:ed: 24:23:76:2d:10:cc:b9:7a:f2:f5:22:23:3a:d2:28: 94:c1:92:17:28:6a:59:7a:17:c0:b8:68:d5:3f:74: e9:1a:27:bc:a9:36:4b:d4:3b:c1:9a:88:44:2f:5d: 66:09:2c:66:bb:d4:3d:c5:6f:22:be:ae:c9:06:a1: 8c:e0:94:e0:a7:1f:1a:0d:b4:c1:70:e7:2b:e6:76: 2f:61:65:71:1f:bc:79:9f:86:4f:f5:20:95:ba:f9: cb:44:24:d2:0f:aa:8c:5e:7f:3f:06:26:e3:6f:bc: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:74:C3:ED:A6:20:7E:68:81:42:B4:2A:88:E6:CE:9F:AE:AA:89:2B X509v3 Authority Key Identifier: keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:f9:bc:de:ea:e3:13:27:1d:45:65:c2:3f:b5:ab:c3:09: a5:54:5f:68:34:68:f2:5c:3c:2d:21:5c:59:b5:97:ef:98:d6: 46:5a:3e:7b:93:fd:f2:db:e5:16:1d:7f:3f:44:f4:12:6f:57: 2c:5c:0f:bd:3f:6c:09:54:51:5f:ee:d4:5e:73:a9:e7:58:55: 64:bc:37:b3:79:8e:dc:99:bc:c3:91:10:dc:07:fd:7c:74:48: aa:c0:4e:89:f6:eb:75:96:87:14:b0:5e:a4:c9:d7:72:d1:c6: 27:23:8e:c9:65:7e:fe:9c:3a:15:2a:b3:7c:d4:c4:a2:74:c1: 4a:d2:87:8e:2b:31:0c:d4:9d:64:ba:56:04:96:e4:01:54:fd: 65:38:b3:05:d1:e6:56:42:65:20:8e:fb:bb:05:3f:33:58:32: 92:6b:f0:9a:77:cc:f0:bb:05:ae:72:f7:32:27:bc:c8:e8:46: 66:3c:b7:97:87:3d:02:c1:8f:c3:42:ed:46:59:33:33:67:75: e8:be:ab:42:b9:3f:2a:71:79:1b:77:4f:ac:1f:12:08:7b:fb: c1:24:97:31:49:48:c8:67:9d:08:07:d8:6b:29:30:f6:74:33: 38:bb:f3:2f:54:46:70:90:f6:5e:e0:ef:09:ff:be:c9:0f:82: 5d:07:22:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDU4NzExMC8GA1UEBRMoQTlCNTNGN0I2MTk2MzE4NzA5Mjg5MDJGRjQ4NDc2NTc0 MUJEQTJFOTAeFw0yNTA4MjMwODE0NDFaFw0yNTA4MzAwODE0NDFaMBgxFjAUBgNV BAMTDTY4YTk3ODcyLTBkZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt1rVcioUVNSlx+fX13B4WC9VNnxeOKcLqmhvFIUOVjJ9z40QGam/7DoE7umKW PqeLqeqIgC6vgPaybbq7Y3A1KLhblQH47TDa88LPHlyT8IpNOyomsl74EOXyBq1x zcLTZAX7RRU+p3fm7F7xQXwZdYInIAo74331b6oIVA8DBHNuOJ7BBpORAjknS4fr S1Ub47qg7SQjdi0QzLl68vUiIzrSKJTBkhcoall6F8C4aNU/dOkaJ7ypNkvUO8Ga iEQvXWYJLGa71D3FbyK+rskGoYzglOCnHxoNtMFw5yvmdi9hZXEfvHmfhk/1IJW6 +ctEJNIPqoxefz8GJuNvvBAbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW3TD7aYg fmiBQrQqiObOn66qiSswHwYDVR0jBBgwFoAUqbU/e2GWMYcJKJAv9IR2V0G9oukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNTg3LzkwRjE0MzVBNjIx ODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWJVX2UyR1dNWWNKS0pBdjlJUjJWMEc5b3VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw NTg3LzkwRjE0MzVBNjIxODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVlj SktKQXY5SVIyVjBHOW91ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkU+bze6uMTJx1FZcI/tavDCaVUX2g0aPJcPC0hXFm1l++Y1kZaPnuT /fLb5RYdfz9E9BJvVyxcD70/bAlUUV/u1F5zqedYVWS8N7N5jtyZvMORENwH/Xx0 SKrATon263WWhxSwXqTJ13LRxicjjsllfv6cOhUqs3zUxKJ0wUrSh44rMQzUnWS6 VgSW5AFU/WU4swXR5lZCZSCO+7sFPzNYMpJr8Jp3zPC7Ba5y9zInvMjoRmY8t5eH PQLBj8NC7UZZMzNndei+q0K5PypxeRt3T6wfEgh7+8EklzFJSMhnnQgH2GspMPZ0 Mzi78y9URnCQ9l7g7wn/vskPgl0HIuI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:14 2025 by rpki-client