$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json) Hash identifier: +3uxDe19GyKlF9BsN6YOC7NF9D+jFpVl8DBDLNGODes= Subject key identifier: 3F:B7:44:B1:77:B3:E4:4E:6F:D3:B7:4A:44:23:73:08:4E:07:25:B4 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft Manifest number: 90 Signing time: Sat 23 Aug 2025 06:54:03 +0000 Manifest this update: Sat 23 Aug 2025 06:54:02 +0000 Manifest next update: Sat 30 Aug 2025 06:54:02 +0000 Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: kjdAq8vsCMqfEUYtbSoh2ec5qYt1rsuTPZlzx0QvwxY=) 2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: Aug 23 06:54:02 2025 GMT Not After : Aug 30 06:54:02 2025 GMT Subject: CN=68a9658a-4d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:20:dc:94:71:57:d1:e4:05:a0:b5:7b:69: 6b:8f:c7:38:a4:e2:09:59:83:c3:a0:c6:79:60:d2: d7:19:71:63:b9:5e:c7:d6:53:a0:4b:43:60:5d:e6: 47:9f:0e:fb:79:9d:55:39:eb:92:98:31:0a:26:53: af:b9:d1:93:cb:52:73:18:92:30:6c:5b:34:8d:ed: 90:30:3f:e6:67:16:a3:ec:eb:29:f4:d1:1e:5b:be: 88:64:e0:65:ac:28:b3:c9:31:3d:29:b5:c0:86:d3: 3d:92:d0:2c:66:44:f1:ed:9a:a5:b0:d9:47:61:92: 1e:79:d7:0b:7b:63:b1:17:09:2a:ea:d0:e8:f3:f1: 8b:ee:07:2e:01:e0:fa:3c:70:df:ca:de:8d:d9:e3: 13:b5:a2:97:ad:76:a0:6a:66:bd:aa:f0:af:ed:65: 73:c7:d2:ca:4e:ce:83:78:e2:ab:27:16:ad:8f:40: 53:c2:ff:70:29:b9:dd:5e:a6:7e:8a:fb:02:33:4b: fa:45:91:19:0b:4d:c4:fe:50:68:71:3a:fd:f3:a0: 33:a3:37:3e:5a:61:73:1a:f9:eb:61:e9:d3:ba:3a: a3:8e:af:22:ca:bd:a3:e4:0a:96:74:6b:83:bb:0b: 9b:c8:45:d0:43:22:ab:b7:e5:57:8c:41:3c:67:65: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B7:44:B1:77:B3:E4:4E:6F:D3:B7:4A:44:23:73:08:4E:07:25:B4 X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:da:1c:f6:0e:c6:d1:56:65:d7:1b:19:e2:30:67:64:95:de: 8e:c8:ab:2e:63:b8:8a:9a:79:4c:02:6e:a5:f2:01:50:d8:58: 57:7b:c8:37:45:94:d8:10:c8:99:5b:bd:d5:66:e8:af:95:9b: fb:e6:d6:62:5e:4f:be:a9:2f:c6:bd:cd:43:a9:60:5e:dd:76: 14:c0:fe:e1:bb:94:10:b6:40:99:54:f4:70:6a:af:76:de:ce: 17:25:67:98:ff:c7:b2:dd:6c:5e:2c:1b:75:e9:20:80:a9:ee: c7:02:69:52:6c:ed:9c:f5:1b:da:8c:b3:99:e6:f1:54:5d:fa: 0d:d8:5f:48:89:97:50:a3:c7:47:5b:4a:17:25:e4:84:99:a7: a6:e7:e3:e8:6f:41:a2:32:7d:74:e1:7b:36:25:1d:00:0c:60: a5:4a:ab:32:cc:aa:70:0d:52:c2:ae:5e:19:ae:48:3d:d9:fb: 5d:05:ce:9c:4b:78:50:ea:2c:9f:43:71:3d:17:01:9d:cf:f0: 61:18:2a:4a:40:9e:93:f6:76:cb:e9:ec:6c:f0:a3:c3:76:6d: 39:4c:f9:77:0f:87:b7:bf:f3:e4:43:3d:c5:df:a7:c7:52:2b: 4a:79:0b:e5:bd:6f:3e:a6:6e:7b:de:68:0f:18:95:09:ba:a6: 40:23:0f:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4REIxMTAvBgNVBAUTKDQwNjE4NjNEREY0M0U3QjNCMTg5RTNDOUMzMjE3QkMx MkJCMzVGMjEwHhcNMjUwODIzMDY1NDAyWhcNMjUwODMwMDY1NDAyWjAYMRYwFAYD VQQDEw02OGE5NjU4YS00ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfIg3JRxV9HkBaC1e2lrj8c4pOIJWYPDoMZ5YNLXGXFjuV7H1lOgS0NgXeZH nw77eZ1VOeuSmDEKJlOvudGTy1JzGJIwbFs0je2QMD/mZxaj7Osp9NEeW76IZOBl rCizyTE9KbXAhtM9ktAsZkTx7ZqlsNlHYZIeedcLe2OxFwkq6tDo8/GL7gcuAeD6 PHDfyt6N2eMTtaKXrXagama9qvCv7WVzx9LKTs6DeOKrJxatj0BTwv9wKbndXqZ+ ivsCM0v6RZEZC03E/lBocTr986Azozc+WmFzGvnrYenTujqjjq8iyr2j5AqWdGuD uwubyEXQQyKrt+VXjEE8Z2XltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+3RLF3 s+ROb9O3SkQjcwhOByW0MB8GA1UdIwQYMBaAFEBhhj3fQ+ezsYnjycMhe8Ers18h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RThEQi9CNDhFMjVGNEI3 NjMxMUVGODJERDhGMzNDNEY5QUUwMi9RR0dHUGQ5RDU3T3hpZVBKd3lGN3dTdXpY eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RThEQi9CNDhFMjVGNEI3NjMxMUVGODJERDhGMzNDNEY5QUUwMi9RR0dHUGQ5RDU3 T3hpZVBKd3lGN3dTdXpYeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp2hz2DsbRVmXXGxniMGdkld6OyKsuY7iKmnlMAm6l8gFQ2FhXe8g3 RZTYEMiZW73VZuivlZv75tZiXk++qS/Gvc1DqWBe3XYUwP7hu5QQtkCZVPRwaq92 3s4XJWeY/8ey3WxeLBt16SCAqe7HAmlSbO2c9RvajLOZ5vFUXfoN2F9IiZdQo8dH W0oXJeSEmaem5+Pob0GiMn104Xs2JR0ADGClSqsyzKpwDVLCrl4Zrkg92ftdBc6c S3hQ6iyfQ3E9FwGdz/BhGCpKQJ6T9nbL6exs8KPDdm05TPl3D4e3v/PkQz3F36fH UitKeQvlvW8+pm573mgPGJUJuqZAIw8z -----END CERTIFICATE-----Generated at Sat Aug 23 22:43:02 2025 by rpki-client