$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: r1toeU6M2MQIdwQpztDopF8GwRqknsa1jPERgoyUoOc= Subject key identifier: C6:2D:0D:56:1D:86:B2:74:ED:EE:59:FC:32:49:1C:71:37:56:5B:3E Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: 27 Signing time: Sat 23 Aug 2025 08:03:29 +0000 Manifest this update: Sat 23 Aug 2025 08:03:28 +0000 Manifest next update: Sat 30 Aug 2025 08:03:28 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: IShQRxNRP3DlTZloYG1262uNw3+wc3/pOLKoyTtw/hc=) 2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: fil/oQotRM+MIGw/cNqLrz8OgmoOYQq+ywbG5ZxtQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Aug 23 08:03:28 2025 GMT Not After : Aug 30 08:03:28 2025 GMT Subject: CN=68a975d1-02be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:52:e0:90:d7:06:4a:74:84:05:54:12:16: 34:f2:d4:35:08:74:83:69:cc:9c:66:77:9e:c4:60: 2f:8f:0b:89:82:0b:5e:f3:2a:0d:23:55:cd:ec:f4: 43:3d:3c:a9:fd:51:1e:59:7d:03:97:65:7b:f1:76: 85:1c:65:60:88:4f:f2:a5:0c:90:2b:cd:38:de:aa: 1d:bb:58:ee:a3:97:88:be:1d:f7:b3:4a:96:3d:09: f8:68:e2:e1:75:cd:5b:a6:2f:d6:9b:86:62:4a:da: 50:b6:d4:a1:b0:43:ec:f0:dc:5c:92:1f:10:d1:08: 5a:ac:3d:ca:3d:78:7c:c0:c2:e5:04:1d:ff:a5:6f: 9f:d7:7b:30:4e:5f:79:a6:5f:64:7e:fb:b7:cd:32: 0c:ab:e6:09:e8:f1:a3:f2:2e:bb:57:ec:01:0c:47: 3f:5d:d4:48:e0:cc:16:1a:82:26:09:91:d8:9d:7e: c6:d8:2d:ee:32:f4:84:5d:96:4a:81:69:1d:33:ae: 8c:e5:51:a6:d4:09:66:08:5d:7f:df:cc:72:5d:c7: 7b:7d:37:3e:00:fd:00:dd:5c:53:b4:6c:5f:32:a0: bd:df:6f:63:3a:11:b5:2e:f7:4e:20:da:82:dc:4b: 29:02:61:24:a3:8b:1d:fe:de:de:a6:e9:38:6f:98: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2D:0D:56:1D:86:B2:74:ED:EE:59:FC:32:49:1C:71:37:56:5B:3E X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:08:f5:ed:3b:51:eb:03:6f:85:72:f9:51:44:26:74:a0:f3: 1d:4c:94:a6:3e:ba:66:ca:76:f9:28:f2:b1:df:12:de:f7:80: 3b:b5:db:93:40:f2:38:5e:e3:6d:aa:8f:79:ef:52:44:6f:a9: d4:f4:e5:f0:9b:16:57:e4:ab:34:c4:33:90:a6:51:cc:37:ea: 14:38:ff:b8:c9:dd:40:49:bb:7e:ab:2e:a6:18:66:26:6c:35: 93:f2:d6:75:8b:cb:22:85:96:3e:87:b1:d4:da:ed:05:63:ae: 47:37:f5:e2:0e:35:8b:aa:b1:2e:32:2d:8a:f0:da:fc:c9:94: 44:78:ca:d2:d8:c7:96:8b:ca:61:ec:fd:18:d5:ca:11:20:3a: ef:96:74:2f:7a:50:0a:dc:fb:ff:32:11:b2:c5:dd:bf:7a:4c: 4f:2d:83:60:21:69:0a:7b:24:60:28:78:d0:2d:15:d8:ec:fd: a2:32:b2:93:36:8b:70:1e:e4:34:f6:56:e3:79:be:8b:77:e2: 2c:6e:26:87:15:27:e5:9d:8d:bc:e8:aa:29:b8:4f:57:1a:e2: 08:72:9a:10:aa:51:58:bd:e6:e1:3c:42:00:eb:f6:1b:64:d2: 04:d2:60:51:11:50:ed:f8:53:a4:9b:05:96:c3:1c:24:19:69: dd:55:5d:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoNDFDNzU3MTQyOTlBNTc4REQxOTBGRDFGNzMwOTU1QjFG RDlBQzFGNDAeFw0yNTA4MjMwODAzMjhaFw0yNTA4MzAwODAzMjhaMBgxFjAUBgNV BAMTDTY4YTk3NWQxLTAyYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp/VLgkNcGSnSEBVQSFjTy1DUIdINpzJxmd57EYC+PC4mCC17zKg0jVc3s9EM9 PKn9UR5ZfQOXZXvxdoUcZWCIT/KlDJArzTjeqh27WO6jl4i+HfezSpY9Cfho4uF1 zVumL9abhmJK2lC21KGwQ+zw3FySHxDRCFqsPco9eHzAwuUEHf+lb5/XezBOX3mm X2R++7fNMgyr5gno8aPyLrtX7AEMRz9d1EjgzBYagiYJkdidfsbYLe4y9IRdlkqB aR0zrozlUabUCWYIXX/fzHJdx3t9Nz4A/QDdXFO0bF8yoL3fb2M6EbUu904g2oLc SykCYSSjix3+3t6m6ThvmPslAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxi0NVh2G snTt7ln8MkkccTdWWz4wHwYDVR0jBBgwFoAUQcdXFCmaV43RkP0fcwlVsf2awfQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0JBMDhBQTQyNEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdm US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWNkWEZDbWFWNDNSa1AwZmN3bFZzZjJhd2ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0JBMDhBQTQyNEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQz UmtQMGZjd2xWc2YyYXdmUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUI9e07UesDb4Vy+VFEJnSg8x1MlKY+umbKdvko8rHfEt73gDu125NA 8jhe422qj3nvUkRvqdT05fCbFlfkqzTEM5CmUcw36hQ4/7jJ3UBJu36rLqYYZiZs NZPy1nWLyyKFlj6HsdTa7QVjrkc39eIONYuqsS4yLYrw2vzJlER4ytLYx5aLymHs /RjVyhEgOu+WdC96UArc+/8yEbLF3b96TE8tg2AhaQp7JGAoeNAtFdjs/aIyspM2 i3Ae5DT2VuN5vot34ixuJocVJ+Wdjbzoqim4T1ca4ghymhCqUVi95uE8QgDr9htk 0gTSYFERUO34U6SbBZbDHCQZad1VXR4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:24 2025 by rpki-client