$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json) Hash identifier: oGsnCgA07JhBWXhiWkAuZijHi0En5j5PDdVWH6fuk/I= Subject key identifier: 50:D7:2A:BF:F3:FB:68:E2:7C:84:5C:B5:4F:B4:5A:3A:C9:09:3B:7F Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Certificate serial: 13AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft Manifest number: 2A36 Signing time: Fri 22 Aug 2025 17:05:04 +0000 Manifest this update: Fri 22 Aug 2025 17:05:03 +0000 Manifest next update: Fri 29 Aug 2025 17:05:03 +0000 Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: TIIQ/YC3wq1a+GcF+NfrhYv5jZ8ee72pz4EATMr3h/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5035 (0x13ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Validity Not Before: Aug 22 17:05:03 2025 GMT Not After : Aug 29 17:05:03 2025 GMT Subject: CN=68a8a340-e787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:5b:4e:54:1a:41:13:31:16:ad:e3:73:ed: fe:ad:bd:84:7d:7d:37:45:5d:79:54:cb:47:08:dc: 61:77:de:13:cc:51:0c:95:7a:c0:c3:60:a3:78:0b: 84:b1:c9:c9:fa:5b:a4:43:ed:6f:4f:fa:39:7d:71: 5e:fd:2f:fe:d5:b5:de:5e:f7:41:fb:eb:e5:5f:61: bc:51:c9:26:1c:31:6b:27:f0:a1:2a:9b:85:48:b0: 02:19:f2:87:f4:00:94:5e:4f:48:58:f8:7e:6a:e6: ca:a9:53:f0:04:da:c5:39:e6:33:ab:d3:29:49:98: d3:2e:d3:7c:f3:3f:3f:b3:78:e7:69:0d:51:33:68: 77:5b:9f:4b:3a:a7:03:3c:e3:5f:af:ac:98:3a:f2: ad:ad:86:06:90:4d:40:00:fc:14:bd:28:05:d4:ff: 05:ea:4d:5e:df:b3:4b:5d:6b:2b:21:1c:ba:31:a0: 96:97:cc:69:95:d7:7e:83:ec:71:39:8f:f8:6a:07: 81:58:48:f7:97:4b:38:a8:a7:25:29:50:35:41:d3: 1d:1e:e3:89:64:0f:5b:dc:bc:b9:5b:21:5e:f7:9a: ac:4e:df:25:ac:28:fc:09:34:81:33:f2:66:34:b3: 52:cc:30:23:4c:56:16:a9:e9:36:2e:bc:5f:18:41: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D7:2A:BF:F3:FB:68:E2:7C:84:5C:B5:4F:B4:5A:3A:C9:09:3B:7F X509v3 Authority Key Identifier: keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8d:4f:00:5d:c1:ee:ea:23:42:04:70:22:f4:5f:cc:67:ad: 97:59:97:8d:86:6b:db:36:ce:d1:f6:75:59:b2:0c:57:b7:15: 9e:a5:50:52:32:5d:0c:12:4d:8d:d2:67:bf:33:da:a5:fd:56: 14:9c:9e:e7:13:fa:ab:37:35:20:9b:77:2f:cb:18:a2:79:b2: 74:fd:b5:55:79:7f:4a:26:89:94:9f:78:3c:e4:9d:de:69:d9: 9b:bd:a8:4f:b1:bf:06:a2:a3:35:48:10:12:98:57:b4:0a:43: bc:d1:b1:c0:b9:33:18:c6:47:a5:5e:14:44:05:1d:45:ec:e6: 06:32:9a:0a:78:87:a2:55:3b:a8:c2:c6:6b:d4:ff:f1:ef:c9: 72:30:ec:d7:d7:c9:da:78:2b:56:45:2b:10:a6:bb:ab:c6:3f: 70:96:13:58:b3:b8:7d:02:03:63:be:ac:28:e9:05:b0:72:04: 89:81:69:b7:59:71:12:7a:5f:e1:13:26:f9:c2:20:81:63:29: e0:ff:28:86:6f:7e:21:e3:cd:64:53:5d:b5:fd:0b:94:ce:b3: 56:89:c5:96:e2:0e:43:98:69:d2:52:1a:fd:77:27:5b:00:95: 0a:11:3c:86:c5:68:b3:61:31:5a:63:91:a2:eb:46:7a:d1:c1: ba:7c:fc:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx RTA2NzcwNTIwHhcNMjUwODIyMTcwNTAzWhcNMjUwODI5MTcwNTAzWjAYMRYwFAYD VQQDEw02OGE4YTM0MC1lNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsdbTlQaQRMxFq3jc+3+rb2EfX03RV15VMtHCNxhd94TzFEMlXrAw2CjeAuE scnJ+lukQ+1vT/o5fXFe/S/+1bXeXvdB++vlX2G8UckmHDFrJ/ChKpuFSLACGfKH 9ACUXk9IWPh+aubKqVPwBNrFOeYzq9MpSZjTLtN88z8/s3jnaQ1RM2h3W59LOqcD PONfr6yYOvKtrYYGkE1AAPwUvSgF1P8F6k1e37NLXWsrIRy6MaCWl8xpldd+g+xx OY/4ageBWEj3l0s4qKclKVA1QdMdHuOJZA9b3Ly5WyFe95qsTt8lrCj8CTSBM/Jm NLNSzDAjTFYWqek2LrxfGEFy4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDXKr/z +2jifIRctU+0WjrJCTt/MB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2jU8AXcHu6iNCBHAi9F/MZ62XWZeNhmvbNs7R9nVZsgxXtxWepVBS Ml0MEk2N0me/M9ql/VYUnJ7nE/qrNzUgm3cvyxiiebJ0/bVVeX9KJomUn3g85J3e admbvahPsb8GoqM1SBASmFe0CkO80bHAuTMYxkelXhREBR1F7OYGMpoKeIeiVTuo wsZr1P/x78lyMOzX18naeCtWRSsQprurxj9wlhNYs7h9AgNjvqwo6QWwcgSJgWm3 WXESel/hEyb5wiCBYyng/yiGb34h481kU121/QuUzrNWicWW4g5DmGnSUhr9dydb AJUKETyGxWizYTFaY5Gi60Z60cG6fPyT -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:07 2025 by rpki-client