$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: SrDlM67Ni+EA5eOIc99rzFJ4NaoN0u9LXvpb9oOBva0= Subject key identifier: 61:63:F4:DF:39:FE:CA:6F:3F:6D:1E:C4:46:4F:BF:7D:F1:26:C8:4E Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 1A Signing time: Tue 15 Jul 2025 08:16:23 +0000 Manifest this update: Tue 15 Jul 2025 08:16:23 +0000 Manifest next update: Tue 22 Jul 2025 08:16:23 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: iGeyY8qSIsPZ0MbTSOwJIqbXVlzVHHKOB8/KHYFPq9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Jul 15 08:16:23 2025 GMT Not After : Jul 22 08:16:23 2025 GMT Subject: CN=68760e57-c240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:17:84:50:ba:05:2c:20:5f:f7:fa:00:84:02: 9d:ff:68:d3:2f:e9:80:2b:04:42:f7:63:e5:39:7d: 29:74:61:93:fd:8f:d1:5f:e3:a2:05:94:97:8f:7a: 2c:43:65:25:35:16:ca:c0:94:2a:73:ce:a6:80:47: 5a:d5:92:c9:ea:48:74:e0:db:95:ef:76:b5:fc:cd: 65:00:6f:fa:1e:34:31:ce:6f:42:5c:ce:d9:3b:81: 8c:2e:10:4f:b0:fe:64:c9:10:b2:a2:20:e2:3c:14: 23:c7:28:5c:0e:fb:5b:b7:c6:57:e8:d5:94:13:61: 30:e5:f0:1b:6d:e1:02:30:b0:fc:7a:d3:b7:f7:83: 8b:59:8c:84:89:9b:71:bb:77:f1:78:4b:87:1e:a7: 09:cc:ac:25:a1:64:8e:b8:e8:97:e4:dc:74:a0:bc: 62:54:d7:a6:df:35:59:fc:20:bd:da:71:55:7c:98: cc:94:e9:51:50:d2:52:db:c1:e9:65:a7:32:4f:65: e8:7d:34:f5:59:38:05:78:71:b4:79:be:a8:95:8f: 4b:05:5b:cc:01:9e:c4:cf:46:f9:aa:63:a6:5a:33: 25:c9:03:9e:0d:5f:5d:77:92:96:c8:c0:2a:b9:f1: 42:94:e7:41:60:88:8c:1d:a1:04:ec:d2:de:ea:05: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:F4:DF:39:FE:CA:6F:3F:6D:1E:C4:46:4F:BF:7D:F1:26:C8:4E X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6e:ce:ab:21:b0:23:41:2d:92:2d:3a:60:4c:bf:18:2e:50: 40:87:44:2d:be:52:88:dc:cd:bd:e8:45:4d:61:72:c3:a1:43: 1e:51:18:3c:93:88:37:1c:2b:4d:0b:75:aa:cb:42:58:a8:df: 53:1a:7e:8c:ad:8f:1c:23:6c:00:14:7a:53:4f:1d:16:a3:18: 36:df:fe:55:4e:11:d8:ff:bd:e6:77:7c:b6:eb:26:82:88:02: 4a:11:2d:4a:f7:1f:30:0d:fd:87:3f:b0:ee:67:57:31:2f:67: 2c:e9:f6:18:8d:b3:c4:03:73:a2:c5:23:3e:6d:43:35:9f:ec: 8f:98:3b:4b:43:c2:9c:28:55:64:36:d1:1b:0c:95:49:94:1a: 8d:c8:d2:6b:fe:d3:ed:58:eb:c3:c5:61:6e:d1:a8:b7:84:63: 2d:89:84:2d:4e:b4:cd:04:60:44:58:02:89:3a:02:6e:4e:21: bc:ef:b5:5e:35:85:ca:a2:2d:e3:3b:8b:f6:d3:59:fe:a0:e9: 37:05:f1:83:b8:99:7e:06:2b:39:99:bf:34:c4:9d:23:96:d3: 43:c2:db:e2:f0:23:0f:6b:08:60:4d:f7:ea:15:63:00:ce:b1: 2c:e4:dd:9d:bb:16:88:3f:45:32:3a:4d:41:34:33:ec:45:71: d4:d3:cb:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTA3MTUwODE2MjNaFw0yNTA3MjIwODE2MjNaMBgxFjAUBgNV BAMTDTY4NzYwZTU3LWMyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqF4RQugUsIF/3+gCEAp3/aNMv6YArBEL3Y+U5fSl0YZP9j9Ff46IFlJePeixD ZSU1FsrAlCpzzqaAR1rVksnqSHTg25XvdrX8zWUAb/oeNDHOb0Jcztk7gYwuEE+w /mTJELKiIOI8FCPHKFwO+1u3xlfo1ZQTYTDl8Btt4QIwsPx607f3g4tZjISJm3G7 d/F4S4cepwnMrCWhZI646Jfk3HSgvGJU16bfNVn8IL3acVV8mMyU6VFQ0lLbwell pzJPZeh9NPVZOAV4cbR5vqiVj0sFW8wBnsTPRvmqY6ZaMyXJA54NX113kpbIwCq5 8UKU50FgiIwdoQTs0t7qBeYPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYWP03zn+ ym8/bR7ERk+/ffEmyE4wHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIxuzqshsCNBLZItOmBMvxguUECHRC2+Uojczb3oRU1hcsOhQx5RGDyT iDccK00LdarLQlio31MafoytjxwjbAAUelNPHRajGDbf/lVOEdj/veZ3fLbrJoKI AkoRLUr3HzAN/Yc/sO5nVzEvZyzp9hiNs8QDc6LFIz5tQzWf7I+YO0tDwpwoVWQ2 0RsMlUmUGo3I0mv+0+1Y68PFYW7RqLeEYy2JhC1OtM0EYERYAok6Am5OIbzvtV41 hcqiLeM7i/bTWf6g6TcF8YO4mX4GKzmZvzTEnSOW00PC2+LwIw9rCGBN9+oVYwDO sSzk3Z27Fog/RTI6TUE0M+xFcdTTy7w= -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:48 2025 by rpki-client