$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: QYMuFLwIW8yYaCXE2VL69jdtczVe6u9Jp0KBlKyEhk4= Subject key identifier: 11:A9:16:8D:E1:66:33:F4:4C:21:19:81:E5:73:EA:2E:25:7F:17:BC Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DEC Signing time: Fri 22 Aug 2025 16:09:33 +0000 Manifest this update: Fri 22 Aug 2025 16:09:33 +0000 Manifest next update: Fri 29 Aug 2025 16:09:33 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: 1VdHqnlAvyway89299kD1v1xG88Ei3PTIrk1xJ3cjCk=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7669 (0x1df5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Aug 22 16:09:33 2025 GMT Not After : Aug 29 16:09:33 2025 GMT Subject: CN=68a8963d-aff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:e9:e5:a7:bb:61:e6:bf:58:6e:b7:54:bc: 78:7b:76:80:b8:33:60:c3:ff:66:79:5a:bd:f0:21: 96:50:a1:53:79:54:76:5d:6e:5b:97:38:b7:f2:45: 62:3a:c7:59:65:88:02:e6:b5:d9:05:39:1f:3a:dc: bf:b5:52:08:89:a9:0e:49:b7:21:e8:6f:53:61:c4: 55:55:3b:0b:86:7d:a6:16:89:91:b8:23:fb:10:d7: 9a:ad:4e:91:6b:42:93:b7:ab:1a:56:1d:ea:05:6e: e3:a6:e0:d7:96:90:ad:d0:fe:ef:75:9d:a6:54:dd: 14:f2:79:8d:09:bd:4a:44:12:76:7d:f6:cb:95:1b: 68:ab:d6:99:6d:c6:a5:7e:3f:73:9b:d2:e9:67:2c: b5:4b:8f:95:10:72:95:33:7f:80:2d:fe:29:dd:34: 59:d6:fa:e7:92:26:99:d9:49:9b:d3:e6:d6:7a:81: 07:6c:8a:9b:54:7c:f4:fa:0d:35:fa:79:d4:69:7d: cb:8d:ff:d3:3d:76:3e:8a:b9:d9:14:f3:dc:50:1b: 96:0c:51:47:51:7c:df:4a:c4:03:74:ed:12:21:ab: 5a:f4:e0:52:07:c3:62:68:95:6b:9e:bf:3a:67:31: d1:6f:9c:52:05:6b:03:e5:61:ca:96:c3:38:f0:f8: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A9:16:8D:E1:66:33:F4:4C:21:19:81:E5:73:EA:2E:25:7F:17:BC X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d7:56:fc:c6:b1:94:4c:cf:17:dd:6b:32:c6:b9:58:ff:a8: bc:e9:5c:08:51:ec:54:39:39:6d:55:fd:aa:ab:f0:79:79:98: 04:07:9e:3f:e1:58:4f:54:ab:82:c3:2f:3e:a0:fc:23:9e:25: f9:8c:79:9f:aa:63:b5:56:73:d7:97:a6:39:f0:fa:90:43:3c: 82:2f:78:11:c2:3d:78:b3:8c:6a:4b:fe:81:97:8f:32:97:8c: f5:0e:75:67:af:71:61:73:d0:af:9f:51:09:7d:b2:0c:86:e8: f5:fe:14:71:28:fd:36:9a:67:ef:b7:9a:a7:ad:3f:bb:b4:61: 80:8d:23:b4:e9:20:9f:51:09:0a:f8:c3:32:6d:77:84:73:6f: dc:c3:d6:f6:d9:f4:26:09:bc:0e:7f:76:5b:59:54:b9:8f:b1: a5:59:8f:23:17:d8:90:6f:ce:19:41:f5:bc:42:59:e1:7b:20: 04:8a:1f:d0:71:d3:0e:d3:23:5f:5e:b5:a1:7c:c3:33:b5:77: c1:cc:bd:6d:5d:86:b8:38:95:e6:58:7c:4f:5e:d0:32:8c:9b: ee:59:89:ff:32:ae:36:45:6f:ff:57:12:a5:03:90:79:dd:03: 40:9a:3e:7a:87:5e:74:68:bc:b1:2f:9e:19:4e:8a:ec:00:b4: a2:e3:10:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwODIyMTYwOTMzWhcNMjUwODI5MTYwOTMzWjAYMRYwFAYD VQQDEw02OGE4OTYzZC1hZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5w3p5ae7Yea/WG63VLx4e3aAuDNgw/9meVq98CGWUKFTeVR2XW5blzi38kVi OsdZZYgC5rXZBTkfOty/tVIIiakOSbch6G9TYcRVVTsLhn2mFomRuCP7ENearU6R a0KTt6saVh3qBW7jpuDXlpCt0P7vdZ2mVN0U8nmNCb1KRBJ2ffbLlRtoq9aZbcal fj9zm9LpZyy1S4+VEHKVM3+ALf4p3TRZ1vrnkiaZ2Umb0+bWeoEHbIqbVHz0+g01 +nnUaX3Ljf/TPXY+irnZFPPcUBuWDFFHUXzfSsQDdO0SIata9OBSB8NiaJVrnr86 ZzHRb5xSBWsD5WHKlsM48PguxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGpFo3h ZjP0TCEZgeVz6i4lfxe8MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe11b8xrGUTM8X3WsyxrlY/6i86VwIUexUOTltVf2qq/B5eZgEB54/ 4VhPVKuCwy8+oPwjniX5jHmfqmO1VnPXl6Y58PqQQzyCL3gRwj14s4xqS/6Bl48y l4z1DnVnr3Fhc9Cvn1EJfbIMhuj1/hRxKP02mmfvt5qnrT+7tGGAjSO06SCfUQkK +MMybXeEc2/cw9b22fQmCbwOf3ZbWVS5j7GlWY8jF9iQb84ZQfW8QlnheyAEih/Q cdMO0yNfXrWhfMMztXfBzL1tXYa4OJXmWHxPXtAyjJvuWYn/Mq42RW//VxKlA5B5 3QNAmj56h150aLyxL54ZTorsALSi4xDE -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:04 2025 by rpki-client