$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: tE7HH3khLwjpq+zMs+S7x2lrjmXmDaEPjELnP/UMK78= Subject key identifier: 8A:37:BE:C3:82:FB:AA:5C:25:92:36:D6:8B:3C:3C:07:F1:66:04:A3 Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0A83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0A7B Signing time: Fri 22 Aug 2025 19:44:39 +0000 Manifest this update: Fri 22 Aug 2025 19:44:39 +0000 Manifest next update: Fri 29 Aug 2025 19:44:39 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: F03CeOMwkhP4fnwxv0Fmayj2AOzhoXQIgEum6m3k8bo=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: Aug 22 19:44:39 2025 GMT Not After : Aug 29 19:44:39 2025 GMT Subject: CN=68a8c8a7-824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:7a:c9:a8:28:ec:a9:68:16:48:85:90:4c: 2b:62:76:c8:15:bd:63:d8:c7:c7:83:ca:2f:ee:7a: 7f:a4:30:bc:46:7d:04:19:de:8a:9e:58:ce:95:29: 9d:68:61:f4:40:90:a0:99:d1:96:d2:26:b2:bf:e4: 04:4a:a6:c4:f5:77:04:ff:9c:7f:99:46:ed:0f:2a: cb:52:9d:d0:74:f4:2a:91:42:ec:4a:a9:06:5e:cc: 65:61:37:af:27:51:57:fc:d8:8f:94:c6:d0:db:5f: cb:56:81:e8:1e:cd:5b:b5:cc:e7:73:48:58:21:a5: 25:bb:84:83:49:3b:41:27:79:0e:22:b0:8c:80:e4: e9:93:ef:80:e2:a5:3c:c1:5b:96:dc:7c:e2:23:3c: 52:6c:34:55:f0:ea:e1:c8:13:7b:33:3a:f5:83:69: 4a:e0:bc:35:4c:5d:85:0f:51:4e:93:e0:47:e8:89: 6a:c5:b3:2b:56:97:44:a2:06:d3:c2:d8:1d:ff:88: d8:ca:55:d1:d6:97:41:d5:39:c4:35:fc:13:e9:8f: 21:43:c5:00:34:b6:2b:a4:53:ed:f3:e5:b3:9c:5c: e6:75:e6:28:32:0e:26:03:8a:5f:33:eb:10:48:fa: fa:39:fc:8c:6c:da:57:a8:67:a3:9f:ca:0e:4e:4a: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:BE:C3:82:FB:AA:5C:25:92:36:D6:8B:3C:3C:07:F1:66:04:A3 X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:5f:00:7e:44:90:c6:15:c1:09:b7:49:71:fc:64:f2:11:bd: 85:eb:04:fe:91:2d:53:70:f2:92:75:83:bb:92:77:1f:4e:fb: 88:eb:08:7c:59:fd:18:d8:5c:54:e1:79:f8:9c:55:9f:b3:c0: 68:08:a0:53:49:ec:58:64:e9:c8:42:3e:3b:e5:0a:bc:e4:af: 62:97:0f:b1:b3:b5:fb:a0:3a:61:92:98:2b:29:1c:6f:a1:bd: ae:26:05:96:71:e9:db:11:02:32:78:52:4b:e7:dc:b9:6c:ac: 0d:6b:d2:38:7e:68:fb:8a:e5:5c:bb:0b:f1:0c:57:a0:7b:05: 03:df:1e:d9:61:51:8f:3b:ff:0b:6f:a1:50:54:76:f4:15:3d: b2:46:49:13:2c:e3:0a:99:47:b5:a6:6d:81:9c:db:d4:f3:03: 6a:01:c4:78:c9:67:18:1d:ea:2c:95:9e:12:87:73:0e:b1:3d: fb:5f:fd:c6:4d:50:13:f4:7b:15:7e:4e:09:72:12:98:b5:70: a5:a6:d6:b6:c7:46:9e:09:0e:ed:7e:5f:68:ce:f3:96:8c:d1: 80:e7:78:57:bc:51:8f:fb:9f:f0:35:4b:42:43:0d:0e:2b:a1: ec:28:9d:9a:26:a3:dc:62:51:3e:00:a8:82:20:b1:a9:9f:43: 88:a7:d0:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUwODIyMTk0NDM5WhcNMjUwODI5MTk0NDM5WjAYMRYwFAYD VQQDEw02OGE4YzhhNy04MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aV6yago7KloFkiFkEwrYnbIFb1j2MfHg8ov7np/pDC8Rn0EGd6KnljOlSmd aGH0QJCgmdGW0iayv+QESqbE9XcE/5x/mUbtDyrLUp3QdPQqkULsSqkGXsxlYTev J1FX/NiPlMbQ21/LVoHoHs1btcznc0hYIaUlu4SDSTtBJ3kOIrCMgOTpk++A4qU8 wVuW3HziIzxSbDRV8OrhyBN7Mzr1g2lK4Lw1TF2FD1FOk+BH6IlqxbMrVpdEogbT wtgd/4jYylXR1pdB1TnENfwT6Y8hQ8UANLYrpFPt8+WznFzmdeYoMg4mA4pfM+sQ SPr6OfyMbNpXqGejn8oOTkr9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo3vsOC +6pcJZI21os8PAfxZgSjMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLXwB+RJDGFcEJt0lx/GTyEb2F6wT+kS1TcPKSdYO7kncfTvuI6wh8 Wf0Y2FxU4Xn4nFWfs8BoCKBTSexYZOnIQj475Qq85K9ilw+xs7X7oDphkpgrKRxv ob2uJgWWcenbEQIyeFJL59y5bKwNa9I4fmj7iuVcuwvxDFegewUD3x7ZYVGPO/8L b6FQVHb0FT2yRkkTLOMKmUe1pm2BnNvU8wNqAcR4yWcYHeoslZ4Sh3MOsT37X/3G TVAT9HsVfk4JchKYtXClpta2x0aeCQ7tfl9ozvOWjNGA53hXvFGP+5/wNUtCQw0O K6HsKJ2aJqPcYlE+AKiCILGpn0OIp9C2 -----END CERTIFICATE-----Generated at Sat Aug 23 18:37:42 2025 by rpki-client