$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: 83n+p2lMqht7Ab838S7cz5eFPPiK95ASy2d+XXSccPQ= Subject key identifier: 54:DB:72:B0:14:3C:C1:02:15:43:3A:2B:39:7B:32:7E:C5:18:08:5A Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 01D7 Signing time: Sat 23 Aug 2025 03:09:08 +0000 Manifest this update: Sat 23 Aug 2025 03:09:07 +0000 Manifest next update: Sat 30 Aug 2025 03:09:07 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: 6NPIslS0RUmoSd6HSWYZC4UlE0ayk1fWaoK/nAv1Hw8=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=) 3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Aug 23 03:09:07 2025 GMT Not After : Aug 30 03:09:07 2025 GMT Subject: CN=68a930d3-b466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:10:03:65:2d:13:fc:3a:41:08:16:1e:8e: c9:52:fa:25:09:32:0c:92:39:47:a7:ae:d8:ad:d8: 48:30:95:21:47:0d:0f:08:1c:b9:08:45:82:4c:e1: 71:80:6d:4c:4b:94:f5:0f:71:7b:4d:d8:d5:cc:81: d4:d4:5b:75:a3:dd:16:47:4e:2f:06:95:83:20:d5: 07:3c:22:9b:fc:26:f8:11:93:78:a9:13:0f:be:b0: 03:7f:c2:8d:ce:7c:a8:87:a8:7d:b3:c9:22:db:17: fa:03:a6:d4:24:55:33:4f:48:61:02:d8:6e:af:70: 02:61:48:1b:3f:ae:b1:d1:48:84:68:b0:db:b0:a5: c4:82:e4:f7:61:4c:36:7d:00:95:a9:72:ef:2c:aa: 1a:1f:6f:e8:d2:df:95:98:26:c7:0d:28:ef:51:f4: fd:2c:d9:4c:18:c1:d2:93:1a:d5:41:bc:2c:46:58: 62:04:e6:0b:61:10:76:43:61:37:d5:8a:40:82:d9: bd:5a:59:7c:70:5e:35:bb:2d:17:f9:99:dd:c7:02: 99:82:dc:59:f3:b4:49:2d:de:06:56:e3:a1:5d:73: c5:8e:83:d2:16:48:a6:3d:0f:8b:8b:42:c1:e7:73: 81:99:15:89:97:7c:30:9d:68:2d:ef:12:d8:84:08: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DB:72:B0:14:3C:C1:02:15:43:3A:2B:39:7B:32:7E:C5:18:08:5A X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:83:07:57:6b:34:bf:bf:e7:3b:f4:5f:f9:91:97:7c:0c:df: c9:08:33:3e:1c:50:45:c7:e0:8b:cc:7a:5d:36:9d:34:58:68: ea:56:16:c0:76:3f:aa:2e:bd:31:ec:87:da:65:b9:3d:3d:4c: 8c:8b:eb:23:4e:58:3c:35:94:61:42:a1:c9:f2:8d:25:fb:e6: b5:08:80:20:14:e8:96:d1:cd:db:71:8e:d3:fb:71:2b:f8:56: dc:31:4b:15:e6:ba:1c:c0:99:18:e0:37:2d:2b:84:d6:85:87: 89:73:c0:27:e5:b5:17:cd:63:d0:ee:56:53:92:f7:26:b8:d7: d8:16:e5:10:e1:06:86:6f:09:31:01:62:0e:3b:8d:1b:a9:19: b7:79:e3:a9:22:5d:51:d6:df:5b:ee:58:c8:00:70:50:f8:dd: 62:60:d7:ef:18:8d:db:f9:7d:c0:ac:c2:3d:71:c9:82:e2:5b: 77:2b:00:40:15:6a:21:fa:38:5a:dd:17:06:37:8b:f1:c6:c1: f4:0e:c6:7e:ad:7d:2c:8a:23:12:7d:e2:c6:87:9d:be:20:32: 62:94:85:1c:56:7a:a1:8b:4a:ab:b3:e8:49:97:1b:96:70:e6: 58:c2:77:36:dc:ee:ee:d5:2b:c3:d2:17:cc:b5:74:c8:ce:1f: 6d:d6:19:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwODIzMDMwOTA3WhcNMjUwODMwMDMwOTA3WjAYMRYwFAYD VQQDEw02OGE5MzBkMy1iNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIcQA2UtE/w6QQgWHo7JUvolCTIMkjlHp67YrdhIMJUhRw0PCBy5CEWCTOFx gG1MS5T1D3F7TdjVzIHU1Ft1o90WR04vBpWDINUHPCKb/Cb4EZN4qRMPvrADf8KN znyoh6h9s8ki2xf6A6bUJFUzT0hhAthur3ACYUgbP66x0UiEaLDbsKXEguT3YUw2 fQCVqXLvLKoaH2/o0t+VmCbHDSjvUfT9LNlMGMHSkxrVQbwsRlhiBOYLYRB2Q2E3 1YpAgtm9Wll8cF41uy0X+ZndxwKZgtxZ87RJLd4GVuOhXXPFjoPSFkimPQ+Li0LB 53OBmRWJl3wwnWgt7xLYhAgEeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTbcrAU PMECFUM6Kzl7Mn7FGAhaMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdgwdXazS/v+c79F/5kZd8DN/JCDM+HFBFx+CLzHpdNp00WGjqVhbA dj+qLr0x7IfaZbk9PUyMi+sjTlg8NZRhQqHJ8o0l++a1CIAgFOiW0c3bcY7T+3Er +FbcMUsV5rocwJkY4DctK4TWhYeJc8An5bUXzWPQ7lZTkvcmuNfYFuUQ4QaGbwkx AWIOO40bqRm3eeOpIl1R1t9b7ljIAHBQ+N1iYNfvGI3b+X3ArMI9ccmC4lt3KwBA FWoh+jha3RcGN4vxxsH0DsZ+rX0siiMSfeLGh52+IDJilIUcVnqhi0qrs+hJlxuW cOZYwnc23O7u1SvD0hfMtXTIzh9t1hkt -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:31 2025 by rpki-client