$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: 28LBqqfblUW0BVRddfcgq4gMWhz/LNn9K58ufejLuDQ= Subject key identifier: FB:BB:CA:B2:34:B5:24:D2:D4:AE:63:BC:AD:FE:6D:98:77:32:6C:CC Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 20B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 27E1 Signing time: Fri 22 Aug 2025 16:00:24 +0000 Manifest this update: Fri 22 Aug 2025 16:00:23 +0000 Manifest next update: Fri 29 Aug 2025 16:00:23 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: FjJS6f1eXHrsNtob4M3lh8aHiWTV+ElGNp9bSNn2yMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8373 (0x20b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Aug 22 16:00:23 2025 GMT Not After : Aug 29 16:00:23 2025 GMT Subject: CN=68a89418-aa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:11:a3:87:cd:21:34:02:84:e9:66:3b:73: ce:c1:f1:65:19:aa:cb:24:a1:81:49:81:72:f1:93: 15:81:7f:f9:7b:8e:99:0f:0b:a7:58:ca:cf:8f:ec: 6c:54:a3:40:3c:fa:4c:76:b7:c4:88:37:aa:3a:bc: 8f:af:0b:36:3a:b9:4a:08:1b:a1:39:d2:01:86:5c: 73:2f:10:19:f5:ff:e4:d1:67:84:2f:5a:f9:e4:ed: cc:1d:fe:70:62:5d:f7:b6:ff:27:50:d4:7d:da:2c: 85:02:7c:b6:04:f8:7e:cf:2b:a1:5a:5c:de:2f:60: 04:79:31:9a:16:8d:cc:d5:6c:28:8f:dc:b3:77:18: 38:87:94:9d:0a:9e:70:49:49:f6:8e:60:fa:26:f8: b9:7a:81:39:6d:75:a7:6f:f7:00:7b:de:c1:16:05: 5d:32:8c:f0:36:63:78:93:61:d2:30:b0:c9:4a:88: 85:fe:81:43:21:d0:a4:f2:83:77:9a:89:60:4e:a3: 64:7c:77:16:1c:4c:eb:66:34:c7:21:20:50:4e:4d: 86:40:c1:4d:8c:b1:24:d0:81:d0:c8:89:57:9b:95: e8:c1:34:88:b8:dd:0b:65:8a:4f:9f:bc:81:c1:51: 57:40:6d:40:6e:0e:e0:d7:49:bc:4b:44:0b:3f:31: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BB:CA:B2:34:B5:24:D2:D4:AE:63:BC:AD:FE:6D:98:77:32:6C:CC X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:3b:85:0c:1b:65:68:0c:e7:76:f8:33:22:ce:cb:d6:e1:84: ad:a7:52:69:22:09:56:dc:d9:bc:1b:4d:2b:17:c9:ab:3f:44: af:67:c6:a1:e2:63:c4:c5:9f:78:d6:1f:c1:77:b1:eb:4c:e4: b9:5d:b0:56:02:b0:3c:5c:58:55:c1:0d:7d:8b:1d:9b:40:86: 94:25:ec:e6:37:0a:0e:28:77:c8:fb:28:02:06:7b:c5:ef:b0: a8:fc:37:00:78:79:81:f4:fe:b0:f6:fb:bc:80:dd:ad:1b:5b: b9:2b:07:9e:54:46:bb:30:27:65:0c:a6:6f:c7:fb:f2:58:d7: 7c:34:79:5c:65:77:c6:24:58:ee:87:9f:86:1f:93:de:03:e1: f3:40:b0:cb:12:c3:80:16:c3:d8:73:09:97:2f:05:d5:0d:b4: 59:d2:8f:e8:38:4c:48:66:97:68:31:22:ff:d6:37:a6:4c:bd: 32:7a:74:83:a2:10:61:c3:3b:22:c2:df:ad:69:47:d7:57:74: 28:7a:58:c8:29:a5:13:32:7e:ac:32:ca:56:90:ca:7f:eb:ed: 60:07:21:5e:bd:2d:3c:91:31:46:3e:c3:07:38:66:47:c5:dc: e9:67:1d:a4:0c:c7:ae:e0:2e:c6:bc:6b:bf:7f:74:71:02:14: 80:f8:f0:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICILUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUwODIyMTYwMDIzWhcNMjUwODI5MTYwMDIzWjAYMRYwFAYD VQQDEw02OGE4OTQxOC1hYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwQRo4fNITQChOlmO3POwfFlGarLJKGBSYFy8ZMVgX/5e46ZDwunWMrPj+xs VKNAPPpMdrfEiDeqOryPrws2OrlKCBuhOdIBhlxzLxAZ9f/k0WeEL1r55O3MHf5w Yl33tv8nUNR92iyFAny2BPh+zyuhWlzeL2AEeTGaFo3M1Wwoj9yzdxg4h5SdCp5w SUn2jmD6Jvi5eoE5bXWnb/cAe97BFgVdMozwNmN4k2HSMLDJSoiF/oFDIdCk8oN3 molgTqNkfHcWHEzrZjTHISBQTk2GQMFNjLEk0IHQyIlXm5XowTSIuN0LZYpPn7yB wVFXQG1Abg7g10m8S0QLPzFLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu7yrI0 tSTS1K5jvK3+bZh3MmzMMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYO4UMG2VoDOd2+DMizsvW4YStp1JpIglW3Nm8G00rF8mrP0SvZ8ah 4mPExZ941h/Bd7HrTOS5XbBWArA8XFhVwQ19ix2bQIaUJezmNwoOKHfI+ygCBnvF 77Co/DcAeHmB9P6w9vu8gN2tG1u5KweeVEa7MCdlDKZvx/vyWNd8NHlcZXfGJFju h5+GH5PeA+HzQLDLEsOAFsPYcwmXLwXVDbRZ0o/oOExIZpdoMSL/1jemTL0yenSD ohBhwzsiwt+taUfXV3QoeljIKaUTMn6sMspWkMp/6+1gByFevS08kTFGPsMHOGZH xdzpZx2kDMeu4C7GvGu/f3RxAhSA+PDL -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:09 2025 by rpki-client