$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: sGOQXmzINC+5JaMA+TtMfd1lzQol5O3AHX+GU4g2gK4= Subject key identifier: 57:AB:10:6B:7C:7A:0C:12:C3:3E:7E:34:B0:61:2F:80:0F:AF:19:24 Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 33 Signing time: Mon 11 Aug 2025 07:58:29 +0000 Manifest this update: Mon 11 Aug 2025 07:58:28 +0000 Manifest next update: Mon 18 Aug 2025 07:58:28 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: rGCLDFbu9foKVFXfvlHkCnRiwukPvM1ygRlpgfPuUXs=) 2: E9331F863B2911F084C93028C4F9AE02.roa (hash: Pnz5aFAbJ5Bkp2gyQ97UceAHI3FhcCchW1EhmLkhr+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Aug 11 07:58:28 2025 GMT Not After : Aug 18 07:58:28 2025 GMT Subject: CN=6899a2a5-c55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:2e:04:d5:20:94:c0:96:63:57:2f:75:f4: 37:b0:7c:82:e0:38:cd:1c:44:f3:7c:55:bf:ef:ab: dc:07:e0:88:a4:c2:27:f6:79:b2:91:ec:70:92:fd: 7d:b1:80:e8:e1:8d:e7:d7:c3:15:ca:dd:bd:e5:0d: 6b:18:db:10:dc:e8:d9:89:0b:fc:7c:3a:78:3c:79: 27:33:16:ce:1c:6a:11:60:7c:ae:a9:b9:31:a4:31: 9d:65:0b:27:fa:30:cc:16:53:2e:5d:9f:3d:dd:cc: 2a:5c:66:5e:20:b1:f4:62:3c:fc:81:46:06:fa:4a: d9:9e:a3:b9:21:14:08:00:67:d4:10:b0:e1:b3:85: 6f:7c:b3:6d:3a:6b:30:b6:04:21:55:1d:25:e6:a6: ea:e9:ee:2a:d1:9f:df:a5:42:83:25:79:58:35:b2: 4e:ed:7d:fa:7e:cc:4e:fc:48:d0:70:00:1c:61:c0: 53:ec:27:fc:e9:18:d1:33:e2:49:bc:8b:4b:5b:8e: f9:18:38:9e:c4:d7:f7:d0:94:8d:ca:f0:2c:bf:5f: e1:5e:43:59:23:89:e0:8b:8a:33:5c:32:ba:5c:fe: 49:cd:f5:3d:82:2d:e1:fb:06:26:fc:7f:0e:21:8c: 7f:fc:8d:28:e0:46:7e:79:29:54:bc:08:ef:ec:43: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AB:10:6B:7C:7A:0C:12:C3:3E:7E:34:B0:61:2F:80:0F:AF:19:24 X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bc:b3:82:6b:1b:da:05:5a:c3:c1:44:44:74:e4:e2:e5:aa: 8b:10:96:5b:ae:ab:03:92:19:d6:a9:7a:dd:18:35:95:0e:83: 42:46:30:c8:f7:33:46:87:a3:b2:cd:87:9e:2d:a5:af:dc:31: 5e:de:1e:59:17:b9:e7:76:e7:78:09:24:11:68:91:f9:f2:0f: 56:84:85:c9:f4:1f:82:14:13:38:7c:47:4c:e8:17:b9:5c:bb: 4c:db:a8:b7:5e:49:17:a2:ba:da:40:19:56:3e:a3:c7:33:bb: 8e:d0:97:78:9e:ac:50:12:82:9b:46:1b:b7:0b:11:9e:b1:90: 23:39:28:c6:e9:98:a7:29:46:5d:cc:53:e6:c3:c7:80:b7:ef: 0d:2e:96:2f:6b:18:ae:ff:80:25:74:62:36:3c:f2:07:e8:d0: ec:62:eb:f7:26:8d:22:47:f8:55:32:f7:c4:f5:54:2b:0c:65: 6e:09:5e:03:0a:2c:cf:ab:0b:77:35:cc:5a:6f:fb:3c:d2:ba: d2:77:9f:67:f3:11:92:47:f7:11:30:39:da:0d:9f:09:07:af: b3:fb:c9:34:f4:f2:a1:32:dc:74:85:99:b5:f5:76:f4:c1:5c: bf:a4:3d:72:8c:97:b9:8c:4d:7c:ef:e3:03:f8:b7:9b:96:d2: 7e:82:87:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTA4MTEwNzU4MjhaFw0yNTA4MTgwNzU4MjhaMBgxFjAUBgNV BAMTDTY4OTlhMmE1LWM1NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr2S4E1SCUwJZjVy919DewfILgOM0cRPN8Vb/vq9wH4Iikwif2ebKR7HCS/X2x gOjhjefXwxXK3b3lDWsY2xDc6NmJC/x8Ong8eSczFs4cahFgfK6puTGkMZ1lCyf6 MMwWUy5dnz3dzCpcZl4gsfRiPPyBRgb6Stmeo7khFAgAZ9QQsOGzhW98s206azC2 BCFVHSXmpurp7irRn9+lQoMleVg1sk7tffp+zE78SNBwABxhwFPsJ/zpGNEz4km8 i0tbjvkYOJ7E1/fQlI3K8Cy/X+FeQ1kjieCLijNcMrpc/knN9T2CLeH7Bib8fw4h jH/8jSjgRn55KVS8CO/sQzrTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV6sQa3x6 DBLDPn40sGEvgA+vGSQwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIa8s4JrG9oFWsPBRER05OLlqosQlluuqwOSGdapet0YNZUOg0JGMMj3 M0aHo7LNh54tpa/cMV7eHlkXued253gJJBFokfnyD1aEhcn0H4IUEzh8R0zoF7lc u0zbqLdeSReiutpAGVY+o8czu47Ql3ierFASgptGG7cLEZ6xkCM5KMbpmKcpRl3M U+bDx4C37w0uli9rGK7/gCV0YjY88gfo0Oxi6/cmjSJH+FUy98T1VCsMZW4JXgMK LM+rC3c1zFpv+zzSutJ3n2fzEZJH9xEwOdoNnwkHr7P7yTT08qEy3HSFmbX1dvTB XL+kPXKMl7mMTXzv4wP4t5uW0n6ChxA= -----END CERTIFICATE-----Generated at Tue Aug 12 18:59:41 2025 by rpki-client