$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json) Hash identifier: 34/3+lDhp/SEpAe2lLkDkCskdVO5yuoNWuHm6vnLUlY= Subject key identifier: 01:F6:15:0A:88:25:69:91:EA:B2:06:97:F7:53:26:07:3A:F2:8A:21 Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft Manifest number: 0316 Signing time: Thu 07 Aug 2025 01:47:16 +0000 Manifest this update: Thu 07 Aug 2025 01:47:16 +0000 Manifest next update: Thu 14 Aug 2025 01:47:16 +0000 Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: gcSiOw1B+a1Bo8QN4Q1iXlcWdb3gy9S2/Q41fE8udL8=) 2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Validity Not Before: Aug 7 01:47:16 2025 GMT Not After : Aug 14 01:47:16 2025 GMT Subject: CN=689405a4-ba30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:25:c4:52:4f:24:d7:b2:45:34:35:f2:29: 77:bd:0b:86:f5:63:78:bd:d4:27:fa:f8:fb:2e:e5: 6a:b7:db:3b:6b:b4:39:84:7c:65:eb:1a:ec:d4:a1: 0f:a4:cf:13:ff:9d:cb:db:eb:c8:24:3c:c1:e8:94: bf:74:16:27:ab:9a:75:82:64:db:fe:da:ed:8e:67: b0:24:e8:91:14:d2:d0:78:cd:81:db:23:35:a5:b9: f0:f7:1e:96:c9:d0:8e:74:24:4b:b2:37:a1:3f:ec: 88:f3:5b:6a:68:42:48:1a:56:ff:35:2e:0d:f6:60: 8c:e8:1e:46:ea:f3:61:19:fc:4d:9d:b4:97:13:de: cc:ca:49:37:02:36:65:6f:ac:06:50:21:9e:b7:0c: 59:10:23:2b:84:8c:36:eb:00:d4:5b:e2:42:1d:1e: 91:f4:ba:f1:48:b4:fe:9e:8e:40:9b:66:c9:2a:f3: eb:3b:a9:11:4c:7a:62:94:ac:82:0e:04:91:39:19: d0:30:f1:57:b6:e9:4d:77:f2:93:82:d3:4b:1f:1d: d0:da:82:d9:43:fa:16:83:36:b3:1c:89:b3:f3:86: e6:d9:9f:4b:69:88:eb:36:30:bd:28:58:97:69:8e: 1a:1c:43:6e:8b:52:f5:52:88:76:e3:3a:34:1a:85: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:15:0A:88:25:69:91:EA:B2:06:97:F7:53:26:07:3A:F2:8A:21 X509v3 Authority Key Identifier: keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:eb:05:51:dc:84:ae:91:b3:25:9e:55:05:58:1d:8c:d0:ac: b7:84:5a:06:9d:65:96:e9:cb:77:0d:0f:8a:5f:95:f3:9a:a7: 1c:fd:63:db:b6:4d:36:6f:e5:cc:40:fc:1f:af:15:d5:36:13: 38:5f:ce:1a:08:47:7a:5c:a8:59:6d:1a:7b:b2:6b:27:28:a7: d7:ae:5a:4a:c8:37:65:e9:f1:69:f8:47:72:6a:2f:40:a1:9e: 16:a2:a4:7a:60:70:d7:56:a3:07:93:6b:14:fe:aa:35:a1:65: 4f:4c:4a:c6:75:5e:1a:52:d1:6d:c1:46:54:a5:38:53:b8:0c: 51:6a:a1:04:cd:40:a9:ed:0f:46:b3:a8:a5:bd:b5:76:68:86: 0a:40:4d:2a:b3:60:7a:8a:61:c6:15:f9:ee:de:c1:4a:76:16: 51:1d:a8:23:95:1b:32:42:19:5e:41:47:51:ed:a9:60:1a:46: 74:59:71:fd:95:4f:20:72:7c:c3:20:ae:76:43:0b:c6:22:ad: c2:7e:7b:b3:9e:84:1a:7a:35:ae:da:e8:f2:93:db:b6:29:95: 7f:18:7d:02:ed:34:57:0c:ce:47:e2:7d:76:67:a2:2d:75:87: 9c:1e:b4:43:96:99:7c:ff:62:74:f6:95:54:46:1d:dd:87:79: 94:68:a2:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxRkMxMTAvBgNVBAUTKDQxNUQxRUY1N0REQTc4QTVGQzk1MjQwNTQyNDg0MDAy OENENDdEOTkwHhcNMjUwODA3MDE0NzE2WhcNMjUwODE0MDE0NzE2WjAYMRYwFAYD VQQDEw02ODk0MDVhNC1iYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt0lxFJPJNeyRTQ18il3vQuG9WN4vdQn+vj7LuVqt9s7a7Q5hHxl6xrs1KEP pM8T/53L2+vIJDzB6JS/dBYnq5p1gmTb/trtjmewJOiRFNLQeM2B2yM1pbnw9x6W ydCOdCRLsjehP+yI81tqaEJIGlb/NS4N9mCM6B5G6vNhGfxNnbSXE97Mykk3AjZl b6wGUCGetwxZECMrhIw26wDUW+JCHR6R9LrxSLT+no5Am2bJKvPrO6kRTHpilKyC DgSRORnQMPFXtulNd/KTgtNLHx3Q2oLZQ/oWgzazHImz84bm2Z9LaYjrNjC9KFiX aY4aHENui1L1Uoh24zo0GoVhXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH2FQqI JWmR6rIGl/dTJgc68oohMB8GA1UdIwQYMBaAFEFdHvV92nil/JUkBUJIQAKM1H2Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFGQy8zMDRBODlEQ0RF MzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVLWDhsU1FGUWtoQUFvelVm WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWMGU5WDNhZUtYOGxTUUZRa2hBQW96VWZaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFGQy8zMDRBODlEQ0RFMzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVL WDhsU1FGUWtoQUFvelVmWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo6wVR3ISukbMlnlUFWB2M0Ky3hFoGnWWW6ct3DQ+KX5Xzmqcc/WPb tk02b+XMQPwfrxXVNhM4X84aCEd6XKhZbRp7smsnKKfXrlpKyDdl6fFp+Edyai9A oZ4WoqR6YHDXVqMHk2sU/qo1oWVPTErGdV4aUtFtwUZUpThTuAxRaqEEzUCp7Q9G s6ilvbV2aIYKQE0qs2B6imHGFfnu3sFKdhZRHagjlRsyQhleQUdR7algGkZ0WXH9 lU8gcnzDIK52QwvGIq3CfnuznoQaejWu2ujyk9u2KZV/GH0C7TRXDM5H4n12Z6It dYecHrRDlpl8/2J09pVURh3dh3mUaKKy -----END CERTIFICATE-----Generated at Fri Aug 8 10:25:57 2025 by rpki-client