$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: 2VENu9YTCOlj2AIOKvakcRR/dTTMqoY4VpB3nxhAVuw= Subject key identifier: 3D:A3:B4:BD:13:71:36:EE:1D:3F:4F:27:07:5F:73:42:78:AA:BC:83 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 039E Signing time: Sat 09 Aug 2025 01:19:36 +0000 Manifest this update: Sat 09 Aug 2025 01:19:35 +0000 Manifest next update: Sat 16 Aug 2025 01:19:35 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: J5rDsqzNFhHTQRG6TCc9OTFyq9lj+cVEHtX8PHmJAmY=) 2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Aug 9 01:19:35 2025 GMT Not After : Aug 16 01:19:35 2025 GMT Subject: CN=6896a227-db84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:f5:37:02:36:d9:ec:a8:48:48:56:9b:d9: 2d:37:0b:23:cb:89:27:fa:dc:9a:e9:f4:0c:e7:17: ef:6e:62:05:64:bf:85:87:a9:85:2d:cd:49:88:75: 86:fb:e9:f3:ef:1c:34:e9:38:42:9d:99:60:31:7c: 24:74:50:9b:1a:0e:36:2f:cd:94:11:dd:8f:56:94: a9:82:d5:e4:c2:ec:59:0c:a2:5b:46:69:ee:a9:46: 1f:71:1f:47:31:52:12:42:df:ff:f2:ed:00:7c:85: 58:92:2f:71:43:03:2a:e2:2e:91:cf:00:e0:8a:1f: 5e:46:8d:19:5f:c5:d5:dc:15:c9:5b:d0:10:e7:f3: 89:c5:fd:6c:b6:86:76:6d:d7:5e:ed:c0:f7:d6:71: ec:9f:c7:8f:cd:8c:d3:11:42:09:22:02:50:47:50: 26:27:df:02:e5:01:99:28:68:d8:d0:a6:98:db:6b: 6e:15:ba:13:47:95:5c:31:93:26:27:4a:f8:bf:d0: fc:95:bf:26:47:2a:35:88:a7:93:e7:76:16:19:1d: a9:88:53:5b:39:24:33:cf:eb:ea:e2:03:96:c7:59: d8:50:6e:1c:12:63:7a:af:8f:1d:8d:42:de:7d:29: 28:80:3e:66:e3:35:5c:18:30:e7:01:60:1b:d4:12: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A3:B4:BD:13:71:36:EE:1D:3F:4F:27:07:5F:73:42:78:AA:BC:83 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d2:c3:07:9d:14:cb:27:f4:54:1e:b1:f0:9a:9c:15:26:0b: b9:00:71:48:a0:71:64:50:98:ea:87:cb:d7:0c:73:1b:37:ac: 0c:01:86:5c:f0:87:c5:6b:88:5b:7f:59:69:be:ef:a6:97:41: 75:f2:a5:47:c8:a8:79:03:29:13:88:4f:8e:b9:ce:91:02:5a: 82:c3:fc:66:cf:9a:a4:58:a3:8a:1b:17:95:34:db:92:3e:ab: 58:0e:e7:ad:59:10:64:7b:d4:b4:10:8a:5d:5d:0d:4c:df:51: 31:7e:f2:99:87:56:91:be:c3:ca:4e:ca:99:5f:71:6d:4f:d3: f5:93:84:1a:53:c9:4d:97:1c:09:c2:45:6f:62:1a:32:70:88: da:54:7f:fc:b8:d1:d5:06:d7:0a:3a:9b:ef:12:c5:28:88:d2: c2:03:b1:fd:2d:6b:07:37:2e:e6:7c:81:0b:c9:ea:db:54:16: cb:3b:f4:bb:34:90:f8:78:e3:48:18:51:61:53:3b:3e:64:7c: bf:4a:95:bb:ed:72:ea:01:6f:24:6f:90:ee:57:8c:bb:d2:b8: c8:7f:70:43:50:1c:5a:cc:6d:07:90:aa:ed:5f:42:8a:9b:26: 04:57:2b:67:0c:55:fa:99:a0:c0:ac:35:53:33:3f:c5:1a:1a: 12:69:67:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUwODA5MDExOTM1WhcNMjUwODE2MDExOTM1WjAYMRYwFAYD VQQDEw02ODk2YTIyNy1kYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9f1NwI22eyoSEhWm9ktNwsjy4kn+tya6fQM5xfvbmIFZL+Fh6mFLc1JiHWG ++nz7xw06ThCnZlgMXwkdFCbGg42L82UEd2PVpSpgtXkwuxZDKJbRmnuqUYfcR9H MVISQt//8u0AfIVYki9xQwMq4i6RzwDgih9eRo0ZX8XV3BXJW9AQ5/OJxf1stoZ2 bdde7cD31nHsn8ePzYzTEUIJIgJQR1AmJ98C5QGZKGjY0KaY22tuFboTR5VcMZMm J0r4v9D8lb8mRyo1iKeT53YWGR2piFNbOSQzz+vq4gOWx1nYUG4cEmN6r48djULe fSkogD5m4zVcGDDnAWAb1BK4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2jtL0T cTbuHT9PJwdfc0J4qryDMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV0sMHnRTLJ/RUHrHwmpwVJgu5AHFIoHFkUJjqh8vXDHMbN6wMAYZc 8IfFa4hbf1lpvu+ml0F18qVHyKh5AykTiE+Ouc6RAlqCw/xmz5qkWKOKGxeVNNuS PqtYDuetWRBke9S0EIpdXQ1M31ExfvKZh1aRvsPKTsqZX3FtT9P1k4QaU8lNlxwJ wkVvYhoycIjaVH/8uNHVBtcKOpvvEsUoiNLCA7H9LWsHNy7mfIELyerbVBbLO/S7 NJD4eONIGFFhUzs+ZHy/SpW77XLqAW8kb5DuV4y70rjIf3BDUBxazG0HkKrtX0KK myYEVytnDFX6maDArDVTMz/FGhoSaWc7 -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:32 2025 by rpki-client