$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: WcS3DvkxaU3NJ7pMri4zmxibkWN15pnrgyiB2SNrlW4= Subject key identifier: FB:9B:36:C1:BC:64:A6:9C:DD:C1:0F:61:9F:B5:41:5F:AD:F4:A0:B5 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: AD Signing time: Thu 07 Aug 2025 06:42:08 +0000 Manifest this update: Thu 07 Aug 2025 06:42:07 +0000 Manifest next update: Thu 14 Aug 2025 06:42:07 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: ruGZGWTiGUxndOp4pQIXMbXziHbnlWcLMJqX37Hn+Gk=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Aug 7 06:42:07 2025 GMT Not After : Aug 14 06:42:07 2025 GMT Subject: CN=68944abf-3198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:77:bc:0b:78:a0:f8:5b:2b:42:3e:a8:59: 9e:c7:04:4e:ba:57:7e:86:ad:b7:6e:55:09:2f:10: 90:b4:e1:e4:1d:e7:8e:09:8f:8c:df:02:d8:88:5d: 03:97:a2:71:55:dc:71:1a:9f:37:72:58:1d:06:94: 39:7a:50:3b:10:4c:51:60:49:25:a3:5c:0b:cf:5d: 64:85:3d:32:49:57:9e:46:10:2f:f0:eb:b7:25:0e: ac:c9:0a:68:25:d2:40:81:0e:4d:40:7d:ed:67:e7: a4:7a:66:5d:b6:02:7e:d9:2b:82:0a:5e:5d:b5:7f: 2a:bf:72:0c:66:fd:e1:b6:85:a4:95:af:13:4f:07: ef:d6:b8:54:29:03:f9:25:eb:f3:de:6d:f6:c8:a1: ac:6e:be:4a:ae:f1:e5:dc:03:62:58:ca:f3:af:ac: aa:36:3a:0b:94:79:d7:32:5f:51:04:7d:0d:0c:3b: de:44:da:1c:61:73:06:87:88:59:f7:32:96:3d:aa: 46:6d:3c:9f:57:62:49:17:fa:a7:0a:2a:4f:49:cc: 38:34:0d:87:cd:d1:29:2e:ad:6e:4f:da:7a:9b:52: ed:17:ad:4a:f4:05:d6:72:74:e8:68:0a:c1:5e:2b: bb:3b:0c:be:08:5c:ea:e3:05:97:24:3b:f5:18:9b: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9B:36:C1:BC:64:A6:9C:DD:C1:0F:61:9F:B5:41:5F:AD:F4:A0:B5 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:57:9e:5d:61:26:d2:bd:ff:17:49:14:bd:f4:41:09:8d:60: c6:ff:bb:3a:cd:03:2d:36:65:d6:ec:6e:d1:c0:01:2a:15:01: 8d:44:39:29:8d:8c:47:d9:be:02:98:83:dc:03:ef:09:67:86: 57:bc:75:7b:37:24:ca:6b:d4:65:e1:b9:2f:85:65:b8:4a:82: a3:31:d7:74:27:fc:b4:4f:76:b9:2a:85:2d:3e:57:74:62:3a: 52:9e:69:fd:f2:26:66:85:3f:a3:37:a3:67:7a:fa:97:9e:af: 99:73:86:ab:76:20:6d:66:3e:5c:6f:39:b1:ed:34:90:27:4e: 3e:8f:bc:4b:6f:5b:f5:18:cc:f6:18:f5:90:4b:6c:93:31:7d: 0c:01:31:a7:87:29:e8:64:7e:51:59:86:3e:7a:04:b6:f7:73: ba:38:2b:e4:91:41:1c:aa:59:b3:30:8c:f8:85:23:fc:46:5f: 3d:4e:cb:9f:12:1c:d7:3c:16:61:ea:46:8d:1e:e9:3d:8d:c1: ce:2e:4d:9e:cc:79:a5:fe:9f:0d:a8:ae:6f:7b:48:72:76:91: 79:8d:76:c2:0f:1b:d3:66:00:31:66:06:61:ad:52:01:ce:68: 83:ae:14:ce:a1:6d:ab:a3:16:54:de:a0:5d:e0:f5:14:14:c1: cb:84:38:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUwODA3MDY0MjA3WhcNMjUwODE0MDY0MjA3WjAYMRYwFAYD VQQDEw02ODk0NGFiZi0zMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ax3vAt4oPhbK0I+qFmexwROuld+hq23blUJLxCQtOHkHeeOCY+M3wLYiF0D l6JxVdxxGp83clgdBpQ5elA7EExRYEklo1wLz11khT0ySVeeRhAv8Ou3JQ6syQpo JdJAgQ5NQH3tZ+ekemZdtgJ+2SuCCl5dtX8qv3IMZv3htoWkla8TTwfv1rhUKQP5 Jevz3m32yKGsbr5KrvHl3ANiWMrzr6yqNjoLlHnXMl9RBH0NDDveRNocYXMGh4hZ 9zKWPapGbTyfV2JJF/qnCipPScw4NA2HzdEpLq1uT9p6m1LtF61K9AXWcnToaArB Xiu7Owy+CFzq4wWXJDv1GJv/CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPubNsG8 ZKac3cEPYZ+1QV+t9KC1MB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkV55dYSbSvf8XSRS99EEJjWDG/7s6zQMtNmXW7G7RwAEqFQGNRDkp jYxH2b4CmIPcA+8JZ4ZXvHV7NyTKa9Rl4bkvhWW4SoKjMdd0J/y0T3a5KoUtPld0 YjpSnmn98iZmhT+jN6NnevqXnq+Zc4ardiBtZj5cbzmx7TSQJ04+j7xLb1v1GMz2 GPWQS2yTMX0MATGnhynoZH5RWYY+egS293O6OCvkkUEcqlmzMIz4hSP8Rl89Tsuf EhzXPBZh6kaNHuk9jcHOLk2ezHml/p8NqK5ve0hydpF5jXbCDxvTZgAxZgZhrVIB zmiDrhTOoW2roxZU3qBd4PUUFMHLhDjR -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:56 2025 by rpki-client