$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: 2Yd0REZlgBTGdk7cqfC1aQKZ8o8T3s5h6TFmgmAG9k0= Subject key identifier: 67:7E:CA:6A:C2:1D:00:1E:CD:DE:7C:6B:B3:F0:C6:68:75:BA:57:C6 Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B7E Signing time: Fri 08 Aug 2025 19:20:17 +0000 Manifest this update: Fri 08 Aug 2025 19:20:17 +0000 Manifest next update: Fri 15 Aug 2025 19:20:17 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: XOldDrd9hdRwaRcOjFwjMn0lG2IVJdeM+nSG+NnrKTA=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Aug 8 19:20:17 2025 GMT Not After : Aug 15 19:20:17 2025 GMT Subject: CN=68964df1-5bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:6f:3b:be:22:5d:eb:92:c4:24:f6:51:6f: 34:25:cc:ad:0c:7a:ff:44:31:ba:91:18:1d:bb:e1: 1f:cf:0b:8b:40:78:f5:26:be:6a:f9:85:d8:5e:b5: c5:c9:d4:5a:0e:46:d7:45:3c:cf:14:b5:e3:e7:d0: a8:5f:4b:88:bf:7f:6d:6a:63:bf:ca:20:67:f8:44: e4:15:39:3e:55:c9:7b:97:f3:68:fe:65:c9:9d:e8: c0:c7:ee:0d:13:2f:1a:fc:6e:3a:88:02:b6:7a:12: 41:62:ad:46:8a:80:1a:1b:11:2d:a8:64:f9:68:96: 76:6d:55:7c:38:0b:40:a0:d8:4e:6e:d1:0a:7d:a4: 6b:25:c9:b6:6b:38:21:f9:d5:53:e6:7e:53:52:17: 04:b5:89:dc:aa:bd:32:59:27:a0:38:55:71:8d:b2: 38:aa:6c:0b:15:df:82:d7:1a:5e:c3:31:f0:6e:92: 6c:44:71:74:51:26:c1:e3:3c:76:e5:52:1e:51:39: 5c:a3:66:4c:c6:0e:af:86:59:81:9c:fb:cb:a4:4c: 53:43:fd:9c:31:71:ed:50:e0:4a:c2:92:e6:42:7e: d6:af:38:0f:aa:e9:5b:49:12:c7:19:36:33:19:c1: ff:4a:0f:fa:13:c7:a6:2a:29:3a:90:cb:43:1b:fc: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:CA:6A:C2:1D:00:1E:CD:DE:7C:6B:B3:F0:C6:68:75:BA:57:C6 X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:4c:16:11:c4:1d:72:a1:45:43:5c:5a:d2:73:d3:7e:51:bf: 5e:ac:1f:80:e3:de:63:9f:4c:0f:4d:49:31:8a:e3:7d:88:11: 43:2a:12:ed:65:01:ee:77:2f:14:89:55:9e:10:b7:fd:4f:e8: 80:63:2a:fe:8b:a1:2d:cf:f5:37:9f:ab:cc:05:53:85:fd:83: 23:4c:c8:26:b0:2b:25:04:47:62:8c:92:0e:f0:d8:f8:0c:8d: 96:44:ff:a9:7e:a9:a9:1a:4e:88:44:20:9f:fc:e4:0a:bf:e2: 83:e2:7f:a2:4d:0e:ef:8a:f9:75:a5:e0:af:fe:ca:34:22:58: f4:9f:54:11:a6:f9:dd:a0:5a:05:ff:95:fc:1e:67:12:1e:cd: df:bb:14:d2:74:7c:74:25:4c:fc:7b:aa:d5:b3:d7:de:da:1f: dd:4d:d5:21:01:a1:7d:cb:9c:41:ec:f8:6a:96:2d:c1:ef:08: 9b:fb:79:df:12:65:15:4c:85:93:de:06:9d:fd:a8:1e:11:8e: 97:18:d7:f7:e8:b5:09:3e:2f:68:62:d4:17:f1:a5:cb:7b:d6: 3f:2b:3c:fd:75:9c:b4:86:97:b8:fb:63:bf:19:60:4e:c7:cb: 34:88:ba:a0:8d:df:64:bf:ff:d0:8d:d8:ad:d8:2b:d8:2d:7b: 14:71:c4:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwODA4MTkyMDE3WhcNMjUwODE1MTkyMDE3WjAYMRYwFAYD VQQDEw02ODk2NGRmMS01YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNFvO74iXeuSxCT2UW80JcytDHr/RDG6kRgdu+EfzwuLQHj1Jr5q+YXYXrXF ydRaDkbXRTzPFLXj59CoX0uIv39tamO/yiBn+ETkFTk+Vcl7l/No/mXJnejAx+4N Ey8a/G46iAK2ehJBYq1GioAaGxEtqGT5aJZ2bVV8OAtAoNhObtEKfaRrJcm2azgh +dVT5n5TUhcEtYncqr0yWSegOFVxjbI4qmwLFd+C1xpewzHwbpJsRHF0USbB4zx2 5VIeUTlco2ZMxg6vhlmBnPvLpExTQ/2cMXHtUOBKwpLmQn7WrzgPqulbSRLHGTYz GcH/Sg/6E8emKik6kMtDG/x4zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd+ymrC HQAezd58a7Pwxmh1ulfGMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYTBYRxB1yoUVDXFrSc9N+Ub9erB+A495jn0wPTUkxiuN9iBFDKhLt ZQHudy8UiVWeELf9T+iAYyr+i6Etz/U3n6vMBVOF/YMjTMgmsCslBEdijJIO8Nj4 DI2WRP+pfqmpGk6IRCCf/OQKv+KD4n+iTQ7vivl1peCv/so0Ilj0n1QRpvndoFoF /5X8HmcSHs3fuxTSdHx0JUz8e6rVs9fe2h/dTdUhAaF9y5xB7Phqli3B7wib+3nf EmUVTIWT3gad/ageEY6XGNf36LUJPi9oYtQX8aXLe9Y/Kzz9dZy0hpe4+2O/GWBO x8s0iLqgjd9kv//Qjdit2CvYLXsUccQA -----END CERTIFICATE-----Generated at Sun Aug 10 05:41:44 2025 by rpki-client