$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: Ny+bM3IjvMRjxby+pRUapBzSkG2NUxYuQfl9iuOMuRE= Subject key identifier: E8:5F:F7:61:76:4C:53:70:87:EB:A8:9B:89:C0:38:F2:C8:8A:59:2B Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: E2 Signing time: Sat 09 Aug 2025 05:51:51 +0000 Manifest this update: Sat 09 Aug 2025 05:51:51 +0000 Manifest next update: Sat 16 Aug 2025 05:51:51 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: w+nCVNVSpCmLbnhHpyEu0nUASu0jA13oh1FfaDH3Zmc=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: /XzOLWqtY/XmoLf5xT6dcK9H0RMrrYFaf352aac8WDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Aug 9 05:51:51 2025 GMT Not After : Aug 16 05:51:51 2025 GMT Subject: CN=6896e1f7-a41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:1e:f6:9d:d9:93:9f:62:77:75:0d:67:f2: 36:8d:24:8c:f4:26:20:4f:2e:4d:a3:28:1b:85:49: ef:ca:cc:da:b9:9b:a2:a6:92:72:46:85:2b:45:f6: 0d:55:cd:e4:83:00:58:3b:1d:c1:f9:c6:a4:01:4b: 1a:7b:b0:da:20:4b:a1:ad:e3:88:37:67:06:5b:7b: c3:0f:f5:db:74:bc:a5:01:ee:be:e7:e0:1b:82:b1: 6a:f8:bc:2d:af:df:92:78:5f:03:56:6c:da:5d:83: 58:d9:b9:d6:f7:b1:ed:62:36:9a:4f:33:6c:a9:e5: 0f:91:4b:62:9c:74:e3:27:ad:d5:51:0c:cf:89:08: 39:d6:79:88:14:3f:6d:72:8d:93:30:94:11:f7:27: 69:54:9f:60:ee:54:43:19:f0:bb:84:f4:40:68:56: 9e:81:bf:2c:73:38:c4:1c:d4:9b:22:61:b8:e4:b3: e4:18:fb:51:51:be:03:7d:7e:91:9c:c6:b4:4b:bb: 2c:7e:df:6a:1d:7e:f4:84:32:c5:7d:19:30:ad:31: ba:48:91:af:1c:4b:de:4c:ff:0a:97:0a:0f:bb:15: 42:ff:c5:d8:cd:07:be:fc:57:d4:f2:d5:c0:91:cc: 78:b3:6b:de:3e:4e:15:c9:e2:0c:a3:98:da:50:aa: 34:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:F7:61:76:4C:53:70:87:EB:A8:9B:89:C0:38:F2:C8:8A:59:2B X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:17:05:e2:84:b0:b3:53:ed:63:12:15:74:10:45:66:f8:94: f4:a5:9c:8f:88:52:fe:a8:df:78:b9:f6:82:04:c1:bf:32:02: ac:54:41:63:bc:9e:d4:ab:19:e7:02:c1:0f:de:8f:84:5f:34: 15:3f:79:73:7f:9f:94:6b:32:0d:a1:93:47:e1:2d:5b:0b:e9: 8d:39:25:ed:95:91:a3:1b:fb:0f:fb:a5:40:b3:7b:fe:69:53: 05:58:ee:34:df:18:84:58:e7:80:7c:ea:3b:18:04:42:38:e9: 0a:2f:e2:37:7b:a8:6d:51:0c:bc:83:c6:a6:bd:46:b5:45:0d: 1c:ae:5c:0e:43:26:b7:e4:55:0a:88:79:5f:f2:e9:c1:86:e0: ad:1e:68:f8:a3:5b:4d:ce:1b:3c:ae:03:d4:3c:10:de:e9:0c: 97:b0:11:cf:12:91:fe:d5:2e:a4:c7:46:23:2d:3f:a3:59:03: f8:25:c1:c4:88:cf:4e:1f:0a:79:87:37:59:e1:62:39:c4:dd: f2:f8:98:81:7b:ae:8f:ef:5a:47:5f:bb:8a:b7:e8:54:f8:42: 77:62:34:0b:b2:96:2a:aa:46:05:31:0c:01:e1:72:3c:d1:17: f6:b2:65:6c:19:7e:21:1d:fe:78:42:7b:bb:bf:c6:65:91:dc: f8:91:fb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwODA5MDU1MTUxWhcNMjUwODE2MDU1MTUxWjAYMRYwFAYD VQQDEw02ODk2ZTFmNy1hNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlse9p3Zk59id3UNZ/I2jSSM9CYgTy5NoygbhUnvyszauZuippJyRoUrRfYN Vc3kgwBYOx3B+cakAUsae7DaIEuhreOIN2cGW3vDD/XbdLylAe6+5+AbgrFq+Lwt r9+SeF8DVmzaXYNY2bnW97HtYjaaTzNsqeUPkUtinHTjJ63VUQzPiQg51nmIFD9t co2TMJQR9ydpVJ9g7lRDGfC7hPRAaFaegb8sczjEHNSbImG45LPkGPtRUb4DfX6R nMa0S7ssft9qHX70hDLFfRkwrTG6SJGvHEveTP8KlwoPuxVC/8XYzQe+/FfU8tXA kcx4s2vePk4VyeIMo5jaUKo0HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhf92F2 TFNwh+uom4nAOPLIilkrMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZFwXihLCzU+1jEhV0EEVm+JT0pZyPiFL+qN94ufaCBMG/MgKsVEFj vJ7UqxnnAsEP3o+EXzQVP3lzf5+UazINoZNH4S1bC+mNOSXtlZGjG/sP+6VAs3v+ aVMFWO403xiEWOeAfOo7GARCOOkKL+I3e6htUQy8g8amvUa1RQ0crlwOQya35FUK iHlf8unBhuCtHmj4o1tNzhs8rgPUPBDe6QyXsBHPEpH+1S6kx0YjLT+jWQP4JcHE iM9OHwp5hzdZ4WI5xN3y+JiBe66P71pHX7uKt+hU+EJ3YjQLspYqqkYFMQwB4XI8 0Rf2smVsGX4hHf54Qnu7v8Zlkdz4kft1 -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:29 2025 by rpki-client