$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: FRathYHzg+bZedT/hMd1pb9KtnztGd2p3DZxcxSXEaQ= Subject key identifier: 1C:8D:56:52:5A:D0:CC:6E:17:9C:D9:6C:32:CD:8A:2E:18:56:8E:38 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 85 Signing time: Sat 09 Aug 2025 07:05:04 +0000 Manifest this update: Sat 09 Aug 2025 07:05:03 +0000 Manifest next update: Sat 16 Aug 2025 07:05:03 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: HxpLWy8gxOEGs2IFltbTuG/UsA2BbOFLZk3XgAQVj3E=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Aug 9 07:05:03 2025 GMT Not After : Aug 16 07:05:03 2025 GMT Subject: CN=6896f320-6fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:9f:40:80:03:56:38:6e:30:1b:6d:84:fe: c9:c1:a5:d5:7d:4b:02:70:39:85:e0:97:e2:ea:d8: 00:49:32:22:0b:ce:42:16:bd:69:25:b4:01:4f:3e: 8f:71:e7:0d:9a:82:bc:81:2c:7c:be:a7:cb:45:10: 16:28:05:da:cb:d5:e4:e3:7d:43:e7:b7:e0:4d:62: a8:77:23:14:29:22:ce:0e:bb:02:00:51:79:d2:42: ff:af:4c:15:1f:b4:4e:bd:28:93:71:d0:2b:a8:24: 5b:e1:bc:88:1b:13:03:69:0d:bd:7d:5b:df:04:82: 2b:e4:83:ab:24:1a:dc:7a:72:4f:d7:9d:bb:b8:e7: fc:b0:db:96:30:e2:b2:56:9b:3a:b5:d8:69:75:86: 6f:7f:58:f7:4b:ef:83:54:df:4c:f4:4a:5a:ed:11: 36:0b:95:b4:b0:cd:52:87:4f:9d:cd:1a:12:0f:5f: b1:52:fc:91:00:dd:38:db:20:c1:38:a0:10:60:fd: e1:c2:96:e1:03:5e:93:42:7a:44:93:b9:3f:4c:d3: 6e:5b:ae:e3:7e:01:d7:a4:7c:83:45:a2:4b:99:8a: 03:67:c1:20:22:da:7f:c1:74:d6:45:b9:d8:04:5c: 35:0c:c8:20:d9:82:f1:0b:60:af:9f:b3:b1:04:19: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8D:56:52:5A:D0:CC:6E:17:9C:D9:6C:32:CD:8A:2E:18:56:8E:38 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:f3:26:c8:e6:cd:40:8e:9f:e7:1f:35:93:c8:c4:bc:4b:45: ee:8f:98:9a:8a:e8:82:5c:5c:3f:68:16:7b:fb:6b:4c:95:91: 78:7c:b4:b6:e0:33:38:51:15:30:3a:37:98:be:65:23:c3:f0: e6:9a:dd:e7:18:ba:36:6c:71:47:24:37:9d:2c:34:78:c5:5e: 13:5e:b9:27:4d:38:a9:23:8a:d1:a3:37:bf:50:b0:c6:35:d3: d6:b2:6f:5a:5c:8a:dc:80:f2:10:b8:a5:41:42:9b:3e:23:b0: 4e:f6:34:67:09:c8:26:30:36:6c:ad:12:51:dc:89:db:a8:f2: 1f:1f:3e:21:84:24:91:30:42:0c:e3:bb:6f:a1:da:19:a5:76: d4:23:f2:e2:a6:1c:27:03:bd:d1:58:d3:8e:29:32:83:8b:a2: 58:66:74:3a:2a:12:28:63:cf:39:03:03:b6:1f:7e:83:1e:5d: 7a:61:10:b6:c3:87:53:55:35:1d:eb:68:b0:91:15:9e:d9:42: ca:f3:1a:c1:bb:61:4d:60:36:d5:9c:ea:45:76:6e:3b:7c:33: 71:c0:76:61:68:98:e8:47:4e:d3:5e:3d:55:ef:8a:40:b8:53: 6f:f4:ac:1b:fc:ba:53:9c:1a:db:8b:d7:b4:ba:11:ed:5b:e3: f4:39:b6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjUwODA5MDcwNTAzWhcNMjUwODE2MDcwNTAzWjAYMRYwFAYD VQQDEw02ODk2ZjMyMC02ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EWfQIADVjhuMBtthP7JwaXVfUsCcDmF4Jfi6tgASTIiC85CFr1pJbQBTz6P cecNmoK8gSx8vqfLRRAWKAXay9Xk431D57fgTWKodyMUKSLODrsCAFF50kL/r0wV H7ROvSiTcdArqCRb4byIGxMDaQ29fVvfBIIr5IOrJBrcenJP1527uOf8sNuWMOKy Vps6tdhpdYZvf1j3S++DVN9M9Epa7RE2C5W0sM1Sh0+dzRoSD1+xUvyRAN042yDB OKAQYP3hwpbhA16TQnpEk7k/TNNuW67jfgHXpHyDRaJLmYoDZ8EgItp/wXTWRbnY BFw1DMgg2YLxC2Cvn7OxBBnagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByNVlJa 0MxuF5zZbDLNii4YVo44MB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX8ybI5s1Ajp/nHzWTyMS8S0Xuj5iaiuiCXFw/aBZ7+2tMlZF4fLS2 4DM4URUwOjeYvmUjw/Dmmt3nGLo2bHFHJDedLDR4xV4TXrknTTipI4rRoze/ULDG NdPWsm9aXIrcgPIQuKVBQps+I7BO9jRnCcgmMDZsrRJR3InbqPIfHz4hhCSRMEIM 47tvodoZpXbUI/LiphwnA73RWNOOKTKDi6JYZnQ6KhIoY885AwO2H36DHl16YRC2 w4dTVTUd62iwkRWe2ULK8xrBu2FNYDbVnOpFdm47fDNxwHZhaJjoR07TXj1V74pA uFNv9Kwb/LpTnBrbi9e0uhHtW+P0Obbb -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:48 2025 by rpki-client