$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json) Hash identifier: ka+USFsY2uGF0a5USH3QigXH1Rb8nDm2EEYeGuIpACI= Subject key identifier: FC:C4:31:36:A6:6C:68:C8:BF:80:BF:93:0D:13:78:4E:58:43:F7:A0 Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft Manifest number: 017A Signing time: Sat 09 Aug 2025 04:05:15 +0000 Manifest this update: Sat 09 Aug 2025 04:05:14 +0000 Manifest next update: Sat 16 Aug 2025 04:05:14 +0000 Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: rHV++qi3tOGZU/qXYSzkbOiOVNaLu2TS36xNnjkAmLU=) 2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: e+rpsrJfE3yU94kVnBShl6jDwyCOKp3rugpFTdwj4Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: Aug 9 04:05:14 2025 GMT Not After : Aug 16 04:05:14 2025 GMT Subject: CN=6896c8fa-bb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:b7:c6:35:51:e2:83:5a:9d:1b:6d:63:07: 50:5c:8c:a4:a9:fc:85:1f:3e:a1:80:07:c3:ef:98: 1e:50:31:53:f2:ab:fd:63:af:98:d2:0f:08:3b:cc: d1:1e:96:13:21:e1:79:75:0a:97:d5:77:92:3b:8f: 95:ce:28:9b:44:c4:1f:aa:8f:d3:1c:43:d9:fb:e7: a9:1c:6e:7f:b2:da:0a:b5:91:64:95:ca:a8:aa:cb: b2:4c:02:58:52:6e:89:52:8a:38:d2:d5:16:19:69: af:dd:c8:1d:2f:fb:d7:ce:9e:17:ce:55:0c:76:45: aa:9e:eb:fd:53:20:76:1b:12:89:41:e2:94:e2:2f: 82:83:57:5f:f5:21:d8:d9:40:53:14:de:17:5f:68: 47:c4:92:1a:de:f0:c9:9f:f5:2c:65:57:9e:70:8a: 53:d0:e3:0e:5f:27:67:96:b2:b5:84:4c:8a:d2:8a: 9c:dd:cd:71:56:78:aa:02:09:d4:fb:c1:aa:d0:95: 25:ac:e5:4a:94:c4:65:33:06:09:f7:8a:6f:32:ad: e3:84:96:4f:73:be:ca:4e:42:df:ad:1c:d4:ba:eb: 25:d1:bc:e1:73:c0:c1:70:ba:34:a7:34:6e:3a:0b: 36:33:3c:46:12:c2:ec:94:f9:a5:88:f0:d9:76:1f: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:31:36:A6:6C:68:C8:BF:80:BF:93:0D:13:78:4E:58:43:F7:A0 X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f0:87:c7:a0:fa:90:82:10:d0:0c:2a:2a:93:2b:fc:f3:3e: 7b:cc:1f:e8:fb:d1:63:c5:1e:a2:ef:9b:19:a7:4e:29:6f:a4: a7:de:bb:31:76:5f:cf:46:80:89:23:62:b1:70:05:3d:41:c2: 6e:cd:e4:79:bc:2c:61:b0:f9:2d:be:41:60:c5:7a:2b:1d:bb: 76:3f:7a:b3:4a:c3:f6:0b:dd:3d:ae:f4:6e:23:b4:3c:10:c3: 94:23:30:c3:88:5b:4a:f2:28:27:18:8b:26:0f:be:fd:d5:d0: f7:4f:be:22:a7:88:00:0f:da:7d:f9:69:8a:9d:7b:3e:80:55: 3d:87:55:31:f0:f3:e9:58:ff:aa:d7:e9:c5:1b:d7:ed:19:1e: e8:b2:6a:47:76:bd:6c:02:5a:6e:c4:c6:2a:f4:b7:a4:37:47: 09:ef:4c:9b:39:0e:1f:2b:6c:a3:64:50:03:d3:b7:5b:2c:b0: 42:bd:d9:43:54:cd:f4:76:dc:c8:50:0f:53:c9:cb:e9:2b:de: b2:a6:59:d9:0c:50:5e:12:ce:b1:b6:33:8a:cc:5d:c8:b2:42: 4a:23:c2:d6:92:c9:9b:64:c1:9a:87:26:eb:bc:72:4a:38:35: b5:d4:cb:77:ea:3a:82:74:03:00:f5:91:20:56:a4:9c:4e:bc: c1:cb:90:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUwODA5MDQwNTE0WhcNMjUwODE2MDQwNTE0WjAYMRYwFAYD VQQDEw02ODk2YzhmYS1iYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc63xjVR4oNanRttYwdQXIykqfyFHz6hgAfD75geUDFT8qv9Y6+Y0g8IO8zR HpYTIeF5dQqX1XeSO4+VziibRMQfqo/THEPZ++epHG5/stoKtZFklcqoqsuyTAJY Um6JUoo40tUWGWmv3cgdL/vXzp4XzlUMdkWqnuv9UyB2GxKJQeKU4i+Cg1df9SHY 2UBTFN4XX2hHxJIa3vDJn/UsZVeecIpT0OMOXydnlrK1hEyK0oqc3c1xVniqAgnU +8Gq0JUlrOVKlMRlMwYJ94pvMq3jhJZPc77KTkLfrRzUuusl0bzhc8DBcLo0pzRu Ogs2MzxGEsLslPmliPDZdh9UkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzEMTam bGjIv4C/kw0TeE5YQ/egMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl8IfHoPqQghDQDCoqkyv88z57zB/o+9FjxR6i75sZp04pb6Sn3rsx dl/PRoCJI2KxcAU9QcJuzeR5vCxhsPktvkFgxXorHbt2P3qzSsP2C909rvRuI7Q8 EMOUIzDDiFtK8ignGIsmD7791dD3T74ip4gAD9p9+WmKnXs+gFU9h1Ux8PPpWP+q 1+nFG9ftGR7osmpHdr1sAlpuxMYq9LekN0cJ70ybOQ4fK2yjZFAD07dbLLBCvdlD VM30dtzIUA9TycvpK96yplnZDFBeEs6xtjOKzF3IskJKI8LWksmbZMGahybrvHJK ODW11Mt36jqCdAMA9ZEgVqScTrzBy5Db -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:19 2025 by rpki-client