$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: c5DuddxwjiB0tsNSyY64EusTAwevlklpHVvabw4ukl4= Subject key identifier: 60:40:44:36:8E:6A:62:70:1D:4D:AF:D5:B2:0F:FF:A7:89:EF:3A:C2 Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02DB Signing time: Mon 11 Aug 2025 01:33:15 +0000 Manifest this update: Mon 11 Aug 2025 01:33:15 +0000 Manifest next update: Mon 18 Aug 2025 01:33:15 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: 6ZFqg1ENwoKR/myjXkJ0R/vjesz+XW54gpvYLKI0Geg=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Aug 11 01:33:15 2025 GMT Not After : Aug 18 01:33:15 2025 GMT Subject: CN=6899485b-7397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:9b:b3:f9:04:f5:84:7f:f3:1b:cb:45:31: 48:cc:9f:a7:72:d6:c4:e7:c8:c4:82:e2:f2:5a:17: dd:1e:53:de:1c:49:15:10:dd:4d:ba:a7:22:67:dd: 4e:d6:08:ab:72:64:c4:5f:9c:74:17:64:0f:7c:a8: 66:ba:70:18:4d:a8:56:9d:de:8d:08:5d:1e:6c:c1: 25:c3:0e:5a:75:46:dd:0d:f2:62:43:db:80:c7:8c: fc:62:ba:33:f0:bc:8d:7e:da:be:c1:e0:c4:67:2b: 5a:fa:57:3f:e4:d2:23:9a:98:b3:3e:c0:85:14:bc: 6a:20:45:50:91:ea:22:b8:c8:35:0a:97:e4:74:73: e6:04:5b:3c:fb:83:08:c3:6b:ea:01:e9:5e:0b:83: 5d:23:27:c8:26:cf:4a:87:cc:8d:d2:5c:67:3e:07: 06:9d:4c:eb:4b:63:62:e4:93:de:e6:60:1a:d0:ae: a5:fd:28:a7:26:e3:61:2e:1a:0a:82:9b:f1:ac:e5: 1b:96:b7:99:3d:3d:41:38:6b:34:c6:b0:c0:26:45: c0:eb:70:e9:e7:be:37:bc:64:d5:63:97:11:3f:fd: 90:28:f9:85:f2:7f:9d:94:52:e2:8a:3e:94:54:5f: 67:ff:41:01:3d:37:b1:9c:8f:f8:00:41:a3:f9:d5: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:40:44:36:8E:6A:62:70:1D:4D:AF:D5:B2:0F:FF:A7:89:EF:3A:C2 X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c5:bb:d8:ff:d9:ae:8b:54:54:c1:a0:3e:a4:fd:d6:46:23: e4:ea:4d:aa:53:9d:ff:ca:47:71:11:41:5f:7f:82:75:7a:a2: 5f:ff:41:a3:f3:ae:e8:d8:e6:23:d9:b7:5c:d4:8d:ff:f3:eb: ce:7b:f1:89:fb:7b:5f:8e:72:17:11:69:df:05:62:ed:f7:15: e9:a3:70:c7:d3:07:a5:7a:e9:fe:3f:4a:ac:3f:ab:8d:60:89: c7:04:00:34:0c:09:80:ef:d5:79:bf:a6:ac:7b:13:fe:95:9f: 44:f7:3d:51:88:fa:f3:70:24:d8:8c:cf:08:0b:09:c5:5d:0b: 5e:9b:d7:eb:3f:dd:dc:6a:70:b0:ee:ba:80:cc:ec:d3:1c:a2: f1:1d:78:b4:9d:24:4d:2b:dd:c1:a9:d2:50:74:8a:75:0b:b8: aa:bd:a7:8a:3d:ae:fb:5d:9c:fd:f9:7a:b8:d8:d5:56:5f:5f: 4c:ea:b9:00:96:96:f0:46:f4:37:8c:99:96:29:83:33:f3:34: 01:27:4b:24:7b:1b:d1:5b:e3:d8:be:1c:d3:2d:42:51:6b:a6: 92:de:60:71:0b:4f:72:b8:41:a1:31:44:d6:19:eb:7b:27:3c: 22:0a:da:58:92:38:d4:59:1c:e0:82:15:66:90:95:83:1a:c0: c9:f7:af:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwODExMDEzMzE1WhcNMjUwODE4MDEzMzE1WjAYMRYwFAYD VQQDEw02ODk5NDg1Yi03Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyibs/kE9YR/8xvLRTFIzJ+nctbE58jEguLyWhfdHlPeHEkVEN1NuqciZ91O 1gircmTEX5x0F2QPfKhmunAYTahWnd6NCF0ebMElww5adUbdDfJiQ9uAx4z8Yroz 8LyNftq+weDEZyta+lc/5NIjmpizPsCFFLxqIEVQkeoiuMg1CpfkdHPmBFs8+4MI w2vqAeleC4NdIyfIJs9Kh8yN0lxnPgcGnUzrS2Ni5JPe5mAa0K6l/SinJuNhLhoK gpvxrOUblreZPT1BOGs0xrDAJkXA63Dp5743vGTVY5cRP/2QKPmF8n+dlFLiij6U VF9n/0EBPTexnI/4AEGj+dXu6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBARDaO amJwHU2v1bIP/6eJ7zrCMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhxbvY/9mui1RUwaA+pP3WRiPk6k2qU53/ykdxEUFff4J1eqJf/0Gj 867o2OYj2bdc1I3/8+vOe/GJ+3tfjnIXEWnfBWLt9xXpo3DH0weleun+P0qsP6uN YInHBAA0DAmA79V5v6asexP+lZ9E9z1RiPrzcCTYjM8ICwnFXQtem9frP93canCw 7rqAzOzTHKLxHXi0nSRNK93BqdJQdIp1C7iqvaeKPa77XZz9+Xq42NVWX19M6rkA lpbwRvQ3jJmWKYMz8zQBJ0skexvRW+PYvhzTLUJRa6aS3mBxC09yuEGhMUTWGet7 JzwiCtpYkjjUWRzgghVmkJWDGsDJ96+7 -----END CERTIFICATE-----Generated at Mon Aug 11 08:46:03 2025 by rpki-client