$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: VUHIef/37l1UvFVQ3QdykqVuhEezyqSuaBqy3c6hG6I= Subject key identifier: 3E:ED:32:F0:A9:58:8A:54:8C:5D:71:77:11:80:DE:38:1B:82:F3:C5 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0A4B Signing time: Fri 22 Aug 2025 20:04:44 +0000 Manifest this update: Fri 22 Aug 2025 20:04:44 +0000 Manifest next update: Fri 29 Aug 2025 20:04:43 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: bRj48xgzVzf7l2z2UQO9JffT5Mq8dQzgkr8Z4IvUvWI=) 2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: dOCznw/J4c94cUvosSW/kOC2oIL6jbmFAL2+O7rkhag=) 3: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: UfxAxapspNfCULgapde2dhkYeQjgb9Bzqtz/tQtQdPw=) 4: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: 5nE372F+0IwqYdLJZogWsDWbHc80At5gKYtw/eBlXZE=) 5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: 9X7I+brkK/zM7IstcmQqkt3f3WU83UlUm6djQdlHWFo=) 6: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: ejIz9Yuuvy/Lj5GU8AUntC0tFJ+QHqAuBe5ozlZ4Gxw=) 7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: L+W6w2B2/2JqZHEEy+XRZ0tQqm2y+76IdcVbyBsuS1w=) 8: 553170245AC511EBA052F663C4F9AE02.roa (hash: 1WjAWoIgFya9zcz3aaAfAZPj3TaOx48UOEMbOt7aBvY=) 9: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: HSmuGZlq2yjbC7oby/mLDwMQgWOMUuKo8bggRUwHe8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Aug 22 20:04:44 2025 GMT Not After : Aug 29 20:04:43 2025 GMT Subject: CN=68a8cd5c-e017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:27:c7:32:46:4c:81:68:e6:bb:d6:bd:aa: 7e:55:d3:a9:4d:ea:76:cb:e6:cf:cf:12:5f:ff:47: 6b:a9:27:c4:8e:9f:34:74:3d:a3:c4:7f:11:82:9d: b2:b7:ad:74:42:38:da:22:b7:29:c6:fc:aa:0d:0c: f1:99:46:2b:2c:c7:5d:ac:86:ad:b0:fb:f3:a9:0a: 81:af:93:30:b0:8d:c3:ea:07:c0:59:11:fe:1f:dc: 60:31:66:89:89:21:b3:a0:cb:07:5f:1a:6e:5c:a2: 84:37:8b:ef:9e:4d:11:cb:8c:fd:64:8b:99:bc:0f: 86:58:94:fe:ab:b7:43:55:57:f6:a2:44:25:dd:e7: 49:5b:6f:66:0e:0d:81:ac:16:28:c8:ee:9f:0d:a4: a0:38:5d:dd:4e:59:18:13:31:3d:72:6b:e0:3a:eb: 26:54:50:84:de:fa:99:0c:3c:7b:17:06:45:54:90: 8a:47:3f:b5:09:70:13:bc:7b:f1:b2:f6:fc:96:57: 1e:1e:bf:c9:a7:db:6e:5c:b6:53:20:6a:88:af:69: ae:7f:6b:e9:49:c7:02:5c:a7:62:8e:b4:0c:e3:1c: cc:54:61:e2:72:30:bb:19:fb:30:f5:3c:61:4e:b2: 3a:46:56:32:e2:3e:71:e9:27:89:7c:3e:d8:60:60: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:ED:32:F0:A9:58:8A:54:8C:5D:71:77:11:80:DE:38:1B:82:F3:C5 X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:4e:61:11:25:61:d6:39:6f:c1:77:ac:96:ea:3e:54:d2: 36:94:a3:3f:61:a9:22:8d:e5:23:12:88:b3:a6:4d:fe:db:74: 9e:af:87:68:0b:13:20:24:6f:93:8c:57:f9:e9:bc:e6:25:93: 4e:c6:06:b4:a6:46:2e:3b:17:7b:a6:20:b9:6d:03:5b:12:11: 86:ee:50:79:61:7a:01:00:f4:19:98:93:0a:4f:71:f6:68:62: 82:94:88:04:6f:7a:91:36:b4:e2:60:57:45:8d:5c:89:02:01: 2f:2c:9a:06:86:14:dc:ba:6b:19:27:bd:e3:7e:1a:20:50:40: 56:5c:1a:fa:7f:bc:1f:c7:65:71:83:9d:6a:d4:36:33:f6:69: e7:50:ae:a0:61:60:e8:f3:e3:40:5a:b6:19:98:1b:3d:00:09: 59:67:02:98:cd:5d:4b:a5:56:6b:27:41:38:34:ea:58:f1:27: 4a:90:81:39:e4:9f:c2:21:49:69:c8:03:f1:c4:76:63:a0:ca: ff:31:27:55:a1:14:c1:09:81:6d:00:bb:0b:80:7d:cd:18:39: 6f:06:32:1b:7f:bf:a0:98:48:84:6d:4f:cb:c4:7b:bc:2d:f9: 6c:de:8a:f4:4e:bd:1d:50:1d:06:93:c6:75:95:11:ed:b7:73: 36:06:71:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjUwODIyMjAwNDQ0WhcNMjUwODI5MjAwNDQzWjAYMRYwFAYD VQQDEw02OGE4Y2Q1Yy1lMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jYnxzJGTIFo5rvWvap+VdOpTep2y+bPzxJf/0drqSfEjp80dD2jxH8Rgp2y t610QjjaIrcpxvyqDQzxmUYrLMddrIatsPvzqQqBr5MwsI3D6gfAWRH+H9xgMWaJ iSGzoMsHXxpuXKKEN4vvnk0Ry4z9ZIuZvA+GWJT+q7dDVVf2okQl3edJW29mDg2B rBYoyO6fDaSgOF3dTlkYEzE9cmvgOusmVFCE3vqZDDx7FwZFVJCKRz+1CXATvHvx svb8llceHr/Jp9tuXLZTIGqIr2muf2vpSccCXKdijrQM4xzMVGHicjC7Gfsw9Txh TrI6RlYy4j5x6SeJfD7YYGDbvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7tMvCp WIpUjF1xdxGA3jgbgvPFMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX705hESVh1jlvwXesluo+VNI2lKM/YakijeUjEoizpk3+23Ser4do CxMgJG+TjFf56bzmJZNOxga0pkYuOxd7piC5bQNbEhGG7lB5YXoBAPQZmJMKT3H2 aGKClIgEb3qRNrTiYFdFjVyJAgEvLJoGhhTcumsZJ73jfhogUEBWXBr6f7wfx2Vx g51q1DYz9mnnUK6gYWDo8+NAWrYZmBs9AAlZZwKYzV1LpVZrJ0E4NOpY8SdKkIE5 5J/CIUlpyAPxxHZjoMr/MSdVoRTBCYFtALsLgH3NGDlvBjIbf7+gmEiEbU/LxHu8 Lfls3or0Tr0dUB0Gk8Z1lRHtt3M2BnFX -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:17 2025 by rpki-client