$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: UcEz/eizBQxp32LQyRvk7Esb+lzTXwBGgUFwvKOj8U0= Subject key identifier: 24:9F:0B:EA:23:77:45:93:0D:1F:34:CB:DB:39:EA:7C:EB:DF:8F:E7 Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: A1 Signing time: Sat 23 Aug 2025 06:28:36 +0000 Manifest this update: Sat 23 Aug 2025 06:28:36 +0000 Manifest next update: Sat 30 Aug 2025 06:28:36 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: oYOBpelLrxQ091Nc00fUjsI6roi3/yXqEhBa8VzgJxg=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Aug 23 06:28:36 2025 GMT Not After : Aug 30 06:28:36 2025 GMT Subject: CN=68a95f94-e976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:ac:0b:6d:4a:1b:0e:3b:58:8b:87:7b:34: c8:fe:27:06:f3:84:d9:98:e1:18:cb:64:54:98:15: 95:c0:64:b4:8f:b3:82:10:f6:8a:0c:c6:40:38:72: 3e:23:58:22:e3:d2:53:88:09:67:d6:b4:90:b2:28: 21:f2:11:56:99:b7:78:c1:8c:de:82:ee:77:3e:bb: 81:2b:41:fd:14:59:68:50:85:0c:9c:79:03:ef:ca: 66:94:ba:ae:8a:d4:16:b3:9f:71:58:e1:56:ed:21: de:6c:4b:87:f2:9a:ad:36:88:df:5b:f1:90:0a:65: ef:23:b4:3a:85:60:a3:f1:6c:df:c0:f0:56:32:b1: a0:2a:1a:0c:d1:67:36:1c:1a:1d:c3:8e:15:a9:07: e9:cb:57:f0:90:76:ba:62:14:c5:1c:91:cf:75:b5: bf:66:cf:ae:56:17:ec:c0:a4:f2:0c:bd:c5:66:b0: 83:70:d2:08:71:0a:0d:d0:4a:ae:e1:fb:95:5b:72: bf:39:75:e3:c8:9a:f0:24:6d:aa:55:b4:04:7d:c7: f5:98:93:4e:b8:4e:89:74:d6:c1:4a:15:79:32:be: 68:b7:b1:06:6a:df:14:73:4c:c9:4b:0e:58:62:d0: 73:fd:64:e2:84:98:15:14:d2:7a:aa:b7:2a:f3:51: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9F:0B:EA:23:77:45:93:0D:1F:34:CB:DB:39:EA:7C:EB:DF:8F:E7 X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:e3:61:3a:ca:83:0a:80:fb:13:f2:88:72:b6:36:22:fd:39: 63:3e:5c:83:28:de:48:95:57:d5:b0:a3:9c:33:a4:ba:8b:58: 04:7f:b1:97:61:dc:8e:cf:fc:94:0b:7a:62:61:ca:6b:ee:cf: e0:d2:b3:d6:fe:9d:ec:8c:45:fa:33:d1:9f:fd:cc:4c:8c:8c: 29:d1:24:60:24:93:79:21:ee:66:c2:1c:b5:8d:62:3c:8b:0e: c0:3b:f7:4c:61:b5:ab:51:45:5f:3e:61:c4:57:c6:36:fe:a4: ea:cc:b8:e7:3f:84:35:34:1e:52:56:64:3f:81:4a:8b:7b:46: 72:10:8a:df:6c:c8:6c:49:34:68:9b:df:e6:fc:a3:44:30:5b: 24:d0:9a:99:89:a1:a6:4c:7f:c9:68:06:fd:9d:27:a8:3d:c3: 85:74:6a:78:7c:9b:cc:cc:90:ff:16:f0:0b:c7:b9:99:f1:bc: 3d:93:29:ee:bf:82:6d:01:95:4c:56:7c:38:43:b4:e0:b0:f3: cf:28:2b:b5:9c:0e:a8:00:00:a2:91:cc:be:c2:df:aa:c9:87: 45:f3:9f:90:67:61:3f:0f:1c:7f:05:3e:91:fc:5f:c4:4d:4e: de:c4:1d:e8:e2:70:d7:3d:c0:37:a6:cb:a9:0a:7e:6a:e0:30: 9a:b6:3c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDQwRERFRUYwMThFQURDREU0RDFCRjc4RDE1NDg1MUY4 RDhCQzI2QTUwHhcNMjUwODIzMDYyODM2WhcNMjUwODMwMDYyODM2WjAYMRYwFAYD VQQDEw02OGE5NWY5NC1lOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA6sC21KGw47WIuHezTI/icG84TZmOEYy2RUmBWVwGS0j7OCEPaKDMZAOHI+ I1gi49JTiAln1rSQsigh8hFWmbd4wYzegu53PruBK0H9FFloUIUMnHkD78pmlLqu itQWs59xWOFW7SHebEuH8pqtNojfW/GQCmXvI7Q6hWCj8WzfwPBWMrGgKhoM0Wc2 HBodw44VqQfpy1fwkHa6YhTFHJHPdbW/Zs+uVhfswKTyDL3FZrCDcNIIcQoN0Equ 4fuVW3K/OXXjyJrwJG2qVbQEfcf1mJNOuE6JdNbBShV5Mr5ot7EGat8Uc0zJSw5Y YtBz/WTihJgVFNJ6qrcq81HzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSfC+oj d0WTDR80y9s56nzr34/nMB8GA1UdIwQYMBaAFEDd7vAY6tzeTRv3jRVIUfjYvCal MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GMEI2NkNGODhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNONU5HX2VORlVoUi1OaThK cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GMEI2NkNGODhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNO NU5HX2VORlVoUi1OaThKcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDj42E6yoMKgPsT8ohytjYi/TljPlyDKN5IlVfVsKOcM6S6i1gEf7GX YdyOz/yUC3piYcpr7s/g0rPW/p3sjEX6M9Gf/cxMjIwp0SRgJJN5Ie5mwhy1jWI8 iw7AO/dMYbWrUUVfPmHEV8Y2/qTqzLjnP4Q1NB5SVmQ/gUqLe0ZyEIrfbMhsSTRo m9/m/KNEMFsk0JqZiaGmTH/JaAb9nSeoPcOFdGp4fJvMzJD/FvALx7mZ8bw9kynu v4JtAZVMVnw4Q7TgsPPPKCu1nA6oAACikcy+wt+qyYdF85+QZ2E/Dxx/BT6R/F/E TU7exB3o4nDXPcA3psupCn5q4DCatjyE -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:15 2025 by rpki-client