$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft File: 1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json) Hash identifier: vMGFWfmDze5gxxhAch/af/UHyCpKHrvPq0XP3XqRPZQ= Subject key identifier: CB:D8:70:11:31:CC:88:D7:A6:3A:36:55:DD:53:D4:53:DE:DF:F7:84 Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE Certificate issuer: /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft Manifest number: 088B Signing time: Fri 22 Aug 2025 20:43:54 +0000 Manifest this update: Fri 22 Aug 2025 20:43:54 +0000 Manifest next update: Fri 29 Aug 2025 20:43:54 +0000 Files and hashes: 1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: i6pAG3n1o1ZgkuSaNEBASRBQBbPNSLh7qm6D8F0q+a0=) 2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: Fp3IoCNith1vGTf69ryDz+R4pr7DX4NONp6q1LMxCoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE Validity Not Before: Aug 22 20:43:54 2025 GMT Not After : Aug 29 20:43:54 2025 GMT Subject: CN=68a8d68a-9c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:54:64:6d:c5:a4:22:99:cd:3f:fa:9f:8e: 4a:59:e6:3f:24:96:d1:f5:f4:60:f9:f3:df:3a:5a: 8e:1e:ec:4b:6e:da:27:1d:75:d4:67:57:dc:ea:26: de:32:a1:92:2e:4d:98:e2:4e:72:9c:c7:bc:39:8e: 60:a4:cd:95:92:e1:75:8e:29:15:f8:6f:78:14:57: e6:7a:39:8e:dc:b0:d6:85:8e:7f:0a:63:36:11:6e: 34:a3:95:5f:c9:af:0b:48:88:fb:ee:4d:08:c8:54: 63:8c:86:fa:5c:bd:ce:5d:63:4f:85:7e:7c:90:c6: 07:4e:1d:50:d2:6e:89:81:ff:7a:a4:50:86:e3:19: d3:ec:aa:de:b1:f6:95:df:0f:16:15:0c:21:9a:0d: 7a:75:76:df:a4:d0:64:eb:94:97:c4:0f:12:a9:4e: d1:0c:79:c2:bc:06:49:64:59:a2:c2:7b:96:f2:3e: 6a:8c:52:4b:98:66:73:33:85:c2:7c:66:d1:86:a2: fd:03:29:b2:88:f0:73:f1:3e:ea:d6:af:94:f4:9f: 48:d7:e4:9a:dd:90:07:11:f3:15:08:b8:ef:46:18: 15:92:c9:dd:66:6f:fa:f0:76:f4:9e:cf:cd:50:f3: 45:6c:5e:26:84:e6:58:8b:b5:94:08:66:63:e8:98: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D8:70:11:31:CC:88:D7:A6:3A:36:55:DD:53:D4:53:DE:DF:F7:84 X509v3 Authority Key Identifier: keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:dc:be:36:a0:b5:23:f0:d0:f0:f6:80:fe:41:7b:29:f4:8f: 63:ef:33:14:ac:e2:f4:09:86:ef:8a:b7:dd:57:56:32:5a:53: 80:cf:18:2d:f0:a9:b9:91:b0:7b:ba:dc:e2:70:77:10:d4:2e: ba:dc:29:82:6f:cb:3d:7b:fa:c9:24:0c:02:29:e2:0e:02:a1: 16:e1:6d:4a:ac:d1:d2:42:ed:19:20:fe:2e:69:c5:92:c1:d8: 0c:e7:34:87:2a:88:39:09:69:b1:43:f6:7a:fb:de:10:81:31: 93:26:c0:b8:c1:84:99:d6:b1:25:e4:dd:c0:10:a5:af:d5:74: 85:f1:79:aa:75:eb:8a:5f:fb:18:fc:9d:44:e3:05:b6:21:fa: 7b:02:1e:3d:7a:42:2b:05:aa:58:53:ef:a1:83:63:9f:9e:1d: 04:71:46:89:de:f4:87:52:f4:ae:85:be:a4:bf:c4:58:14:67: 44:e6:4f:6c:14:a6:0e:43:49:f9:09:48:76:da:03:d8:e9:a7: 28:43:04:e5:16:de:b3:8b:2c:97:f6:43:bd:19:db:f2:42:80: 86:3c:82:4a:9e:e7:e0:c0:6d:93:2f:33:7b:33:6d:aa:f2:91: 45:e5:f4:42:c3:35:7d:94:a3:36:68:92:d9:cb:aa:d5:ac:6a: 52:99:5c:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3NEQxMTAvBgNVBAUTKEQ1MDREODE5MDJCMTgzOEIyODJBRTlGNDVDNERDM0Y4 MTc4RTI0RUUwHhcNMjUwODIyMjA0MzU0WhcNMjUwODI5MjA0MzU0WjAYMRYwFAYD VQQDEw02OGE4ZDY4YS05YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LBUZG3FpCKZzT/6n45KWeY/JJbR9fRg+fPfOlqOHuxLbtonHXXUZ1fc6ibe MqGSLk2Y4k5ynMe8OY5gpM2VkuF1jikV+G94FFfmejmO3LDWhY5/CmM2EW40o5Vf ya8LSIj77k0IyFRjjIb6XL3OXWNPhX58kMYHTh1Q0m6Jgf96pFCG4xnT7KresfaV 3w8WFQwhmg16dXbfpNBk65SXxA8SqU7RDHnCvAZJZFmiwnuW8j5qjFJLmGZzM4XC fGbRhqL9AymyiPBz8T7q1q+U9J9I1+Sa3ZAHEfMVCLjvRhgVksndZm/68Hb0ns/N UPNFbF4mhOZYi7WUCGZj6JiGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvYcBEx zIjXpjo2Vd1T1FPe3/eEMB8GA1UdIwQYMBaAFNUE2BkCsYOLKCrp9FxNw/gXjiTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0RC82OEExRDU1QUM3 MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0c29LdW4wWEUzRC1CZU9K TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRVFlHUUt4ZzRzb0t1bjBYRTNELUJlT0pPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTc0RC82OEExRDU1QUM3MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0 c29LdW4wWEUzRC1CZU9KTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt3L42oLUj8NDw9oD+QXsp9I9j7zMUrOL0CYbvirfdV1YyWlOAzxgt 8Km5kbB7utzicHcQ1C663CmCb8s9e/rJJAwCKeIOAqEW4W1KrNHSQu0ZIP4uacWS wdgM5zSHKog5CWmxQ/Z6+94QgTGTJsC4wYSZ1rEl5N3AEKWv1XSF8XmqdeuKX/sY /J1E4wW2Ifp7Ah49ekIrBapYU++hg2Ofnh0EcUaJ3vSHUvSuhb6kv8RYFGdE5k9s FKYOQ0n5CUh22gPY6acoQwTlFt6ziyyX9kO9GdvyQoCGPIJKnufgwG2TLzN7M22q 8pFF5fRCwzV9lKM2aJLZy6rVrGpSmVwP -----END CERTIFICATE-----Generated at Sat Aug 23 22:36:55 2025 by rpki-client