$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: 1z4sPlENtHreZfli2f+yzjoXfXfbALPpLM/6IT6VPfA= Subject key identifier: 68:32:AB:51:3F:23:14:7D:60:27:32:52:C1:BB:DC:AD:B3:68:3C:79 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:12:46 +0000 Manifest this update: Sat 23 Aug 2025 08:12:45 +0000 Manifest next update: Sat 30 Aug 2025 08:12:45 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: KAlxSOpwoYULLb2BcVE0eRJfSmDJAdSzTxOaf8SGLvM=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Aug 23 08:12:45 2025 GMT Not After : Aug 30 08:12:45 2025 GMT Subject: CN=68a977fe-0cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:a0:37:ac:5b:d5:2c:ec:0b:8c:58:e9:1b: c6:a1:d0:49:0c:35:6c:c0:2c:31:19:f6:52:60:e3: 5c:df:2e:fb:8a:2a:4d:4c:8e:bd:b1:6c:d9:26:cb: 39:07:c2:0f:f7:7f:70:e4:70:a9:b8:68:e6:a3:23: 70:43:5f:c8:a7:64:36:11:d6:65:f2:13:90:3a:8f: e2:f8:0d:60:e3:2e:b2:98:24:ce:2a:23:cf:75:1c: 21:0f:09:1d:81:0a:f8:75:42:77:d2:54:61:18:5e: 48:a8:9f:d8:d6:65:97:13:46:f4:71:b8:cc:ba:81: 4c:63:1f:34:05:85:e1:17:5c:7d:fc:bd:7b:a8:5a: 82:42:ca:c1:80:1e:77:95:82:ec:eb:96:da:5c:6d: 7f:58:1f:b1:32:32:99:e8:6b:76:02:d8:84:11:f1: 4c:7f:4c:96:ec:9f:ef:fc:b8:d8:e7:da:2b:aa:bf: 0b:d3:5f:f8:0a:f7:32:96:65:e3:8e:c3:8a:17:bf: 4b:20:c3:f7:68:03:79:be:fc:00:72:15:0e:15:cf: 47:58:71:b3:79:7f:f5:c0:8a:95:5f:5c:1d:bb:2f: 98:93:53:22:d6:c7:a0:db:f4:e9:20:49:c0:f0:dd: e7:eb:d4:e1:07:58:a3:06:8d:7b:58:ef:83:42:9e: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:AB:51:3F:23:14:7D:60:27:32:52:C1:BB:DC:AD:B3:68:3C:79 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dd:88:c1:e5:73:4c:e9:59:93:f1:13:c7:24:c5:ed:a5:0a: 91:88:b9:18:1c:9a:36:55:99:ce:f7:ab:f9:30:aa:de:ab:5e: 1a:6a:9c:4d:d3:75:ae:c4:e6:dd:bc:ef:20:ee:61:e3:0b:d5: ef:6e:d4:3e:bd:1f:a0:b4:bb:62:ef:75:ca:7a:a7:2c:61:2f: ab:5e:ac:d2:64:59:f7:96:64:9f:0b:73:65:35:52:3e:7c:ec: b9:1d:c8:e4:29:cc:d6:71:28:22:dd:97:69:6e:ac:46:88:09: ef:5a:4e:72:19:06:8a:07:90:af:be:42:9d:a7:2d:32:da:d6: e4:44:70:0f:8e:06:bb:0d:8b:e0:4a:6a:9f:5c:2e:cf:ea:aa: 7a:fc:ef:a0:c2:36:e2:09:05:68:c6:1c:86:14:c4:38:fb:2e: 14:94:10:0a:45:7e:3f:e6:26:88:58:c7:de:93:ce:1c:f3:ce: b4:25:da:6e:32:7e:b2:73:1a:ad:56:61:21:d6:eb:7c:0c:6b: 27:72:bc:cf:d6:68:00:c6:78:18:84:ca:81:8c:8e:1c:92:01: 7e:09:db:da:cc:b7:cd:1d:3c:2f:51:7d:16:bb:58:70:72:4c: 51:47:88:fd:77:d0:2f:6d:b6:c7:23:50:4d:7b:20:94:05:78: 64:0f:72:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTA4MjMwODEyNDVaFw0yNTA4MzAwODEyNDVaMBgxFjAUBgNV BAMTDTY4YTk3N2ZlLTBjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4MqA3rFvVLOwLjFjpG8ah0EkMNWzALDEZ9lJg41zfLvuKKk1Mjr2xbNkmyzkH wg/3f3DkcKm4aOajI3BDX8inZDYR1mXyE5A6j+L4DWDjLrKYJM4qI891HCEPCR2B Cvh1QnfSVGEYXkion9jWZZcTRvRxuMy6gUxjHzQFheEXXH38vXuoWoJCysGAHneV guzrltpcbX9YH7EyMpnoa3YC2IQR8Ux/TJbsn+/8uNjn2iuqvwvTX/gK9zKWZeOO w4oXv0sgw/doA3m+/AByFQ4Vz0dYcbN5f/XAipVfXB27L5iTUyLWx6Db9OkgScDw 3efr1OEHWKMGjXtY74NCnq2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaDKrUT8j FH1gJzJSwbvcrbNoPHkwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7diMHlc0zpWZPxE8ckxe2lCpGIuRgcmjZVmc73q/kwqt6rXhpqnE3T da7E5t287yDuYeML1e9u1D69H6C0u2Lvdcp6pyxhL6terNJkWfeWZJ8Lc2U1Uj58 7LkdyOQpzNZxKCLdl2lurEaICe9aTnIZBooHkK++Qp2nLTLa1uREcA+OBrsNi+BK ap9cLs/qqnr876DCNuIJBWjGHIYUxDj7LhSUEApFfj/mJohYx96TzhzzzrQl2m4y frJzGq1WYSHW63wMaydyvM/WaADGeBiEyoGMjhySAX4J29rMt80dPC9RfRa7WHBy TFFHiP130C9ttscjUE17IJQFeGQPcjg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:53 2025 by rpki-client