$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: cG2qiGHdMrH0++KitUJySzTXzF8Py1h/yipqx69sz4I= Subject key identifier: F9:A5:EE:BD:E4:52:B2:EB:00:7C:B0:E6:5D:93:DA:DE:4D:8F:30:BA Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0222 Signing time: Fri 22 Aug 2025 22:28:38 +0000 Manifest this update: Fri 22 Aug 2025 22:28:38 +0000 Manifest next update: Fri 29 Aug 2025 22:28:38 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: xE9dzrjCWzg0hJiAJr/wc+JiqfknQwX1SseN9fFdI/s=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Aug 22 22:28:38 2025 GMT Not After : Aug 29 22:28:38 2025 GMT Subject: CN=68a8ef16-24f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:e4:09:f2:4b:f9:21:a6:29:93:3e:72:3b: 4b:16:9f:97:f5:32:1a:f1:61:ff:d0:ec:b0:bc:7b: 75:d9:ff:a9:dc:84:6b:54:bc:8f:f9:50:8e:25:e0: d0:47:44:7a:29:42:2f:55:e8:7f:b5:79:e7:d2:13: fb:a0:df:4b:e5:0f:5e:46:93:a7:0a:ba:10:eb:c7: 22:1b:f8:6e:1a:ce:10:22:4f:fa:3f:05:80:ae:a6: 21:3a:6a:2c:df:6b:3b:97:2b:1b:5e:b2:1d:1d:2f: ad:07:a3:3e:72:4f:32:4b:2e:19:17:d8:45:6a:dc: 3c:48:df:ba:0d:4c:6c:75:73:e1:08:b9:9d:b6:e2: 5c:24:3e:a4:15:7a:08:5a:1f:d6:b4:fe:e0:2c:f6: 1e:94:51:9f:3d:40:2f:bc:53:c9:30:d4:e9:2a:ee: 62:d0:34:84:72:44:01:6e:89:5a:00:c2:1e:f1:73: cd:4a:c6:73:87:c3:68:32:9f:67:c5:f6:02:42:b3: 76:9a:20:9e:8e:8d:7c:5a:51:ae:84:68:2c:50:50: 58:da:06:fe:ff:10:59:58:6e:fa:9f:97:dd:5d:1f: 7c:59:51:0c:d0:4d:32:e5:25:34:f4:3f:85:d7:81: 55:67:f8:1f:e3:b5:dd:de:7d:d3:98:16:d0:74:41: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A5:EE:BD:E4:52:B2:EB:00:7C:B0:E6:5D:93:DA:DE:4D:8F:30:BA X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:6d:52:69:0b:12:7d:b7:4e:80:98:cc:41:90:91:88:c2:f8: 83:37:2b:5e:e0:68:6f:ab:f6:77:7c:c6:65:cc:f3:05:e5:5b: ff:e1:a3:53:f5:11:69:ff:f3:58:d3:16:d9:ce:45:cf:97:52: 6f:ad:69:49:f5:25:8b:6e:25:18:34:6d:76:06:e1:23:17:d4: f2:f3:73:b1:8e:86:ce:8b:05:bd:c8:28:2c:53:00:4b:b2:ea: 0c:57:b6:db:79:29:98:6b:36:1d:0d:dd:42:8f:bc:03:61:35: 6e:a5:a5:9f:9e:47:7e:68:7b:1f:f4:a1:fa:c7:2b:40:5a:eb: b8:dd:f7:ad:d5:5b:04:29:aa:a9:d0:76:50:3f:e4:7f:d4:35: 9c:da:1e:a3:9e:83:d8:42:8e:a4:57:61:c4:4c:f4:2f:44:31: 7b:9a:b0:82:ee:88:ac:3d:dd:6e:9d:f1:c0:57:b5:db:da:80: b8:b5:73:7c:19:6f:52:aa:c2:f1:fe:0c:56:2b:68:c5:05:96: 4b:ee:b6:9f:8f:8a:85:2e:33:db:a3:f9:58:d9:73:85:31:97: 6d:4a:89:38:49:ea:d8:13:60:bb:fc:75:31:81:2a:59:f0:d7: 58:5c:79:3d:8e:89:80:08:25:5c:d7:6b:a7:6a:3b:35:98:13: 55:f9:12:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUwODIyMjIyODM4WhcNMjUwODI5MjIyODM4WjAYMRYwFAYD VQQDEw02OGE4ZWYxNi0yNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIXkCfJL+SGmKZM+cjtLFp+X9TIa8WH/0OywvHt12f+p3IRrVLyP+VCOJeDQ R0R6KUIvVeh/tXnn0hP7oN9L5Q9eRpOnCroQ68ciG/huGs4QIk/6PwWArqYhOmos 32s7lysbXrIdHS+tB6M+ck8ySy4ZF9hFatw8SN+6DUxsdXPhCLmdtuJcJD6kFXoI Wh/WtP7gLPYelFGfPUAvvFPJMNTpKu5i0DSEckQBbolaAMIe8XPNSsZzh8NoMp9n xfYCQrN2miCejo18WlGuhGgsUFBY2gb+/xBZWG76n5fdXR98WVEM0E0y5SU09D+F 14FVZ/gf47Xd3n3TmBbQdEE+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPml7r3k UrLrAHyw5l2T2t5NjzC6MB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCubVJpCxJ9t06AmMxBkJGIwviDNyte4Ghvq/Z3fMZlzPMF5Vv/4aNT 9RFp//NY0xbZzkXPl1JvrWlJ9SWLbiUYNG12BuEjF9Ty83OxjobOiwW9yCgsUwBL suoMV7bbeSmYazYdDd1Cj7wDYTVupaWfnkd+aHsf9KH6xytAWuu43fet1VsEKaqp 0HZQP+R/1DWc2h6jnoPYQo6kV2HETPQvRDF7mrCC7oisPd1unfHAV7Xb2oC4tXN8 GW9SqsLx/gxWK2jFBZZL7rafj4qFLjPbo/lY2XOFMZdtSok4SerYE2C7/HUxgSpZ 8NdYXHk9jomACCVc12unajs1mBNV+RJ/ -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:57 2025 by rpki-client