$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json) Hash identifier: IzW9ryKBv/S+dASQKPPD2QSRU4bICtWmFWGcc7zqX/M= Subject key identifier: 36:65:D6:76:C2:01:E7:F9:76:47:B9:D7:A2:85:21:E3:07:4A:4E:1B Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:48:39 +0000 Manifest this update: Sat 23 Aug 2025 07:48:39 +0000 Manifest next update: Sat 30 Aug 2025 07:48:39 +0000 Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: /uVzDOIXOBpxalv4dGpdY2QS9afjPIHRfm77q97PZr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Validity Not Before: Aug 23 07:48:39 2025 GMT Not After : Aug 30 07:48:39 2025 GMT Subject: CN=68a97257-e4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:17:1c:d7:d7:fa:6f:ec:1d:0b:5e:9a:d0: 24:7f:62:eb:07:72:c1:40:d0:b3:cc:53:83:f3:4e: d0:52:38:28:71:87:8f:5e:ae:a5:ea:86:bb:a5:b1: ff:ca:4a:cc:da:c2:e5:9c:07:b6:06:78:06:b0:a6: 51:79:43:63:66:a0:1b:59:99:7b:71:73:b0:aa:ef: 69:f4:cc:b0:0a:88:d8:aa:cd:f6:28:6b:60:a5:90: 4b:4a:55:52:f3:d8:59:6f:d4:d8:7c:5f:5e:e0:70: 10:f8:48:ad:6b:0f:4f:3b:92:b1:6a:11:98:b6:08: 89:5c:af:ea:1e:cd:9d:59:22:74:e0:c7:c4:ed:68: 0e:08:93:24:7c:8d:30:c8:57:71:63:a7:c5:49:36: d2:1b:38:63:34:1d:02:96:c4:17:17:79:a9:91:b3: cc:be:7e:f1:fc:90:88:24:99:65:eb:1c:37:94:ce: 5d:fd:8c:76:5c:74:00:bd:ff:48:1b:22:dd:cd:b1: 61:24:75:c0:23:2c:5c:80:82:8c:60:90:e1:b7:c2: 55:fd:b6:93:1c:03:47:3b:c9:90:d8:cf:60:72:6a: 19:10:ae:05:23:8d:a2:c8:39:4c:04:53:ae:68:b9: 87:37:4e:9d:e7:ff:03:f8:f7:f0:a5:c4:ed:a0:a1: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:65:D6:76:C2:01:E7:F9:76:47:B9:D7:A2:85:21:E3:07:4A:4E:1B X509v3 Authority Key Identifier: keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:70:30:5d:fd:10:b2:33:2c:b4:7b:e1:c6:9d:39:45:bf:1f: 7c:8f:c1:79:59:cf:17:61:51:9e:5a:59:3d:89:04:92:14:94: 43:7c:76:08:32:fc:b9:27:b2:e8:3f:e1:60:da:7f:fc:2e:91: 8a:18:78:11:9f:73:50:cb:78:48:14:d2:18:8a:fe:80:34:1e: d4:54:b2:1b:b9:d0:57:e9:fc:c3:d8:32:d9:01:6a:96:0c:95: 21:c1:d2:41:f8:34:d6:62:d4:3d:35:db:fc:de:89:9e:41:c6: 26:55:ee:34:8f:1a:66:21:82:10:02:b6:d1:da:08:ff:3e:7f: a1:3c:a6:a2:e3:06:76:3c:8c:cd:9f:d8:36:36:33:ad:bb:4e: 46:99:49:0a:b0:93:f9:fb:0b:88:2d:32:0c:e6:c1:5c:d3:50: 89:fb:37:8d:1a:17:d8:2e:48:18:09:bd:24:d3:de:08:85:fa: f0:33:98:6d:c0:24:13:91:bd:f9:fb:d2:66:9e:bc:e6:c8:96: e7:84:29:b1:dc:ee:55:a6:eb:6c:c9:d8:c5:03:f8:cd:66:b2: 12:c5:67:2c:6c:d1:39:7f:e1:de:e5:ff:d2:58:a2:fe:3d:7f: 61:2e:7e:6c:15:b6:5a:c8:ea:ea:71:52:dc:ef:86:01:d8:9f: b8:60:ca:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD MTM4RDEyMzAeFw0yNTA4MjMwNzQ4MzlaFw0yNTA4MzAwNzQ4MzlaMBgxFjAUBgNV BAMTDTY4YTk3MjU3LWU0YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGcBcc19f6b+wdC16a0CR/YusHcsFA0LPMU4PzTtBSOChxh49erqXqhrulsf/K SszawuWcB7YGeAawplF5Q2NmoBtZmXtxc7Cq72n0zLAKiNiqzfYoa2ClkEtKVVLz 2Flv1Nh8X17gcBD4SK1rD087krFqEZi2CIlcr+oezZ1ZInTgx8TtaA4IkyR8jTDI V3Fjp8VJNtIbOGM0HQKWxBcXeamRs8y+fvH8kIgkmWXrHDeUzl39jHZcdAC9/0gb It3NsWEkdcAjLFyAgoxgkOG3wlX9tpMcA0c7yZDYz2ByahkQrgUjjaLIOUwEU65o uYc3Tp3n/wP49/ClxO2goe5BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNmXWdsIB 5/l2R7nXooUh4wdKThswHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOlwMF39ELIzLLR74cadOUW/H3yPwXlZzxdhUZ5aWT2JBJIUlEN8dggy /Lknsug/4WDaf/wukYoYeBGfc1DLeEgU0hiK/oA0HtRUshu50Ffp/MPYMtkBapYM lSHB0kH4NNZi1D012/zeiZ5BxiZV7jSPGmYhghACttHaCP8+f6E8pqLjBnY8jM2f 2DY2M627TkaZSQqwk/n7C4gtMgzmwVzTUIn7N40aF9guSBgJvSTT3giF+vAzmG3A JBORvfn70maevObIlueEKbHc7lWm62zJ2MUD+M1mshLFZyxs0Tl/4d7l/9JYov49 f2EufmwVtlrI6upxUtzvhgHYn7hgykg= -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:51 2025 by rpki-client