$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: v0egylJEB1HNbsM35B/U5t3rNXl81WV1w9qhB32ruF0= Subject key identifier: EC:6D:24:5D:BF:4E:56:09:58:72:3B:CB:4A:F2:E4:BE:93:D4:66:34 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 03A5 Signing time: Sat 23 Aug 2025 01:01:32 +0000 Manifest this update: Sat 23 Aug 2025 01:01:32 +0000 Manifest next update: Sat 30 Aug 2025 01:01:32 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: yTY2DeTz6vKR1ThJHiEYoHdNc1zxoYWFfSzu2YanrHA=) 2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Aug 23 01:01:32 2025 GMT Not After : Aug 30 01:01:32 2025 GMT Subject: CN=68a912ec-eec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:69:08:73:f7:fb:11:cb:0a:71:73:7d:66: 88:65:91:87:a2:76:eb:47:ed:c0:28:7e:36:70:47: a5:9f:a4:a0:fb:fa:84:9a:6f:66:4a:48:47:3e:32: 61:a0:89:ef:4e:5d:f6:4c:33:86:7e:d1:8a:b1:27: 17:82:81:67:49:be:fb:bb:81:a4:8f:2c:20:1a:bc: 94:6b:1c:21:e7:80:0b:53:b7:88:58:47:0d:d2:7d: 99:83:b0:38:d9:de:6d:e7:29:61:cb:91:be:dd:f9: 31:b4:1b:48:f1:34:12:3e:1c:d4:a6:f2:db:08:ba: 18:c4:6d:88:9b:bf:35:91:ac:10:ee:06:6e:01:e5: 33:64:5e:32:1e:d5:9d:73:f2:b7:3c:ce:e2:ef:71: 3d:c4:00:e8:fe:ff:65:1c:92:f3:4f:e1:92:86:e6: ae:3e:af:13:74:e0:a9:bf:65:8d:3d:7e:57:66:d2: a3:93:03:6b:94:fe:3c:c4:8c:40:38:bf:96:6c:72: 10:f6:5d:65:67:4a:da:2f:5e:13:b8:dd:33:8d:b4: 60:b2:bb:b6:d7:92:a9:35:38:1d:a9:fe:b3:ca:52: c1:df:26:73:bd:1d:b2:c2:b7:77:b8:f8:b7:97:ec: 19:a8:41:dd:23:6b:e3:75:17:e8:00:f6:73:48:31: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6D:24:5D:BF:4E:56:09:58:72:3B:CB:4A:F2:E4:BE:93:D4:66:34 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2a:4c:a3:b2:83:1c:33:9c:b7:f1:e0:5b:22:2a:1b:5e:10: a7:04:81:c9:2f:3d:6a:a4:85:9c:f9:d6:70:5e:ce:1e:c8:d0: f3:c4:21:19:fc:2f:23:06:fc:84:96:07:0c:2e:ba:3e:21:9c: 08:54:ee:75:1d:f6:e9:db:78:0f:e4:43:3b:45:42:2c:b3:9a: 58:fa:f7:6a:2b:f3:e1:1e:fc:1a:59:fe:85:79:2a:23:72:8f: 8b:f2:f5:ba:75:3b:21:14:f0:7a:35:2c:9d:7f:ab:1b:98:bc: 97:34:4c:f2:96:d6:23:50:08:98:38:74:83:31:f8:55:00:f4: 8e:be:87:42:51:0b:60:24:9c:25:ea:1c:26:17:50:03:3d:e8: 7d:a3:8c:56:e5:f0:4c:aa:be:b9:0a:97:6b:fd:a2:3d:12:9a: 76:60:8b:fc:ff:3e:3f:db:06:0a:01:0d:86:4e:9c:d4:13:f7: 33:87:2e:f3:32:e8:c7:41:2c:6b:77:73:de:a8:d9:ca:86:19: ae:44:91:7c:bf:75:0c:58:76:99:90:af:a0:3f:1c:27:2b:d0: 2f:34:b5:73:bf:81:1f:71:4d:49:21:d2:7c:01:64:2f:c1:7c: 3f:ba:e0:29:62:45:5d:d8:08:69:f0:60:b9:8e:05:d1:e9:33: 07:0b:b6:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUwODIzMDEwMTMyWhcNMjUwODMwMDEwMTMyWjAYMRYwFAYD VQQDEw02OGE5MTJlYy1lZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosVpCHP3+xHLCnFzfWaIZZGHonbrR+3AKH42cEeln6Sg+/qEmm9mSkhHPjJh oInvTl32TDOGftGKsScXgoFnSb77u4GkjywgGryUaxwh54ALU7eIWEcN0n2Zg7A4 2d5t5ylhy5G+3fkxtBtI8TQSPhzUpvLbCLoYxG2Im781kawQ7gZuAeUzZF4yHtWd c/K3PM7i73E9xADo/v9lHJLzT+GShuauPq8TdOCpv2WNPX5XZtKjkwNrlP48xIxA OL+WbHIQ9l1lZ0raL14TuN0zjbRgsru215KpNTgdqf6zylLB3yZzvR2ywrd3uPi3 l+wZqEHdI2vjdRfoAPZzSDGOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxtJF2/ TlYJWHI7y0ry5L6T1GY0MB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXKkyjsoMcM5y38eBbIiobXhCnBIHJLz1qpIWc+dZwXs4eyNDzxCEZ /C8jBvyElgcMLro+IZwIVO51Hfbp23gP5EM7RUIss5pY+vdqK/PhHvwaWf6FeSoj co+L8vW6dTshFPB6NSydf6sbmLyXNEzyltYjUAiYOHSDMfhVAPSOvodCUQtgJJwl 6hwmF1ADPeh9o4xW5fBMqr65Cpdr/aI9Epp2YIv8/z4/2wYKAQ2GTpzUE/czhy7z MujHQSxrd3PeqNnKhhmuRJF8v3UMWHaZkK+gPxwnK9AvNLVzv4EfcU1JIdJ8AWQv wXw/uuApYkVd2Ahp8GC5jgXR6TMHC7Zy -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:49 2025 by rpki-client