$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: auawV8BrrsNi84NQzZlyXiBYsaPGiJui+9ALucy8puE= Subject key identifier: 65:35:22:BC:BD:B0:CF:FA:43:B5:94:25:EC:BD:C4:D4:C8:DB:C5:BF Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 063D Signing time: Fri 22 Aug 2025 22:52:58 +0000 Manifest this update: Fri 22 Aug 2025 22:52:58 +0000 Manifest next update: Fri 29 Aug 2025 22:52:58 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: yWoDG/rEwbVeW6ywkU0tT/SYA5uNs4E1j2xbrE83I68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Aug 22 22:52:58 2025 GMT Not After : Aug 29 22:52:58 2025 GMT Subject: CN=68a8f4ca-6169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:2c:c8:90:a7:75:ae:e5:5b:d3:47:e4:e5: 88:aa:41:47:47:0e:b8:ba:00:3a:aa:13:8b:77:58: 5e:50:65:e5:62:e2:29:96:04:be:ba:d9:73:d8:b7: fa:50:30:c7:88:c4:a1:81:22:0c:eb:db:ca:aa:aa: fe:35:de:b2:28:ad:9d:91:45:89:cd:25:d9:31:c8: 37:fb:76:39:ba:fa:5e:52:61:56:69:4b:5f:eb:9a: 64:86:97:a2:c3:84:65:bc:56:9c:38:10:c2:ad:f6: e8:9c:4b:88:de:32:e4:28:28:93:ca:9e:d3:72:98: 20:b7:fc:5e:c1:20:25:e7:1b:ca:4b:13:19:4d:a7: b7:eb:61:1a:0c:d1:08:e5:be:8d:5c:b8:67:39:aa: 49:1c:7c:fd:d9:51:49:49:44:2e:1a:b5:b2:a2:4b: 8e:b0:f0:9d:09:8a:f0:eb:d9:80:0e:c3:5e:2b:65: 26:c5:1c:81:60:3f:4d:70:af:bb:f0:fa:65:ab:6f: a9:81:ae:37:35:84:5e:25:30:87:75:4d:11:84:b7: 3e:0f:8f:bd:ab:e7:29:43:67:8d:84:84:50:63:72: 0a:81:4c:a6:c5:c4:72:03:e8:63:0e:35:a2:62:2f: 41:30:73:7f:2f:eb:a1:8a:0a:f0:82:c5:71:05:42: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:35:22:BC:BD:B0:CF:FA:43:B5:94:25:EC:BD:C4:D4:C8:DB:C5:BF X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6a:70:f5:c7:48:78:a5:d6:58:0b:50:be:ea:20:a2:c2:52: 16:37:bf:3a:c5:4b:61:b2:5f:53:9b:d6:c7:9d:3f:62:e1:9a: 03:4f:d1:c6:62:6b:40:aa:47:ed:83:d2:5c:e7:5c:b6:d6:de: ed:51:70:33:61:ed:9d:03:5a:03:cc:88:16:66:9f:09:57:87: a2:53:7d:f1:69:05:3b:ea:28:ea:f2:27:b2:a8:f4:18:6a:0b: c9:13:8b:b9:0e:6f:24:25:11:8a:65:86:f6:ca:c2:8f:9c:63: cb:a0:6a:27:7d:39:ad:21:fe:0a:f7:4f:a0:f5:a9:c0:25:5c: 42:4a:74:62:81:24:5b:97:d4:cf:1e:61:46:b0:02:ea:b9:c3: c5:b7:40:f7:e7:37:1e:16:81:9c:4c:67:2e:81:21:66:9d:67: 52:e2:fd:3a:31:e2:eb:18:98:7e:41:44:d8:30:7c:f4:b1:71: fa:05:0b:81:6f:49:37:d2:ec:b7:83:f0:b9:95:69:17:9b:65: 26:65:f3:87:d0:c5:f9:4c:38:2d:62:d6:58:0f:40:8a:2d:1d: 36:d4:11:12:59:7a:dd:cb:2c:82:c4:7d:ea:0c:0c:f4:e0:32: 8c:f7:61:47:c0:2d:8d:c0:83:a5:d9:34:f0:42:df:23:f9:92: 15:e5:77:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjUwODIyMjI1MjU4WhcNMjUwODI5MjI1MjU4WjAYMRYwFAYD VQQDEw02OGE4ZjRjYS02MTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UgsyJCnda7lW9NH5OWIqkFHRw64ugA6qhOLd1heUGXlYuIplgS+utlz2Lf6 UDDHiMShgSIM69vKqqr+Nd6yKK2dkUWJzSXZMcg3+3Y5uvpeUmFWaUtf65pkhpei w4RlvFacOBDCrfbonEuI3jLkKCiTyp7Tcpggt/xewSAl5xvKSxMZTae362EaDNEI 5b6NXLhnOapJHHz92VFJSUQuGrWyokuOsPCdCYrw69mADsNeK2UmxRyBYD9NcK+7 8Pplq2+pga43NYReJTCHdU0RhLc+D4+9q+cpQ2eNhIRQY3IKgUymxcRyA+hjDjWi Yi9BMHN/L+uhigrwgsVxBUJkhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU1Iry9 sM/6Q7WUJey9xNTI28W/MB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcanD1x0h4pdZYC1C+6iCiwlIWN786xUthsl9Tm9bHnT9i4ZoDT9HG YmtAqkftg9Jc51y21t7tUXAzYe2dA1oDzIgWZp8JV4eiU33xaQU76ijq8ieyqPQY agvJE4u5Dm8kJRGKZYb2ysKPnGPLoGonfTmtIf4K90+g9anAJVxCSnRigSRbl9TP HmFGsALqucPFt0D35zceFoGcTGcugSFmnWdS4v06MeLrGJh+QUTYMHz0sXH6BQuB b0k30uy3g/C5lWkXm2UmZfOH0MX5TDgtYtZYD0CKLR021BESWXrdyyyCxH3qDAz0 4DKM92FHwC2NwIOl2TTwQt8j+ZIV5XeR -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:34 2025 by rpki-client