$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: QadxYFF0ycHYZWrpg5mesu1zZibxXtXKHwu0x9Cr82Y= Subject key identifier: 73:54:B8:86:38:BB:57:9F:E8:CA:D2:2C:4C:49:84:74:50:11:AE:22 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1A17 Signing time: Fri 22 Aug 2025 16:27:33 +0000 Manifest this update: Fri 22 Aug 2025 16:27:33 +0000 Manifest next update: Fri 29 Aug 2025 16:27:33 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: jC8+DXjDC4e9ZGVm42GN9JI2RiJpKoBCphYSM0qINYg=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6686 (0x1a1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Aug 22 16:27:33 2025 GMT Not After : Aug 29 16:27:33 2025 GMT Subject: CN=68a89a75-1414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:4e:16:ab:4e:12:7d:3c:c5:eb:f6:11:41: c4:c2:90:ec:b7:f5:ce:9f:91:07:a8:18:71:c5:ec: 54:46:2d:8b:46:35:48:47:e0:04:20:92:c9:97:b5: 87:df:95:c5:ab:00:c8:02:1c:c8:4f:68:55:d2:c6: df:60:e7:4a:93:eb:51:43:31:92:b2:80:21:7d:9c: 85:65:ff:37:89:b5:15:69:38:18:54:94:89:5b:ba: e2:5f:69:31:02:31:01:96:5a:70:4f:0b:54:8e:6b: ec:e5:84:dc:79:16:a9:4d:cb:2a:8c:26:1f:78:73: 5b:91:bc:d3:bd:3a:cd:57:ac:b4:5d:ed:1d:f8:35: 4c:c4:6d:d4:14:14:88:28:49:15:b5:ad:e0:47:cd: dc:84:09:59:da:25:95:76:20:2d:22:f0:a1:77:98: 56:08:5f:c5:a4:34:80:4a:e1:68:a9:27:43:29:c2: e1:3c:d1:e6:21:c8:e6:f5:bf:21:09:25:a4:75:48: f6:88:f0:9a:a0:2e:e2:e9:67:08:ac:7c:c9:32:71: 63:f7:80:d8:2d:59:46:49:53:93:0a:c1:1d:a8:94: c1:79:7c:12:3b:54:1f:4a:c5:a2:04:36:9f:6e:27: 4a:c5:a7:ff:11:0f:d2:04:63:ea:df:9c:fb:2e:ea: 2e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:B8:86:38:BB:57:9F:E8:CA:D2:2C:4C:49:84:74:50:11:AE:22 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:67:4d:dd:2d:03:ac:18:d6:1e:ae:fe:3a:e9:87:df:d8:90: e3:20:b5:19:c8:65:51:13:b8:05:8c:d9:83:6a:ae:36:7b:9a: 54:0b:40:a0:82:fa:30:87:0b:27:7a:54:b9:99:89:31:05:94: 68:74:e9:30:19:5d:45:e1:a2:be:b2:29:f4:ec:99:6c:41:4a: 7d:ad:3c:a8:86:25:74:e1:d7:45:ff:82:a7:8c:78:6d:5e:a4: c0:39:4b:4e:d7:2e:61:44:12:61:be:fa:52:d5:47:07:60:5e: 57:63:c6:46:ca:09:f7:6a:1b:cb:70:cc:6b:72:75:86:93:7f: 5e:df:78:dd:01:da:a2:a5:fb:b5:f3:7c:78:98:e8:d5:7a:c9: b1:13:53:2a:29:ff:4f:fc:9e:d4:4f:eb:df:95:b1:d0:66:45: c3:81:29:10:27:8e:e2:07:10:97:86:26:39:9d:dc:1d:7e:b8: ac:67:a2:e4:22:5b:7b:db:d4:3e:a4:80:27:f8:ce:16:e4:18: d0:89:12:60:20:dd:b5:19:99:e3:99:b9:4f:76:84:a7:c8:12: 58:d1:de:8a:10:4c:3b:08:f6:03:e7:43:53:6f:cd:fd:e6:4d: 1d:06:ca:9a:48:35:8a:4f:9c:bd:19:21:0a:93:2e:56:b9:96: 92:ca:87:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwODIyMTYyNzMzWhcNMjUwODI5MTYyNzMzWjAYMRYwFAYD VQQDEw02OGE4OWE3NS0xNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbNOFqtOEn08xev2EUHEwpDst/XOn5EHqBhxxexURi2LRjVIR+AEIJLJl7WH 35XFqwDIAhzIT2hV0sbfYOdKk+tRQzGSsoAhfZyFZf83ibUVaTgYVJSJW7riX2kx AjEBllpwTwtUjmvs5YTceRapTcsqjCYfeHNbkbzTvTrNV6y0Xe0d+DVMxG3UFBSI KEkVta3gR83chAlZ2iWVdiAtIvChd5hWCF/FpDSASuFoqSdDKcLhPNHmIcjm9b8h CSWkdUj2iPCaoC7i6WcIrHzJMnFj94DYLVlGSVOTCsEdqJTBeXwSO1QfSsWiBDaf bidKxaf/EQ/SBGPq35z7LuouXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNUuIY4 u1ef6MrSLExJhHRQEa4iMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDZ03dLQOsGNYerv466Yff2JDjILUZyGVRE7gFjNmDaq42e5pUC0Cg gvowhwsnelS5mYkxBZRodOkwGV1F4aK+sin07JlsQUp9rTyohiV04ddF/4KnjHht XqTAOUtO1y5hRBJhvvpS1UcHYF5XY8ZGygn3ahvLcMxrcnWGk39e33jdAdqipfu1 83x4mOjVesmxE1MqKf9P/J7UT+vflbHQZkXDgSkQJ47iBxCXhiY5ndwdfrisZ6Lk Ilt729Q+pIAn+M4W5BjQiRJgIN21GZnjmblPdoSnyBJY0d6KEEw7CPYD50NTb839 5k0dBsqaSDWKT5y9GSEKky5WuZaSyoe2 -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:44 2025 by rpki-client