$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: UWjsAigkK5IQOkKRAqmYdNWlZPI3CINhd737VHgG2iE= Subject key identifier: 32:A8:AF:F4:C2:8A:CD:CF:7C:F7:92:9E:A5:EA:C3:A3:8A:95:81:D3 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: B5 Signing time: Sat 23 Aug 2025 06:14:51 +0000 Manifest this update: Sat 23 Aug 2025 06:14:50 +0000 Manifest next update: Sat 30 Aug 2025 06:14:50 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: ZMJEbpzvPvHSzMM8oLaB2S8WRsbSeiNLjl71fxhayZQ=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Aug 23 06:14:50 2025 GMT Not After : Aug 30 06:14:50 2025 GMT Subject: CN=68a95c5b-cec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:c0:02:c3:4e:6a:97:35:c7:d7:d8:9e:bf: 20:db:93:d9:e6:df:25:66:96:9d:91:85:9b:94:64: 74:4c:9a:9e:da:37:b0:a1:b2:4d:71:ec:6a:b1:c9: 4d:e0:6c:d1:de:64:59:f4:bb:98:42:8f:3a:e1:b0: 8f:35:20:eb:4f:cd:0d:21:01:4b:e2:6c:d1:a7:6c: cb:1d:4e:f7:ab:a2:ff:04:47:72:79:91:dd:34:fa: 47:24:f3:76:e3:b3:e4:a7:90:7e:54:a9:e6:4f:a3: 9f:09:06:88:6a:d5:05:26:4d:3c:02:1b:af:c2:b8: 6f:44:e8:3e:74:82:34:f9:73:81:3f:7b:c3:01:49: ae:c1:4c:c2:04:2a:1d:bb:18:77:e6:b6:5b:05:a3: 65:4a:ee:43:2b:b0:57:a1:28:55:5d:5b:f2:4a:e4: 20:2c:fc:d3:1b:b3:2c:fa:e1:8d:38:5b:85:b1:f8: 10:1a:4c:ac:34:cf:49:c4:0e:83:e3:40:ce:87:72: 46:e8:ea:6d:dc:50:73:c0:79:e1:aa:34:42:62:5c: d4:15:ae:b6:1a:2e:e8:e1:c8:14:c0:fd:44:dd:25: 5f:20:99:f8:69:82:93:8a:94:dd:a3:26:f6:63:f9: 70:f9:c0:b0:10:92:1e:57:00:bd:65:a9:d0:25:8c: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A8:AF:F4:C2:8A:CD:CF:7C:F7:92:9E:A5:EA:C3:A3:8A:95:81:D3 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:53:07:ed:44:d6:73:a8:6a:ee:79:52:2f:dd:43:ab:10:03: f0:0e:1a:8c:ca:3c:a8:2c:97:86:8d:5e:72:c2:e6:a5:4e:69: ef:5e:77:0d:23:d8:60:5e:1a:bb:38:b5:46:04:74:63:07:65: a9:5a:4f:cf:46:b6:6e:81:a5:fb:80:76:6c:92:d5:b4:9e:90: 7d:28:67:31:df:8e:27:69:53:36:60:11:73:80:17:2f:44:06: 6d:03:56:93:26:d8:a0:85:cb:56:26:e8:82:b6:eb:b3:e3:92: e0:72:76:00:f2:3f:ae:c3:0e:56:a6:9e:b7:b5:6e:e0:63:1f: fd:70:fe:e8:2e:d5:02:03:70:39:61:be:01:ac:b0:7a:6f:b2: 7e:bf:d1:35:b8:fe:2d:95:d7:82:42:c5:80:01:0b:b6:36:a2: ae:8c:d3:6f:b8:96:49:83:f4:91:bc:9c:e4:7e:2a:93:74:95: 23:65:67:6c:1a:98:54:d7:a4:30:01:33:26:46:31:c3:d2:5e: a1:2d:30:1f:df:04:81:6c:26:d4:c9:c7:9a:80:6c:b5:c6:65: af:57:9d:29:56:13:ee:03:32:8d:86:b6:92:33:63:ee:84:16: 68:ad:ca:69:6c:99:b0:b6:b6:f5:2d:33:e1:f3:14:88:5e:bc: a8:e9:50:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUwODIzMDYxNDUwWhcNMjUwODMwMDYxNDUwWjAYMRYwFAYD VQQDEw02OGE5NWM1Yi1jZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZjAAsNOapc1x9fYnr8g25PZ5t8lZpadkYWblGR0TJqe2jewobJNcexqsclN 4GzR3mRZ9LuYQo864bCPNSDrT80NIQFL4mzRp2zLHU73q6L/BEdyeZHdNPpHJPN2 47Pkp5B+VKnmT6OfCQaIatUFJk08AhuvwrhvROg+dII0+XOBP3vDAUmuwUzCBCod uxh35rZbBaNlSu5DK7BXoShVXVvySuQgLPzTG7Ms+uGNOFuFsfgQGkysNM9JxA6D 40DOh3JG6Opt3FBzwHnhqjRCYlzUFa62Gi7o4cgUwP1E3SVfIJn4aYKTipTdoyb2 Y/lw+cCwEJIeVwC9ZanQJYz+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKor/TC is3PfPeSnqXqw6OKlYHTMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMUwftRNZzqGrueVIv3UOrEAPwDhqMyjyoLJeGjV5ywualTmnvXncN I9hgXhq7OLVGBHRjB2WpWk/PRrZugaX7gHZsktW0npB9KGcx344naVM2YBFzgBcv RAZtA1aTJtighctWJuiCtuuz45LgcnYA8j+uww5Wpp63tW7gYx/9cP7oLtUCA3A5 Yb4BrLB6b7J+v9E1uP4tldeCQsWAAQu2NqKujNNvuJZJg/SRvJzkfiqTdJUjZWds GphU16QwATMmRjHD0l6hLTAf3wSBbCbUyceagGy1xmWvV50pVhPuAzKNhraSM2Pu hBZorcppbJmwtrb1LTPh8xSIXryo6VBd -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:12 2025 by rpki-client