$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: jWzc9j2P+zxmO9vqz9rp/gMmuZt7u4Q14C95SsPgt8Q= Subject key identifier: EF:03:07:47:30:3E:65:C0:CA:85:3B:CB:20:3B:10:10:C4:17:AA:8A Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 09CA Signing time: Fri 22 Aug 2025 20:07:54 +0000 Manifest this update: Fri 22 Aug 2025 20:07:54 +0000 Manifest next update: Fri 29 Aug 2025 20:07:54 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: 34rkBTNYbOMU7G9ST3tJ+YemagF6xkFXiHpnJaSaIZ4=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Aug 22 20:07:54 2025 GMT Not After : Aug 29 20:07:54 2025 GMT Subject: CN=68a8ce1a-6923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:02:f2:67:00:e2:ed:53:51:82:d9:6b:a7: e1:17:70:c5:60:9b:f4:e7:f6:98:3c:1c:d8:3c:48: c3:51:ac:f0:8d:6b:4c:47:10:2b:ac:98:2b:87:67: 61:9c:e6:6f:80:c1:48:c2:04:17:c1:66:34:ea:a0: 87:70:63:f0:a3:cd:b5:9f:03:eb:56:44:7f:e5:20: 49:e4:92:84:0e:86:87:7e:1d:98:b0:05:cf:57:c7: 29:9c:c2:fa:fd:99:8d:f9:84:e7:80:5b:d4:6a:a7: b7:84:19:56:84:f5:f4:02:45:6a:00:51:d7:fc:a0: 52:7f:65:65:95:0d:e8:1b:42:0f:d2:07:b7:52:7b: 29:39:00:be:06:32:0d:79:75:8a:f3:97:2e:b6:ab: 60:d7:12:bd:91:00:94:bd:1f:71:e2:59:3e:58:09: ca:bf:f5:a4:12:b7:42:37:2a:f6:b4:48:33:bf:89: 76:79:82:c2:df:c5:29:be:6b:8a:ca:1f:71:34:60: 45:f7:1f:63:23:5a:7b:9d:c0:67:31:7c:ce:40:ee: 92:5f:52:a2:48:67:c5:f3:16:39:8a:35:22:47:a3: 91:99:c9:c9:25:5a:02:10:c1:f5:59:11:b9:e9:33: 1f:37:9f:fb:5d:81:b1:03:0a:c6:29:ee:7c:b3:45: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:03:07:47:30:3E:65:C0:CA:85:3B:CB:20:3B:10:10:C4:17:AA:8A X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:09:e5:9b:19:bb:91:20:60:fe:70:c5:be:8e:01:bb:5f:1a: 62:5b:30:44:06:77:8b:50:7f:76:00:27:e7:8f:79:8c:29:fe: 0e:e4:84:da:04:d1:5c:87:c7:70:09:d8:07:2e:92:54:80:2f: 59:e3:b0:a7:2a:60:24:9c:2d:b2:9d:d0:8c:d1:6c:49:9b:36: 20:da:a0:6a:0a:34:7b:dd:d2:f5:aa:4d:31:50:89:7f:72:b8: e0:9b:d2:92:82:7c:86:c0:94:ea:d3:0f:1c:dc:fd:05:be:3b: 87:a0:35:c6:db:2c:fe:1d:8f:7f:fa:f9:f5:f8:c9:8a:0a:06: 0e:55:f2:81:15:43:90:45:27:65:03:e3:41:63:23:ce:bf:a2: 49:63:e0:7a:8c:32:a6:7e:73:a8:ed:ff:16:00:af:10:51:4f: 7a:69:47:71:50:48:fc:5f:6a:8d:ac:b1:85:99:8b:c3:4e:89: a6:8a:7a:c9:c9:7a:f8:35:aa:9c:e8:41:50:cf:4c:8e:94:e8: 9c:c0:17:81:e1:c1:e1:d7:fa:b6:ec:2b:7f:9e:25:0d:c2:01: a7:2b:b9:94:94:8f:b0:50:90:b8:95:07:8e:b0:43:df:bc:df: 9d:96:72:ed:61:2e:49:e8:a4:0e:9b:3b:6b:db:41:05:1e:e1: ed:17:44:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjUwODIyMjAwNzU0WhcNMjUwODI5MjAwNzU0WjAYMRYwFAYD VQQDEw02OGE4Y2UxYS02OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrMC8mcA4u1TUYLZa6fhF3DFYJv05/aYPBzYPEjDUazwjWtMRxArrJgrh2dh nOZvgMFIwgQXwWY06qCHcGPwo821nwPrVkR/5SBJ5JKEDoaHfh2YsAXPV8cpnML6 /ZmN+YTngFvUaqe3hBlWhPX0AkVqAFHX/KBSf2VllQ3oG0IP0ge3UnspOQC+BjIN eXWK85cutqtg1xK9kQCUvR9x4lk+WAnKv/WkErdCNyr2tEgzv4l2eYLC38UpvmuK yh9xNGBF9x9jI1p7ncBnMXzOQO6SX1KiSGfF8xY5ijUiR6ORmcnJJVoCEMH1WRG5 6TMfN5/7XYGxAwrGKe58s0WYqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8DB0cw PmXAyoU7yyA7EBDEF6qKMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCCeWbGbuRIGD+cMW+jgG7XxpiWzBEBneLUH92ACfnj3mMKf4O5ITa BNFch8dwCdgHLpJUgC9Z47CnKmAknC2yndCM0WxJmzYg2qBqCjR73dL1qk0xUIl/ crjgm9KSgnyGwJTq0w8c3P0FvjuHoDXG2yz+HY9/+vn1+MmKCgYOVfKBFUOQRSdl A+NBYyPOv6JJY+B6jDKmfnOo7f8WAK8QUU96aUdxUEj8X2qNrLGFmYvDTomminrJ yXr4Naqc6EFQz0yOlOicwBeB4cHh1/q27Ct/niUNwgGnK7mUlI+wUJC4lQeOsEPf vN+dlnLtYS5J6KQOmztr20EFHuHtF0Sm -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:57 2025 by rpki-client