$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: DZ1b4jKQ5LyRDk7lcFHDNXpAW7LmgLwyJBafYq381HQ= Subject key identifier: 64:4A:22:C3:2F:80:F3:30:6B:D4:04:BE:B9:D6:CD:BA:A3:FC:36:75 Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 011B Signing time: Sat 23 Aug 2025 05:00:28 +0000 Manifest this update: Sat 23 Aug 2025 05:00:28 +0000 Manifest next update: Sat 30 Aug 2025 05:00:28 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: Izu+jKdJFCq3RAfO++XlSNjOXTMC89gUoUjL/ykEYrY=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Aug 23 05:00:28 2025 GMT Not After : Aug 30 05:00:28 2025 GMT Subject: CN=68a94aec-8f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:85:43:d0:5c:05:2d:04:1e:3a:54:35:d0:15: 3e:c0:fb:69:7c:f6:7e:09:e2:1c:5b:d8:5c:d3:76: 2e:fc:14:ff:8f:a0:5d:b3:8e:29:41:3e:15:1b:87: 93:97:78:76:6e:c9:21:62:5f:73:7f:70:7e:9a:d1: 55:16:06:c3:a6:ce:8b:42:f3:e8:0c:b5:05:ff:29: 10:61:34:aa:37:eb:ff:98:8b:e6:ac:06:be:fe:c2: 1f:92:05:4f:ee:75:9f:ea:b1:09:3e:8e:dc:7c:32: eb:41:ab:58:6b:7e:84:75:c1:13:da:6c:f4:ff:97: 03:a0:1d:c1:c2:f7:4d:57:70:aa:6b:95:b8:73:33: 2e:72:91:73:43:e0:0e:b8:fa:7d:9d:ac:69:ee:8c: ea:f6:30:cb:cf:50:78:2a:6c:65:0f:fd:fe:59:03: cb:a7:11:70:ec:9f:a2:d3:0a:8d:4a:f5:10:b9:41: 23:da:ca:2b:b4:5d:02:07:99:16:19:90:05:1a:f1: ba:93:b9:62:49:96:a3:69:08:6b:fd:c9:24:69:8d: 7b:4d:42:37:9b:ea:3d:e7:80:20:a1:65:dd:a0:b8: 6c:97:89:6e:04:71:02:b4:22:c0:0e:c0:4e:c9:dc: b5:21:60:11:b4:df:24:d8:55:0a:2b:f0:b4:1f:70: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:22:C3:2F:80:F3:30:6B:D4:04:BE:B9:D6:CD:BA:A3:FC:36:75 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d3:ad:03:7d:97:ce:50:a2:35:e8:50:e4:d9:21:19:52:9c: c7:46:cf:c2:f3:50:85:66:c4:0b:c1:c9:bb:81:08:2f:88:bd: 54:c6:fa:23:1b:5f:fe:f8:61:61:8a:a5:40:c2:42:81:a8:8a: 97:4f:eb:07:58:c6:40:a0:0a:dc:19:7a:89:ab:24:e1:fa:28: 86:9a:c7:ee:95:0e:72:17:f9:cc:47:d6:66:6d:a1:1d:21:55: a5:24:71:91:c3:ae:1d:39:55:32:fe:d4:5b:53:f8:12:ab:f7: 98:6b:1d:11:8c:8d:fc:94:3e:25:d6:1b:93:1e:fe:a7:6a:e7: c5:18:f3:2b:c8:1c:4f:4c:39:63:1a:0c:c2:ce:c5:bc:b0:64: ab:a4:bd:cd:16:34:3d:d6:31:93:56:7a:cf:9d:f6:31:7a:ff: 37:2a:97:68:72:af:64:dd:2c:ff:cc:1a:03:71:62:93:40:7c: 26:b1:c4:89:30:cc:14:49:a1:ed:78:dc:72:13:65:e1:b8:1b: ad:14:c6:72:61:4c:e8:91:0d:d8:fd:57:bc:bd:5d:47:80:ec: e1:26:60:e2:a8:f1:58:bd:a7:99:c6:66:83:89:9f:b4:c3:2e: 50:63:85:a4:22:29:43:97:e3:c1:5d:40:00:50:96:8a:34:41: dc:17:17:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwODIzMDUwMDI4WhcNMjUwODMwMDUwMDI4WjAYMRYwFAYD VQQDEw02OGE5NGFlYy04ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IVD0FwFLQQeOlQ10BU+wPtpfPZ+CeIcW9hc03Yu/BT/j6Bds44pQT4VG4eT l3h2bskhYl9zf3B+mtFVFgbDps6LQvPoDLUF/ykQYTSqN+v/mIvmrAa+/sIfkgVP 7nWf6rEJPo7cfDLrQatYa36EdcET2mz0/5cDoB3BwvdNV3Cqa5W4czMucpFzQ+AO uPp9naxp7ozq9jDLz1B4KmxlD/3+WQPLpxFw7J+i0wqNSvUQuUEj2sortF0CB5kW GZAFGvG6k7liSZajaQhr/ckkaY17TUI3m+o954AgoWXdoLhsl4luBHECtCLADsBO ydy1IWARtN8k2FUKK/C0H3Ct2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRKIsMv gPMwa9QEvrnWzbqj/DZ1MB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV060DfZfOUKI16FDk2SEZUpzHRs/C81CFZsQLwcm7gQgviL1Uxvoj G1/++GFhiqVAwkKBqIqXT+sHWMZAoArcGXqJqyTh+iiGmsfulQ5yF/nMR9ZmbaEd IVWlJHGRw64dOVUy/tRbU/gSq/eYax0RjI38lD4l1huTHv6naufFGPMryBxPTDlj GgzCzsW8sGSrpL3NFjQ91jGTVnrPnfYxev83Kpdocq9k3Sz/zBoDcWKTQHwmscSJ MMwUSaHteNxyE2XhuButFMZyYUzokQ3Y/Ve8vV1HgOzhJmDiqPFYvaeZxmaDiZ+0 wy5QY4WkIilDl+PBXUAAUJaKNEHcFxf/ -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:27 2025 by rpki-client