$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: WoEv8uaYPJ0wRehNWWggGso0HfVTna/F5gKxHnQcD0c= Subject key identifier: AF:1C:DA:39:61:D0:6B:C9:30:1A:32:C5:5D:07:3E:6F:FD:F4:E8:65 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 34B4 Signing time: Fri 22 Aug 2025 15:03:22 +0000 Manifest this update: Fri 22 Aug 2025 15:03:22 +0000 Manifest next update: Fri 29 Aug 2025 15:03:22 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: zb7aG43ABI09afrZR09kW2W3VCnrrtbFRjsl0/FI/TI=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Ijy1uWFshu2uXbMSDNdrdIor4pwld2OcIkcbdYGoQws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Aug 22 15:03:22 2025 GMT Not After : Aug 29 15:03:22 2025 GMT Subject: CN=68a886ba-2388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:4c:5f:94:14:b8:09:42:8b:36:e6:d8:4f: a1:fe:16:1e:f8:93:d2:bd:b8:4d:8e:af:8e:1a:99: ce:64:45:c0:63:1b:1b:4e:e0:69:c4:f2:71:68:30: cc:ea:55:48:fe:45:98:80:e1:4d:0f:bd:10:14:ed: 74:48:8d:32:ff:0d:12:ea:bc:a5:60:f2:5d:72:b7: da:27:9b:07:d1:75:0b:06:50:c9:c7:e6:9d:49:16: 89:1a:82:b2:4e:54:07:4c:15:54:52:d8:a1:4f:a8: de:54:38:d4:87:18:d1:c2:13:8e:78:dd:61:af:b7: 5a:04:49:f5:4d:17:44:bf:f2:21:2e:6d:3f:49:f7: b3:c2:93:8d:7c:ab:ef:84:51:87:94:04:18:14:f6: ec:4a:35:13:02:40:9b:c4:e7:ff:25:ca:0f:e3:93: 8e:69:48:17:39:7e:f1:67:ed:61:a4:20:15:1a:aa: 5e:6a:5c:f3:e6:d1:f2:2b:e2:b5:b3:ff:f7:e8:e0: ac:66:f0:ee:4f:84:17:da:8e:da:3b:ec:9e:83:35: ea:1d:58:e8:dc:0a:81:a6:08:8c:2f:2b:b8:5d:ac: b5:e9:b1:c3:94:5e:dc:2c:d9:ad:88:32:d5:c3:5c: 34:0d:cf:d5:e9:0b:c4:74:16:58:55:50:5d:1d:d1: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:DA:39:61:D0:6B:C9:30:1A:32:C5:5D:07:3E:6F:FD:F4:E8:65 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:73:17:09:b1:bc:53:c1:a9:2c:38:8a:04:7f:0a:41:79: 86:5d:8b:c3:c7:8c:e3:17:b6:f0:ab:e0:02:2d:f4:86:ee:70: e8:0c:3c:13:20:9e:64:99:cf:b5:66:45:25:9a:f5:ac:ec:6d: e6:d9:dd:8b:ea:7b:bc:d1:13:ce:b3:74:17:e9:76:ec:09:47: 48:0a:6d:7e:ca:3c:57:9e:fe:f5:aa:8a:37:64:67:1f:9d:e2: 2d:72:5f:cc:95:6a:08:bd:03:d3:c3:18:29:c3:e8:b5:7b:4a: d2:68:d1:f5:9a:9c:2e:6b:30:c1:38:e3:27:55:d7:98:65:a3: 42:75:53:94:7b:76:41:a5:12:cd:03:44:6a:32:a4:5a:29:b9: c9:d1:7f:9b:fa:2d:10:a2:1b:32:62:10:6d:33:92:8f:e1:54: c9:ec:02:08:b8:88:e4:e7:35:62:df:7b:69:60:33:13:69:f1: 55:9c:6c:a2:85:b6:46:65:67:9f:e5:47:4e:73:1d:86:86:b9: da:95:c4:29:02:50:c4:1a:91:8f:4f:26:a9:51:47:87:47:46: ff:01:bb:e9:94:7b:28:06:dd:04:49:17:4c:60:2c:83:ff:e3: ba:b0:44:93:c9:fb:31:eb:c3:03:4c:c5:f6:81:21:9f:3d:b3: 37:66:7c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjUwODIyMTUwMzIyWhcNMjUwODI5MTUwMzIyWjAYMRYwFAYD VQQDEw02OGE4ODZiYS0yMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmFMX5QUuAlCizbm2E+h/hYe+JPSvbhNjq+OGpnOZEXAYxsbTuBpxPJxaDDM 6lVI/kWYgOFND70QFO10SI0y/w0S6rylYPJdcrfaJ5sH0XULBlDJx+adSRaJGoKy TlQHTBVUUtihT6jeVDjUhxjRwhOOeN1hr7daBEn1TRdEv/IhLm0/SfezwpONfKvv hFGHlAQYFPbsSjUTAkCbxOf/JcoP45OOaUgXOX7xZ+1hpCAVGqpealzz5tHyK+K1 s//36OCsZvDuT4QX2o7aO+yegzXqHVjo3AqBpgiMLyu4Xay16bHDlF7cLNmtiDLV w1w0Dc/V6QvEdBZYVVBdHdEdqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8c2jlh 0GvJMBoyxV0HPm/99OhlMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwaHMXCbG8U8GpLDiKBH8KQXmGXYvDx4zjF7bwq+ACLfSG7nDoDDwT IJ5kmc+1ZkUlmvWs7G3m2d2L6nu80RPOs3QX6XbsCUdICm1+yjxXnv71qoo3ZGcf neItcl/MlWoIvQPTwxgpw+i1e0rSaNH1mpwuazDBOOMnVdeYZaNCdVOUe3ZBpRLN A0RqMqRaKbnJ0X+b+i0QohsyYhBtM5KP4VTJ7AIIuIjk5zVi33tpYDMTafFVnGyi hbZGZWef5UdOcx2GhrnalcQpAlDEGpGPTyapUUeHR0b/AbvplHsoBt0ESRdMYCyD /+O6sESTyfsx68MDTMX2gSGfPbM3Znwl -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:29 2025 by rpki-client