$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: oL2ORtVSvLMXJrePZqxgUJ48CQG1CuKc2lcds8YLnpg= Subject key identifier: F4:14:A1:AE:3F:4B:76:DB:4C:A6:21:C7:C1:C7:8F:37:B0:41:7B:78 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 0393 Signing time: Sat 19 Jul 2025 01:15:19 +0000 Manifest this update: Sat 19 Jul 2025 01:15:18 +0000 Manifest next update: Sat 26 Jul 2025 01:15:18 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: VsVoJjNERLZgSkRIOFgKHSqK0IbB47zfNyDUA3hoNww=) 2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Jul 19 01:15:18 2025 GMT Not After : Jul 26 01:15:18 2025 GMT Subject: CN=687af1a7-56b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:5c:ee:c3:4b:4a:6d:23:ed:6a:26:08:60: 0b:05:64:4a:d2:ff:23:eb:c5:b7:81:59:11:dd:71: d1:4d:df:7e:3c:87:03:51:45:00:b0:5c:e2:e1:d1: 62:ad:5c:e8:49:53:f4:23:a7:d2:ca:9b:0d:70:be: d2:da:ac:d1:e1:f0:15:f0:64:2e:80:6e:0b:62:57: 00:2a:36:de:82:27:a8:9d:c1:4e:19:32:30:9f:06: ff:b2:e3:07:7c:fc:6c:ea:56:92:58:ce:e7:85:63: 52:1c:c5:82:c2:27:4e:b9:d7:dc:41:48:5d:1f:b7: dc:9d:89:db:12:ad:ba:67:81:56:79:c3:59:e6:aa: 50:b5:e0:18:c8:88:95:08:28:e9:82:28:22:a5:74: e0:57:77:86:4b:98:27:2b:1a:86:19:e0:ff:45:d4: 1d:f8:a3:13:f7:2a:92:cf:03:f4:be:b5:6f:a0:ef: 67:ea:90:93:44:6f:49:46:29:00:af:c9:5d:4e:28: bf:f1:fd:fd:9e:13:48:60:0d:61:8c:3c:6e:7b:28: b6:58:a6:ca:0d:ce:71:d0:9f:b4:32:3a:4c:cb:dd: 3d:e8:fa:f1:38:c5:f2:39:57:bb:ad:fc:0b:84:39: 19:b8:9b:d2:16:ea:bc:30:a4:27:10:2f:44:4c:c8: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:A1:AE:3F:4B:76:DB:4C:A6:21:C7:C1:C7:8F:37:B0:41:7B:78 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9a:f0:32:a7:da:95:e9:ef:43:21:42:21:fd:84:26:8d:02: 10:73:2e:60:77:64:7d:12:c2:8c:78:e5:0a:58:ce:4e:80:ab: dc:dc:65:61:18:d1:60:1e:34:96:ec:06:9b:77:ca:6e:93:0e: a5:92:be:f6:26:a3:84:df:75:3f:dc:35:9b:73:95:2b:99:21: f2:78:7b:e8:6f:07:c1:0b:69:47:54:13:44:cb:eb:a5:91:53: c8:37:f2:da:ba:99:38:6e:10:89:f1:94:fe:4a:42:ba:11:db: e9:cf:58:92:4f:18:2f:88:05:8d:5f:8c:aa:1d:81:5c:eb:fa: 9f:7f:e5:36:73:e5:49:08:d1:ef:97:10:ac:98:99:69:aa:d2: b9:6f:93:ce:6e:52:70:0d:b8:c5:ac:a1:39:5b:cc:18:f4:25: 07:23:ff:ac:86:f8:62:1a:ce:ac:b6:e8:17:1e:0b:bc:bc:65: 75:bf:ba:72:12:96:7c:8c:7c:2a:fd:c6:df:73:21:7b:14:15: 70:82:9d:ea:2e:ae:86:45:7d:de:25:b5:17:a4:3c:9f:03:30: 11:e1:cc:21:05:d2:94:8e:ce:04:f5:7c:65:89:0d:af:37:fa: 8b:f1:29:24:3c:c8:cc:a7:6a:e3:cf:bb:70:c0:eb:9d:83:27: 86:ab:8d:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUwNzE5MDExNTE4WhcNMjUwNzI2MDExNTE4WjAYMRYwFAYD VQQDEw02ODdhZjFhNy01NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqptc7sNLSm0j7WomCGALBWRK0v8j68W3gVkR3XHRTd9+PIcDUUUAsFzi4dFi rVzoSVP0I6fSypsNcL7S2qzR4fAV8GQugG4LYlcAKjbegieoncFOGTIwnwb/suMH fPxs6laSWM7nhWNSHMWCwidOudfcQUhdH7fcnYnbEq26Z4FWecNZ5qpQteAYyIiV CCjpgigipXTgV3eGS5gnKxqGGeD/RdQd+KMT9yqSzwP0vrVvoO9n6pCTRG9JRikA r8ldTii/8f39nhNIYA1hjDxueyi2WKbKDc5x0J+0MjpMy9096PrxOMXyOVe7rfwL hDkZuJvSFuq8MKQnEC9ETMibVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQUoa4/ S3bbTKYhx8HHjzewQXt4MB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWmvAyp9qV6e9DIUIh/YQmjQIQcy5gd2R9EsKMeOUKWM5OgKvc3GVh GNFgHjSW7Aabd8pukw6lkr72JqOE33U/3DWbc5UrmSHyeHvobwfBC2lHVBNEy+ul kVPIN/Laupk4bhCJ8ZT+SkK6Edvpz1iSTxgviAWNX4yqHYFc6/qff+U2c+VJCNHv lxCsmJlpqtK5b5POblJwDbjFrKE5W8wY9CUHI/+shvhiGs6stugXHgu8vGV1v7py EpZ8jHwq/cbfcyF7FBVwgp3qLq6GRX3eJbUXpDyfAzAR4cwhBdKUjs4E9XxliQ2v N/qL8SkkPMjMp2rjz7twwOudgyeGq43W -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:27 2025 by rpki-client