$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: sAlAVgiPJ0WhYhUce6oKqxxhuMm5reiErtDbaMqlue0= Subject key identifier: EC:3F:F0:4E:6E:53:DA:D9:6C:5C:9D:00:D0:D5:10:EC:EF:8C:1C:C5 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0323 Signing time: Sun 27 Jul 2025 01:33:35 +0000 Manifest this update: Sun 27 Jul 2025 01:33:34 +0000 Manifest next update: Sun 03 Aug 2025 01:33:34 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: n2vMtEBOA/XvvpzkBNujI/HWXRgabyM1qu74vrshTQ4=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: CTJ+dnaaAcT/k3VfAVX0B8BkiSPr7rVzlHNkELgf6Zk=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: DPh2JuIpWeswDhsc+dcbZ8/Yz61UyYfkk6HBp13h6rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 01:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Jul 27 01:33:34 2025 GMT Not After : Aug 3 01:33:34 2025 GMT Subject: CN=688581ef-6258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:70:1f:b2:e8:b3:d1:60:12:e1:77:b9:f7:fa: b0:80:0d:ec:e7:b5:2f:65:23:cc:72:87:d4:bb:37: f9:ea:b5:48:29:17:fc:90:2a:22:36:38:22:52:a2: 25:67:18:72:8e:2d:a3:db:a9:11:6b:39:3d:61:2c: be:ec:7c:bb:5e:b8:a8:b4:6a:23:9c:43:e3:7e:e9: 3e:e2:d5:67:36:45:e5:b7:eb:5e:de:92:ca:47:fe: ba:55:b5:aa:cc:c9:a4:56:20:51:b5:c9:f0:95:75: 74:88:a1:12:01:f4:6a:15:07:ce:df:d1:a8:9d:81: 66:cc:9d:3e:3e:ef:06:18:99:4b:88:c3:7a:7d:e5: 93:39:fb:54:88:c9:0e:30:a1:02:84:c5:ef:6a:f1: c5:76:32:8a:62:ac:a8:79:ff:fa:d7:00:6a:64:52: 0e:0c:0c:93:22:97:d2:39:d2:79:c4:e4:1f:3b:1c: 9c:f6:58:c5:a7:f3:a9:cc:3e:4f:c9:24:c1:6d:25: 75:60:50:a4:74:bc:34:ef:8f:80:41:8d:bf:b1:54: 4f:31:04:07:89:d6:47:f4:02:0c:ca:cc:0b:90:de: 4a:68:c5:1b:51:4f:c8:b1:39:8d:90:df:52:53:ac: d6:9d:c9:c8:72:f8:83:9e:29:c7:06:8b:04:15:12: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:F0:4E:6E:53:DA:D9:6C:5C:9D:00:D0:D5:10:EC:EF:8C:1C:C5 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5a:15:0d:73:e6:9d:24:b3:f5:5d:8f:b2:29:9b:2b:8c:3e: 40:fd:12:aa:7e:00:c0:6f:b1:ae:de:b8:71:a0:ef:2a:14:79: fe:f4:37:ba:a9:29:b7:b2:db:93:ae:74:3d:f3:87:43:d1:16: 6d:8b:1c:da:84:79:cc:2c:0f:57:aa:c9:60:a7:19:67:99:6f: b0:8b:58:f7:ff:ef:7a:5f:05:8c:6c:f4:4d:68:a8:10:ed:1a: e8:40:3a:09:8e:a3:7d:0c:78:4d:7d:d0:1c:81:5b:bc:27:59: 57:91:3d:b7:9e:3c:b9:55:af:08:f2:30:1d:37:a9:7a:ff:ea: 03:5a:10:da:90:dd:92:49:2d:10:9a:b6:96:0b:61:d1:92:88: 58:f1:ba:44:4b:ca:91:a1:fe:7d:6e:70:78:40:20:0e:94:e5: 40:8b:7e:ca:a6:62:c2:e8:a0:d0:b3:fc:00:6d:ba:b4:bd:96: ba:b5:8d:cd:ac:b2:7c:ab:7c:5c:a0:5c:ca:6a:f2:6f:a5:bf: 57:e2:19:b7:36:d2:79:0a:7e:8c:97:96:aa:a4:c8:9a:4b:d6: 50:06:ea:22:b1:57:8e:ff:78:e6:33:a7:f0:4d:be:0e:01:94: 51:0c:cc:f2:7d:60:b8:50:5e:8b:6a:36:33:29:08:98:2d:29: 84:e9:d6:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUwNzI3MDEzMzM0WhcNMjUwODAzMDEzMzM0WjAYMRYwFAYD VQQDEw02ODg1ODFlZi02MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XAfsuiz0WAS4Xe59/qwgA3s57UvZSPMcofUuzf56rVIKRf8kCoiNjgiUqIl Zxhyji2j26kRazk9YSy+7Hy7XriotGojnEPjfuk+4tVnNkXlt+te3pLKR/66VbWq zMmkViBRtcnwlXV0iKESAfRqFQfO39GonYFmzJ0+Pu8GGJlLiMN6feWTOftUiMkO MKEChMXvavHFdjKKYqyoef/61wBqZFIODAyTIpfSOdJ5xOQfOxyc9ljFp/OpzD5P ySTBbSV1YFCkdLw074+AQY2/sVRPMQQHidZH9AIMyswLkN5KaMUbUU/IsTmNkN9S U6zWncnIcviDninHBosEFRJOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw/8E5u U9rZbFydANDVEOzvjBzFMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrWhUNc+adJLP1XY+yKZsrjD5A/RKqfgDAb7Gu3rhxoO8qFHn+9De6 qSm3stuTrnQ984dD0RZtixzahHnMLA9XqslgpxlnmW+wi1j3/+96XwWMbPRNaKgQ 7RroQDoJjqN9DHhNfdAcgVu8J1lXkT23njy5Va8I8jAdN6l6/+oDWhDakN2SSS0Q mraWC2HRkohY8bpES8qRof59bnB4QCAOlOVAi37KpmLC6KDQs/wAbbq0vZa6tY3N rLJ8q3xcoFzKavJvpb9X4hm3NtJ5Cn6Ml5aqpMiaS9ZQBuoisVeO/3jmM6fwTb4O AZRRDMzyfWC4UF6LajYzKQiYLSmE6dYB -----END CERTIFICATE-----Generated at Sun Jul 27 13:09:01 2025 by rpki-client