$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: 4I1wmLYYil2q1iNpSmTTW4/CtDtNGMQRlJdV6f+bUgs= Subject key identifier: 4A:A4:48:4C:AA:4E:2D:49:B9:C6:98:03:EC:F8:49:DE:00:02:71:CE Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: F8 Signing time: Mon 21 Jul 2025 05:22:52 +0000 Manifest this update: Mon 21 Jul 2025 05:22:51 +0000 Manifest next update: Mon 28 Jul 2025 05:22:51 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: PCsP09f/4l4maqL1WxRWAZh9qO1dyskCCSyanyIQBjA=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Jul 21 05:22:51 2025 GMT Not After : Jul 28 05:22:51 2025 GMT Subject: CN=687dceac-4a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:4f:55:f2:ab:f1:5d:d4:d2:26:95:2b:67: 4c:55:9d:ad:b5:41:44:0c:90:9f:e3:e2:e8:7d:1a: 65:b0:86:5e:21:f0:4c:72:65:d8:01:46:d7:43:ca: bb:53:6d:5c:49:5b:c5:5c:32:82:c2:b8:1f:01:d7: 46:11:3c:96:c5:e4:a8:76:61:37:26:77:12:01:a7: e7:c5:21:17:f5:63:cc:b1:6c:63:bd:3d:06:c4:6a: 69:fb:68:16:0f:eb:7f:38:4e:7e:0c:7d:40:d2:17: 83:aa:9c:42:81:4d:d8:00:e7:a1:12:65:f1:af:d9: 11:ff:f3:4b:de:38:7a:07:93:d8:29:77:d6:24:64: a0:c1:0a:1d:de:4f:4a:aa:44:bf:cc:6c:16:2b:f5: 58:05:33:0a:33:a8:72:ab:a8:76:6d:3b:13:f9:04: e7:a7:75:5b:1e:86:d8:d1:fa:ea:aa:ca:f4:de:f5: 3f:c3:00:35:2c:55:21:dc:84:2a:7e:dd:19:9c:4d: 30:c9:0f:67:e2:38:e6:9f:eb:81:c7:98:93:d1:44: 51:1e:17:d4:0a:aa:8d:c3:59:9c:e0:bc:30:3a:99: 8a:9d:44:fb:76:08:ad:5d:67:f3:1a:af:6e:be:7c: f2:c7:e5:79:e5:aa:e9:ed:06:da:ae:99:24:9f:33: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A4:48:4C:AA:4E:2D:49:B9:C6:98:03:EC:F8:49:DE:00:02:71:CE X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:05:e0:2f:80:82:ec:9e:90:24:6a:dd:2e:94:33:be:9f:e5: bc:8c:33:91:e9:4b:aa:e6:12:1b:7f:3d:5f:fd:04:39:94:9d: 63:7c:f3:68:2a:0d:b6:22:c6:90:34:a7:b9:97:9d:a1:49:d2: a1:12:bc:e4:3b:98:1d:9e:ec:90:d3:5f:b6:70:58:a8:86:aa: 34:ef:7b:e4:2d:24:17:7f:50:82:f5:af:8b:f2:ea:3c:ad:24: 8d:72:9e:31:85:be:30:16:4d:30:0b:9e:90:47:a4:ae:7c:05: b8:ec:19:11:e7:a7:2c:4e:32:4b:f9:87:76:dd:d8:06:d5:cc: 79:7f:92:73:e2:62:eb:db:c4:f2:10:ad:8b:cc:16:ea:42:80: fe:e3:00:50:ab:10:26:e2:d2:cd:f6:2a:38:28:31:a0:a8:5b: 1a:63:5c:3b:f6:ba:c1:12:03:2c:a9:c9:76:41:0b:be:7e:c3: 2a:f0:66:34:9b:48:a9:84:2e:77:2e:72:61:5c:93:d1:0e:d2: 38:3d:d7:2a:48:4b:47:a3:51:e6:7d:7d:7d:e1:3d:82:01:e5: 18:64:8d:de:ab:00:f2:8a:7e:4e:4c:10:b4:29:a9:95:df:e1: 46:b8:fb:01:0c:d0:cd:96:57:1a:b8:82:bb:3e:ae:0f:cb:d1: d7:af:ea:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUwNzIxMDUyMjUxWhcNMjUwNzI4MDUyMjUxWjAYMRYwFAYD VQQDEw02ODdkY2VhYy00YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QdPVfKr8V3U0iaVK2dMVZ2ttUFEDJCf4+LofRplsIZeIfBMcmXYAUbXQ8q7 U21cSVvFXDKCwrgfAddGETyWxeSodmE3JncSAafnxSEX9WPMsWxjvT0GxGpp+2gW D+t/OE5+DH1A0heDqpxCgU3YAOehEmXxr9kR//NL3jh6B5PYKXfWJGSgwQod3k9K qkS/zGwWK/VYBTMKM6hyq6h2bTsT+QTnp3VbHobY0frqqsr03vU/wwA1LFUh3IQq ft0ZnE0wyQ9n4jjmn+uBx5iT0URRHhfUCqqNw1mc4LwwOpmKnUT7dgitXWfzGq9u vnzyx+V55arp7QbarpkknzP7QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqkSEyq Ti1JucaYA+z4Sd4AAnHOMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4BeAvgILsnpAkat0ulDO+n+W8jDOR6Uuq5hIbfz1f/QQ5lJ1jfPNo Kg22IsaQNKe5l52hSdKhErzkO5gdnuyQ01+2cFiohqo073vkLSQXf1CC9a+L8uo8 rSSNcp4xhb4wFk0wC56QR6SufAW47BkR56csTjJL+Yd23dgG1cx5f5Jz4mLr28Ty EK2LzBbqQoD+4wBQqxAm4tLN9io4KDGgqFsaY1w79rrBEgMsqcl2QQu+fsMq8GY0 m0iphC53LnJhXJPRDtI4PdcqSEtHo1HmfX194T2CAeUYZI3eqwDyin5OTBC0KamV 3+FGuPsBDNDNllcauIK7Pq4Py9HXr+q9 -----END CERTIFICATE-----Generated at Mon Jul 21 12:42:34 2025 by rpki-client