$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: 0Pemkuy2sZ6geQ7ZNEPBVlIAaiMgxQRt/UCXR5uF2rA= Subject key identifier: CF:94:14:5A:DB:BF:1A:6B:D8:15:7B:3D:81:0A:B6:8B:9A:2E:E7:5E Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 43 Signing time: Fri 05 Sep 2025 08:02:10 +0000 Manifest this update: Fri 05 Sep 2025 08:02:09 +0000 Manifest next update: Fri 12 Sep 2025 08:02:09 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: zZwtcILcb01CCDJi0iUddM/R73klO6enyc3o4nIE/l4=) 2: FAB0D026881F11F0AAA2086FC4F9AE02.roa (hash: ZcNZGkU7ACJjTYenVO1IPbIGj6zq/AdOkuvu0KCA0Cs=) 3: 5C4CE81A882011F0A62B0270C4F9AE02.roa (hash: XXrkNwAh0JK6WpSska5pjlmvGDP0pGCgaWmc20HyJ5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Sep 5 08:02:09 2025 GMT Not After : Sep 12 08:02:09 2025 GMT Subject: CN=68ba9902-aa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:99:80:82:81:62:b3:fb:86:f0:e3:99:bd: 1e:e7:0f:2d:61:6a:18:80:3c:6a:45:18:06:2d:92: b9:18:d9:94:26:05:6d:26:23:d4:ea:b4:81:0f:70: a7:d8:39:38:04:c0:d1:45:19:36:c7:97:95:b7:f0: ab:6d:be:0e:27:66:5f:f1:8b:dd:0b:d9:dc:64:29: ee:0f:71:2d:49:10:c5:24:2c:4d:5c:09:c0:56:00: 43:4d:ff:81:13:fb:3e:e1:ac:01:53:1b:65:6e:1a: ff:f3:02:29:5f:72:0b:68:a5:4d:91:a8:03:a5:9c: e3:74:a6:61:b3:93:4f:20:b7:29:04:d0:d1:64:2e: e4:0c:84:66:2a:6b:42:fa:34:ff:ec:27:ae:3d:1b: e3:b7:72:88:fc:6b:fb:f0:66:c2:43:3b:31:fb:96: 26:5f:2b:88:26:12:59:2d:6b:ef:72:57:5b:c8:90: 07:43:e4:1a:47:7d:68:c3:90:e6:7e:72:bd:6d:e1: d9:f4:95:98:e9:7b:53:f0:87:b7:59:10:c0:62:15: 5a:00:e7:78:6d:f0:e2:4f:16:b3:59:b3:de:30:68: 54:73:dd:6c:a3:eb:0d:95:9f:81:05:ce:99:2a:86: 4d:69:3b:da:c5:c2:66:dd:7f:af:17:23:d6:ce:9e: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:14:5A:DB:BF:1A:6B:D8:15:7B:3D:81:0A:B6:8B:9A:2E:E7:5E X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7b:9e:85:3d:ae:ab:80:01:f4:5e:c9:f6:a4:d3:6a:ca:ff: e2:64:2a:80:fa:2b:06:86:7c:c7:2c:60:e2:02:6f:63:65:b9: 82:79:b5:68:c3:0b:4f:55:af:37:dc:63:47:f3:b4:db:6b:05: fb:b7:83:33:96:02:9b:68:79:27:3a:90:e0:06:3b:0b:b5:6f: 9e:10:07:71:55:30:a2:a5:76:af:38:50:b3:9c:9c:ea:45:77: 61:bb:ad:a0:be:2a:9a:b0:de:30:32:61:82:47:38:e2:e0:9f: d1:a7:17:f4:c8:5a:44:c4:51:8a:8c:24:0b:e2:e6:0d:8a:f7: f0:92:6c:e0:06:d0:3b:d3:52:92:78:20:12:44:6a:9e:81:65: c5:c3:e7:9a:8d:ce:84:f2:d9:9a:2c:a7:49:3c:c6:f4:cc:45: 81:52:38:81:12:74:48:0b:44:a7:f0:b7:13:85:8e:80:da:af: c4:53:87:c1:da:ed:52:1f:13:76:01:c2:e2:85:9e:b7:fe:1b: 4e:f0:30:15:aa:76:8a:7e:3c:0b:13:1b:f0:01:2b:23:fe:d0: 90:03:72:d4:18:49:26:7b:a9:f1:9c:2e:f6:6d:2c:3f:01:52: c6:2a:0d:4a:b3:2c:66:f1:2a:2d:f7:a5:f5:ab:98:ba:5c:bb: 6d:d5:41:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTA5MDUwODAyMDlaFw0yNTA5MTIwODAyMDlaMBgxFjAUBgNV BAMTDTY4YmE5OTAyLWFhODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN25mAgoFis/uG8OOZvR7nDy1hahiAPGpFGAYtkrkY2ZQmBW0mI9TqtIEPcKfY OTgEwNFFGTbHl5W38Kttvg4nZl/xi90L2dxkKe4PcS1JEMUkLE1cCcBWAENN/4ET +z7hrAFTG2VuGv/zAilfcgtopU2RqAOlnON0pmGzk08gtykE0NFkLuQMhGYqa0L6 NP/sJ649G+O3coj8a/vwZsJDOzH7liZfK4gmElkta+9yV1vIkAdD5BpHfWjDkOZ+ cr1t4dn0lZjpe1Pwh7dZEMBiFVoA53ht8OJPFrNZs94waFRz3Wyj6w2Vn4EFzpkq hk1pO9rFwmbdf68XI9bOnmKvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz5QUWtu/ GmvYFXs9gQq2i5ou514wHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB17noU9rquAAfReyfak02rK/+JkKoD6KwaGfMcsYOICb2NluYJ5tWjD C09VrzfcY0fztNtrBfu3gzOWAptoeSc6kOAGOwu1b54QB3FVMKKldq84ULOcnOpF d2G7raC+Kpqw3jAyYYJHOOLgn9GnF/TIWkTEUYqMJAvi5g2K9/CSbOAG0DvTUpJ4 IBJEap6BZcXD55qNzoTy2Zosp0k8xvTMRYFSOIESdEgLRKfwtxOFjoDar8RTh8Ha 7VIfE3YBwuKFnrf+G07wMBWqdop+PAsTG/ABKyP+0JADctQYSSZ7qfGcLvZtLD8B UsYqDUqzLGbxKi33pfWrmLpcu23VQfw= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:08 2025 by rpki-client