$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: C/EXV3nTV1QCwSUgqize5A5IFikAlqV3zCZZiWIXqXE= Subject key identifier: AC:22:1F:78:1E:17:59:ED:60:0E:A5:77:90:36:15:FC:71:40:E3:9A Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 05E4 Signing time: Fri 22 Aug 2025 23:11:14 +0000 Manifest this update: Fri 22 Aug 2025 23:11:14 +0000 Manifest next update: Fri 29 Aug 2025 23:11:14 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: k6EkI9PT6b7O1DJWjwbC3QeDlbjPmCajbS/9BgcFQUM=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: +2Hbaxr801NyDnPE1ldFyqXo4OeCNMmMLf3UKaT2zEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Aug 22 23:11:14 2025 GMT Not After : Aug 29 23:11:14 2025 GMT Subject: CN=68a8f912-9a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:a8:d5:8d:63:3c:cc:3b:f2:40:4c:b8:d8: cb:79:8e:2e:d1:73:a2:d9:a0:38:40:4f:f9:f7:42: 36:fe:3b:5f:1a:20:dd:bf:66:74:36:f8:66:39:17: f0:07:3d:84:7d:ea:26:3d:f8:1b:3d:8f:c2:8e:42: a5:7e:86:f9:88:6c:a7:8a:17:eb:29:6e:df:5f:fe: 21:f8:0c:bb:b4:c3:53:e4:d0:1d:56:c1:54:a5:f2: 2a:f3:3f:ca:f9:19:74:8d:26:e7:6b:cd:3c:c9:58: 1c:dd:75:c4:7f:bf:54:5f:5f:9f:63:3a:ab:f5:b4: 20:dd:b3:9e:ac:79:ee:29:f4:b0:72:a1:9e:d2:06: 03:00:e0:50:3c:d4:02:3a:0b:c8:ef:cb:91:17:d8: 5b:a6:cc:b2:3f:1a:3e:ce:06:48:de:f1:3c:27:fe: 9c:23:e1:bf:06:a7:4f:d3:a2:bd:52:5a:f8:82:03: d7:87:35:05:23:02:b0:60:e4:35:34:96:c4:98:06: a2:0d:7a:25:c4:49:be:1e:2e:3a:27:db:37:b9:a2: e9:f8:65:51:0d:78:10:43:b4:ac:8b:39:51:73:24: df:0e:36:92:d7:a1:b9:29:b2:18:83:b5:bb:6d:b8: c8:29:35:63:39:7b:85:5d:eb:b5:0e:e7:2e:73:d8: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:22:1F:78:1E:17:59:ED:60:0E:A5:77:90:36:15:FC:71:40:E3:9A X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:f8:cd:e9:7c:6e:15:fc:1f:0e:ce:b4:84:47:c0:2e:47:3f: 95:63:aa:09:87:31:c2:03:4f:15:fe:81:2d:cf:7b:56:d2:8b: 79:05:96:ec:44:be:cb:ba:f9:2f:0e:bf:be:05:ea:55:db:97: ee:16:c8:08:dc:4f:31:36:ad:51:b1:51:18:73:cd:a7:87:b3: ca:b9:07:27:f4:c4:4c:84:05:a7:4d:75:ac:b8:22:b7:a2:ef: b7:e7:35:19:cb:19:ad:2a:88:90:85:19:5a:5f:14:d3:ae:08: 31:74:8a:65:77:0d:8d:17:8f:f1:3d:80:c3:77:bd:d4:dd:79: 9e:02:de:20:f8:60:ab:53:60:56:d3:c8:03:86:d7:77:4c:1c: 13:e2:2a:28:15:de:50:65:b0:b0:18:3e:b8:b2:5a:8f:9c:f7: f4:e6:de:26:ae:ae:75:35:74:98:c6:67:ee:9c:23:7d:8e:42: e0:39:af:36:9b:12:25:6c:a2:11:0a:19:4c:10:38:95:13:28: e3:84:e2:dc:64:87:33:e9:a0:ac:db:93:c9:68:fd:85:e2:14: 41:71:e9:6a:7b:35:dc:67:07:7b:0e:7b:24:2e:a6:43:df:ba: cc:3e:72:12:30:0a:79:75:06:f9:f5:9e:72:6c:e9:4e:21:46: 0f:96:94:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUwODIyMjMxMTE0WhcNMjUwODI5MjMxMTE0WjAYMRYwFAYD VQQDEw02OGE4ZjkxMi05YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YOo1Y1jPMw78kBMuNjLeY4u0XOi2aA4QE/590I2/jtfGiDdv2Z0NvhmORfw Bz2EfeomPfgbPY/CjkKlfob5iGynihfrKW7fX/4h+Ay7tMNT5NAdVsFUpfIq8z/K +Rl0jSbna808yVgc3XXEf79UX1+fYzqr9bQg3bOerHnuKfSwcqGe0gYDAOBQPNQC OgvI78uRF9hbpsyyPxo+zgZI3vE8J/6cI+G/BqdP06K9Ulr4ggPXhzUFIwKwYOQ1 NJbEmAaiDXolxEm+Hi46J9s3uaLp+GVRDXgQQ7SsizlRcyTfDjaS16G5KbIYg7W7 bbjIKTVjOXuFXeu1Ducuc9gCsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwiH3ge F1ntYA6ld5A2FfxxQOOaMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG+M3pfG4V/B8OzrSER8AuRz+VY6oJhzHCA08V/oEtz3tW0ot5BZbs RL7LuvkvDr++BepV25fuFsgI3E8xNq1RsVEYc82nh7PKuQcn9MRMhAWnTXWsuCK3 ou+35zUZyxmtKoiQhRlaXxTTrggxdIpldw2NF4/xPYDDd73U3XmeAt4g+GCrU2BW 08gDhtd3TBwT4iooFd5QZbCwGD64slqPnPf05t4mrq51NXSYxmfunCN9jkLgOa82 mxIlbKIRChlMEDiVEyjjhOLcZIcz6aCs25PJaP2F4hRBcelqezXcZwd7DnskLqZD 37rMPnISMAp5dQb59Z5ybOlOIUYPlpSz -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:30 2025 by rpki-client