$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft File: qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json) Hash identifier: z40VjHSAZuMchZKrlft5anLR/7dgEEt9KC2YcwE/1KQ= Subject key identifier: 7A:0E:4B:D5:9B:EB:D8:90:B6:90:7B:65:3E:32:3F:16:9B:21:C5:3D Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B Certificate serial: 2D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft Manifest number: 2CCB Signing time: Thu 18 Sep 2025 15:35:46 +0000 Manifest this update: Thu 18 Sep 2025 15:35:45 +0000 Manifest next update: Thu 25 Sep 2025 15:35:45 +0000 Files and hashes: 1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: 1Qy7mrch4omwy0t9WxpSV/vPnJCJujIE73wYM5Qz3iE=) 2: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (hash: tOQThPidL/4iHhAQBaSLJmN0jtHD7/tt5lQ9T3jUJQg=) 3: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: ulJtZ2Mww36RDb9DCGSsj4fbfbOfNMa0ECif5nIZSNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11523 (0x2d03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B Validity Not Before: Sep 18 15:35:45 2025 GMT Not After : Sep 25 15:35:45 2025 GMT Subject: CN=68cc26d1-0b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:d7:18:71:a7:97:03:83:bf:41:00:ec:72: d9:70:5d:fa:23:08:64:d7:c8:fb:b7:23:bc:73:0c: 96:ef:c2:10:86:d4:68:7c:8a:88:e6:db:cf:8e:f5: a5:1f:5d:fd:40:20:b5:45:d7:aa:96:e3:25:52:82: f4:b2:49:c3:40:38:cb:aa:d1:e1:be:b7:82:81:8a: 19:35:88:43:c8:c3:ad:01:9c:d8:7c:30:b0:c4:ce: ed:6b:b1:91:b0:7c:38:98:af:3f:58:d2:d7:c5:a4: f8:eb:ba:c3:0f:78:af:b0:e6:54:23:86:8e:cf:96: 6e:53:7f:df:df:c9:71:34:67:ed:f6:03:20:5f:cc: fe:a6:b1:b8:00:7e:92:c5:e3:19:89:11:f1:d3:00: 05:55:e3:d4:70:f7:25:3a:12:b4:50:40:91:82:04: dd:4d:72:7c:00:87:39:d4:42:02:02:72:27:a8:e9: bb:91:2c:6a:30:b1:19:97:62:e9:8f:75:5e:21:9a: b1:ac:95:cc:e9:48:ec:12:83:22:ea:65:89:73:55: 3a:df:bd:14:44:32:aa:89:3a:9d:32:a4:b5:21:72: 1c:9b:25:72:17:2f:94:e3:65:ad:0a:b4:f5:54:62: 90:fb:88:e1:36:2f:a0:5a:24:0d:85:5c:5e:c4:cb: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0E:4B:D5:9B:EB:D8:90:B6:90:7B:65:3E:32:3F:16:9B:21:C5:3D X509v3 Authority Key Identifier: keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:d7:7f:49:48:04:fe:5b:2a:5b:52:05:62:6c:73:83:30: 90:1e:f0:ee:02:d0:22:59:6e:9c:b8:0d:a3:63:f3:78:16:52: 25:ba:cc:1f:18:3c:d7:01:b0:4b:51:58:46:a8:5d:c7:79:09: fb:3d:ce:ba:fc:36:19:d8:19:53:94:21:da:fb:d7:0c:d3:93: e4:0a:ad:05:46:63:b1:ab:e7:05:36:45:13:6d:ce:d1:a0:2a: 97:a7:42:57:d9:92:de:76:db:90:32:13:c0:56:5f:37:34:eb: bb:86:8d:5f:96:4e:66:7b:71:fd:a3:ff:91:e1:51:ef:17:9d: 30:56:48:d0:a1:d2:e1:33:9c:54:4f:2a:5f:f4:75:c6:06:c3: da:e4:94:b3:dc:91:d8:7b:2e:f2:7c:c4:fe:a8:b8:9b:ab:63: 92:cb:33:88:86:0e:8b:3c:14:30:2d:e0:94:c2:4a:1c:3c:5c: 21:1d:d7:58:b1:bb:42:13:9b:e5:be:fc:f3:36:29:6b:82:a7: 28:e6:76:04:61:d3:56:b8:d6:8d:f7:5c:cd:d1:bc:2e:0b:90: e8:d8:48:d6:38:ce:af:ae:d1:33:b0:0e:b9:a8:34:bf:aa:cc: fc:6d:80:d0:9e:fa:f5:92:69:52:bc:3d:ff:d0:dc:c9:75:67: 9b:a9:a0:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIxNkQxMTAvBgNVBAUTKEFBRkZCQUYyNjVBQUNBNEM5NTE3QUZFQjdGNTRGQ0NC MEZCMURDMUIwHhcNMjUwOTE4MTUzNTQ1WhcNMjUwOTI1MTUzNTQ1WjAYMRYwFAYD VQQDEw02OGNjMjZkMS0wYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl7XGHGnlwODv0EA7HLZcF36Iwhk18j7tyO8cwyW78IQhtRofIqI5tvPjvWl H139QCC1RdeqluMlUoL0sknDQDjLqtHhvreCgYoZNYhDyMOtAZzYfDCwxM7ta7GR sHw4mK8/WNLXxaT467rDD3ivsOZUI4aOz5ZuU3/f38lxNGft9gMgX8z+prG4AH6S xeMZiRHx0wAFVePUcPclOhK0UECRggTdTXJ8AIc51EICAnInqOm7kSxqMLEZl2Lp j3VeIZqxrJXM6UjsEoMi6mWJc1U6370URDKqiTqdMqS1IXIcmyVyFy+U42WtCrT1 VGKQ+4jhNi+gWiQNhVxexMvk4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoOS9Wb 69iQtpB7ZT4yPxabIcU9MB8GA1UdIwQYMBaAFKr/uvJlqspMlRev639U/MsPsdwb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjE2RC9BMzk5MUUyNEI3 QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlreVZGNl9yZjFUOHl3LXgz QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2LTY4bVdxeWt5VkY2X3JmMVQ4eXcteDNCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjE2RC9BMzk5MUUyNEI3QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlr eVZGNl9yZjFUOHl3LXgzQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2M9d/SUgE/lsqW1IFYmxzgzCQHvDuAtAiWW6cuA2jY/N4FlIluswf GDzXAbBLUVhGqF3HeQn7Pc66/DYZ2BlTlCHa+9cM05PkCq0FRmOxq+cFNkUTbc7R oCqXp0JX2ZLedtuQMhPAVl83NOu7ho1flk5me3H9o/+R4VHvF50wVkjQodLhM5xU Typf9HXGBsPa5JSz3JHYey7yfMT+qLibq2OSyzOIhg6LPBQwLeCUwkocPFwhHddY sbtCE5vlvvzzNilrgqco5nYEYdNWuNaN91zN0bwuC5Do2EjWOM6vrtEzsA65qDS/ qsz8bYDQnvr1kmlSvD3/0NzJdWebqaDx -----END CERTIFICATE-----Generated at Thu Sep 18 20:53:11 2025 by rpki-client