$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: KQyRywiDxJfS98bJH/5tyriOCGKlJajOYopeWTJq2L4= Subject key identifier: AE:A6:01:54:74:EA:D4:AC:75:AD:BE:AF:03:A7:E3:75:BE:14:3D:AC Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 08E5 Signing time: Sun 24 Aug 2025 20:25:28 +0000 Manifest this update: Sun 24 Aug 2025 20:25:27 +0000 Manifest next update: Sun 31 Aug 2025 20:25:27 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: EICLgkQxrnoxHjTC57sLzHQL3SagQyExtZ6OW9AHCzA=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: Aug 24 20:25:27 2025 GMT Not After : Aug 31 20:25:27 2025 GMT Subject: CN=68ab7538-7a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:34:03:7f:18:cb:08:68:a4:b1:49:77:71: e2:1e:fc:26:52:fe:49:7f:fb:24:67:bb:ac:0b:c9: 8d:6d:75:19:8c:9b:4d:ca:08:ff:0c:a3:04:e7:c8: a0:a1:8b:e0:3a:62:40:a6:ae:db:76:a7:ee:7c:6d: 7b:fe:86:47:e4:e3:06:f9:59:ed:40:40:54:57:87: 1d:65:d7:f6:20:5d:2c:43:8f:6e:11:fc:e8:60:a3: 2d:9c:a1:c9:d3:d6:7b:34:0f:44:5b:59:19:5a:6f: 3b:73:55:b2:96:2c:bc:da:ac:ab:4f:d2:60:00:34: 6c:08:22:4c:7f:54:95:5b:44:c7:ed:0e:28:ee:5f: 14:33:13:28:41:20:d1:db:44:a2:8d:f4:17:62:82: a3:f1:2a:7e:00:93:e8:c6:86:0d:4b:43:dd:8f:5d: a3:ec:51:9f:42:ea:d1:cc:42:4a:d5:69:b5:f0:86: 7a:11:f4:c7:f0:8c:3c:50:dd:14:31:d6:db:7a:8b: 3c:81:f7:e9:c1:a1:51:74:d0:d5:73:16:60:14:79: ff:9e:f9:96:26:26:26:d4:9e:49:4f:3a:68:3a:63: 32:59:dc:4a:cd:6d:73:cd:95:d0:54:17:ef:96:45: 41:a3:50:26:77:f3:11:ea:ad:03:43:7a:49:98:b0: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A6:01:54:74:EA:D4:AC:75:AD:BE:AF:03:A7:E3:75:BE:14:3D:AC X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:6b:e3:a5:22:fb:2f:e0:a8:0e:be:8c:d5:90:50:a4:0f:9c: b6:1f:70:f1:11:77:e7:62:57:10:6c:8d:ed:b2:16:5b:fb:ea: fa:16:4e:a3:56:f7:5d:9f:d7:db:19:9d:8b:3f:e9:33:70:fd: af:a2:9c:9e:d4:fb:fa:8f:fd:34:11:39:03:cb:02:41:cf:7c: 91:a0:27:e0:f4:c8:fa:ad:af:f9:eb:76:a0:a6:52:f6:1d:60: 53:e1:a6:c4:58:a7:7b:c6:6e:86:f9:e3:1b:b5:84:23:42:00: a6:89:cc:46:a7:dd:d0:8e:2d:cf:1a:3a:f4:a2:5d:72:a1:74: fe:68:b8:8d:4f:69:8c:c5:03:3a:88:5e:13:81:5d:6f:22:0d: 66:ab:c7:3e:5c:a9:21:23:ce:1b:f0:c2:51:69:8f:58:d8:17: e2:c6:39:f1:a0:c1:0f:ed:35:b4:0e:c0:14:f0:b8:4d:80:d9: d1:fc:b8:fb:d3:e0:8e:1b:78:97:27:f7:0e:99:18:4a:c3:18: 8e:09:01:85:d6:4b:15:a4:d6:eb:d0:f4:86:63:57:a8:6a:77: 0b:0c:9e:69:e1:c4:a2:c2:29:44:ce:5a:31:4f:ef:0f:1a:2d: 24:b0:a6:ca:fe:7f:58:1a:0e:f5:6d:56:ad:48:97:b8:6d:89: e4:33:a7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjUwODI0MjAyNTI3WhcNMjUwODMxMjAyNTI3WjAYMRYwFAYD VQQDEw02OGFiNzUzOC03YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTI0A38YywhopLFJd3HiHvwmUv5Jf/skZ7usC8mNbXUZjJtNygj/DKME58ig oYvgOmJApq7bdqfufG17/oZH5OMG+VntQEBUV4cdZdf2IF0sQ49uEfzoYKMtnKHJ 09Z7NA9EW1kZWm87c1Wyliy82qyrT9JgADRsCCJMf1SVW0TH7Q4o7l8UMxMoQSDR 20SijfQXYoKj8Sp+AJPoxoYNS0Pdj12j7FGfQurRzEJK1Wm18IZ6EfTH8Iw8UN0U Mdbbeos8gffpwaFRdNDVcxZgFHn/nvmWJiYm1J5JTzpoOmMyWdxKzW1zzZXQVBfv lkVBo1Amd/MR6q0DQ3pJmLCeZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6mAVR0 6tSsda2+rwOn43W+FD2sMB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBza+OlIvsv4KgOvozVkFCkD5y2H3DxEXfnYlcQbI3tshZb++r6Fk6j Vvddn9fbGZ2LP+kzcP2vopye1Pv6j/00ETkDywJBz3yRoCfg9Mj6ra/563agplL2 HWBT4abEWKd7xm6G+eMbtYQjQgCmicxGp93Qji3PGjr0ol1yoXT+aLiNT2mMxQM6 iF4TgV1vIg1mq8c+XKkhI84b8MJRaY9Y2BfixjnxoMEP7TW0DsAU8LhNgNnR/Lj7 0+COG3iXJ/cOmRhKwxiOCQGF1ksVpNbr0PSGY1eoancLDJ5p4cSiwilEzloxT+8P Gi0ksKbK/n9YGg71bVatSJe4bYnkM6fY -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:25 2025 by rpki-client