$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: K/xUOtr3Pk3amb7iT78oChJ/sVse2YUO+UIuZICewvQ= Subject key identifier: 42:0A:D5:B2:B3:8B:53:20:92:0B:C9:2C:2D:84:34:64:FC:73:3A:94 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: B6 Signing time: Fri 05 Sep 2025 06:27:52 +0000 Manifest this update: Fri 05 Sep 2025 06:27:51 +0000 Manifest next update: Fri 12 Sep 2025 06:27:51 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: BsVrD/rSVOlVEhBd+DiFdkDmcyd35wdmWe1gvAie0SE=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Sep 5 06:27:51 2025 GMT Not After : Sep 12 06:27:51 2025 GMT Subject: CN=68ba82e7-f4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:50:22:0f:46:8a:75:4a:34:2a:e6:08:32: 0b:4d:56:ac:2c:54:00:2a:7b:0b:9f:70:ae:d6:2d: 01:2a:1e:a7:c4:c5:09:c3:c0:e3:9b:9e:37:3b:47: f7:0d:b2:08:a6:48:7f:ed:56:aa:91:97:b9:41:ce: 4a:ac:a8:92:b8:34:62:16:44:13:fe:32:65:6b:a1: 9d:e4:65:95:0d:eb:01:2c:54:53:4f:09:f1:f9:ab: 6a:90:66:65:83:38:ea:14:41:73:6f:92:2f:e1:aa: 31:e0:fe:2b:50:50:cd:6a:59:3f:e5:d3:34:d3:4a: e8:44:e6:fc:58:6c:e0:69:10:3a:6f:35:be:12:31: 7e:ce:16:5f:ba:63:eb:d7:09:3b:bb:5e:87:16:92: 5f:1a:88:45:78:5b:97:53:5a:f3:e8:36:c9:ae:9d: 07:5a:f5:76:48:ef:49:d7:20:f2:59:6f:70:95:0b: ab:6e:6d:0f:dd:f1:05:7d:1d:ce:15:c7:7a:26:59: 32:4f:d5:81:74:7c:22:ac:cd:95:1e:f2:6a:82:10: df:33:27:b9:46:e9:cf:90:38:a2:8a:e6:d8:59:c3: 77:c4:11:74:a2:55:75:3d:3a:9d:7e:ef:06:b9:dc: 94:32:fb:39:64:9c:5a:35:67:ec:8c:df:32:06:a7: f7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:D5:B2:B3:8B:53:20:92:0B:C9:2C:2D:84:34:64:FC:73:3A:94 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:96:b1:93:07:07:63:3e:09:02:88:d1:ae:22:8c:d2:5d:88: 89:77:33:11:4d:23:c7:b2:f0:78:8a:88:ba:78:60:0a:0f:21: 1e:b1:ed:52:35:82:59:14:aa:13:f8:6c:54:b9:cf:5e:b7:99: d9:6c:6d:78:f0:24:75:87:a0:0b:49:f2:78:f1:50:ae:bb:ff: 39:51:9f:83:7b:d0:d3:81:46:97:dc:47:0b:f7:d2:a9:51:85: 24:74:22:f9:c4:da:d8:13:56:84:28:24:1a:1e:dc:60:5f:b6: 8f:0e:46:35:c8:9d:d3:a5:33:a0:dd:f8:1b:d2:43:12:2f:b5: f6:f9:36:45:b0:56:6b:1d:56:30:6b:9c:96:96:c3:cc:e3:7c: d8:bb:38:8c:bd:ca:47:ad:9a:0e:3a:49:c5:a4:1a:4d:fb:72: a4:55:a6:69:37:0d:d8:5c:2f:b5:2a:a9:b1:43:5f:a0:78:43: 1f:3b:d5:24:39:77:77:7e:21:69:14:b5:4a:11:60:8a:29:b8: 24:81:51:a9:45:63:25:66:6f:d0:24:67:93:ed:84:ab:a1:0b: f3:40:7e:05:9c:94:f8:b1:1b:c6:d1:07:62:46:e5:ff:00:70: 73:e2:07:09:29:93:f3:f3:a5:31:e8:61:79:96:ef:01:2d:57: e7:d2:f7:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUwOTA1MDYyNzUxWhcNMjUwOTEyMDYyNzUxWjAYMRYwFAYD VQQDEw02OGJhODJlNy1mNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXxQIg9GinVKNCrmCDILTVasLFQAKnsLn3Cu1i0BKh6nxMUJw8Djm543O0f3 DbIIpkh/7VaqkZe5Qc5KrKiSuDRiFkQT/jJla6Gd5GWVDesBLFRTTwnx+atqkGZl gzjqFEFzb5Iv4aox4P4rUFDNalk/5dM000roROb8WGzgaRA6bzW+EjF+zhZfumPr 1wk7u16HFpJfGohFeFuXU1rz6DbJrp0HWvV2SO9J1yDyWW9wlQurbm0P3fEFfR3O Fcd6JlkyT9WBdHwirM2VHvJqghDfMye5RunPkDiiiubYWcN3xBF0olV1PTqdfu8G udyUMvs5ZJxaNWfsjN8yBqf3oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIK1bKz i1MgkgvJLC2ENGT8czqUMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2lrGTBwdjPgkCiNGuIozSXYiJdzMRTSPHsvB4ioi6eGAKDyEese1S NYJZFKoT+GxUuc9et5nZbG148CR1h6ALSfJ48VCuu/85UZ+De9DTgUaX3EcL99Kp UYUkdCL5xNrYE1aEKCQaHtxgX7aPDkY1yJ3TpTOg3fgb0kMSL7X2+TZFsFZrHVYw a5yWlsPM43zYuziMvcpHrZoOOknFpBpN+3KkVaZpNw3YXC+1KqmxQ1+geEMfO9Uk OXd3fiFpFLVKEWCKKbgkgVGpRWMlZm/QJGeT7YSroQvzQH4FnJT4sRvG0QdiRuX/ AHBz4gcJKZPz86Ux6GF5lu8BLVfn0vfh -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:11 2025 by rpki-client