$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: Y1N0JuwdENhC9GvtY0WIROA75e63NLWLpqR2731rG40= Subject key identifier: 41:A9:AE:5B:86:77:4E:85:3C:C2:CC:FC:6B:85:E2:4C:08:8D:BD:DA Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B86 Signing time: Sun 24 Aug 2025 19:04:09 +0000 Manifest this update: Sun 24 Aug 2025 19:04:08 +0000 Manifest next update: Sun 31 Aug 2025 19:04:08 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: z8pqy8bvAq+1+CeOyFmnTKsrgZi65FZSFZJVpu53fX8=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Aug 24 19:04:08 2025 GMT Not After : Aug 31 19:04:08 2025 GMT Subject: CN=68ab6229-70ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:8c:95:c8:44:a8:1e:29:d7:d3:61:75:29: d0:4c:15:c6:87:64:82:68:15:56:c5:ef:53:13:82: ab:d4:27:f8:04:64:f9:31:93:5d:8a:a2:19:5f:76: a4:44:de:fb:c4:d3:ab:c9:ff:1d:46:96:6e:35:59: 1c:69:a6:69:62:dc:80:a0:d5:b4:6d:9e:fa:b3:42: bb:61:2a:32:a0:31:eb:aa:cb:97:4b:9b:27:33:1c: 71:25:65:13:a6:0c:c7:21:63:7f:92:8c:73:5f:b2: 29:a0:20:c8:5a:64:71:12:19:58:27:cf:5d:e4:6e: ca:94:50:95:d9:92:b7:75:52:d4:78:f6:c2:f1:cc: 16:53:56:e2:b7:d6:50:a4:f6:2f:dd:2e:26:c8:2b: 8f:38:dd:b9:6a:75:1b:46:2f:55:a6:39:42:7a:6a: 90:a6:54:7e:67:82:5e:b9:9f:03:bd:c9:dc:10:4f: 7d:fe:f5:cc:62:93:e7:12:10:bd:ed:61:3d:83:c4: 51:cc:44:6a:a8:42:03:c0:c6:cc:83:a7:0d:58:a1: 47:9d:21:49:51:c9:c7:10:13:62:77:98:f9:46:6d: 8f:12:8d:ea:38:c3:3f:2e:6e:e0:d2:27:ef:04:cf: ba:e6:52:15:28:30:68:9f:8d:60:4f:13:3f:4a:b2: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:AE:5B:86:77:4E:85:3C:C2:CC:FC:6B:85:E2:4C:08:8D:BD:DA X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a4:ee:6f:3a:65:e1:b1:89:f0:7b:d0:fa:83:8f:f4:1d:bb: 78:aa:d7:f5:b0:48:df:d2:e1:6d:8b:5b:01:0b:bc:77:87:9b: cc:16:71:6d:7b:f0:79:78:64:cb:84:e8:15:b5:0b:8e:ed:62: 2d:ac:ea:70:98:be:81:7c:14:48:5e:1f:17:44:46:dd:aa:6b: c3:ef:bb:24:fe:cd:a7:5e:a7:74:39:44:fb:44:48:f7:4f:02: db:02:32:2b:53:3e:c8:69:f0:d9:08:95:41:47:9d:3f:43:ad: 1f:53:41:5f:d5:94:ba:88:b9:05:98:1a:bf:47:13:64:9b:97: 88:60:ed:f1:23:47:57:8d:79:bd:47:2c:1b:f4:20:f3:ef:0d: 2f:23:60:81:01:59:51:36:37:d6:ac:31:60:2d:9b:c9:d5:68: 00:23:e3:bd:f7:e3:2f:03:00:7d:27:6f:1f:c3:24:8a:eb:ec: 07:23:80:96:a1:7b:50:12:1f:0d:d4:61:a0:68:53:db:b2:de: 72:ac:05:1a:47:e3:fa:34:7d:43:0c:60:c8:a8:81:c7:4b:a1: c6:76:75:57:7c:80:9f:69:f4:85:7b:cf:e0:68:c1:23:bb:b0: af:33:93:b3:73:23:08:73:8e:6e:09:be:5c:15:85:c8:0c:c4: 6a:b8:2d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwODI0MTkwNDA4WhcNMjUwODMxMTkwNDA4WjAYMRYwFAYD VQQDEw02OGFiNjIyOS03MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2WMlchEqB4p19NhdSnQTBXGh2SCaBVWxe9TE4Kr1Cf4BGT5MZNdiqIZX3ak RN77xNOryf8dRpZuNVkcaaZpYtyAoNW0bZ76s0K7YSoyoDHrqsuXS5snMxxxJWUT pgzHIWN/koxzX7IpoCDIWmRxEhlYJ89d5G7KlFCV2ZK3dVLUePbC8cwWU1bit9ZQ pPYv3S4myCuPON25anUbRi9VpjlCemqQplR+Z4JeuZ8DvcncEE99/vXMYpPnEhC9 7WE9g8RRzERqqEIDwMbMg6cNWKFHnSFJUcnHEBNid5j5Rm2PEo3qOMM/Lm7g0ifv BM+65lIVKDBon41gTxM/SrJs1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGprluG d06FPMLM/GuF4kwIjb3aMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRpO5vOmXhsYnwe9D6g4/0Hbt4qtf1sEjf0uFti1sBC7x3h5vMFnFt e/B5eGTLhOgVtQuO7WItrOpwmL6BfBRIXh8XREbdqmvD77sk/s2nXqd0OUT7REj3 TwLbAjIrUz7IafDZCJVBR50/Q60fU0Ff1ZS6iLkFmBq/RxNkm5eIYO3xI0dXjXm9 Rywb9CDz7w0vI2CBAVlRNjfWrDFgLZvJ1WgAI+O99+MvAwB9J28fwySK6+wHI4CW oXtQEh8N1GGgaFPbst5yrAUaR+P6NH1DDGDIqIHHS6HGdnVXfICfafSFe8/gaMEj u7CvM5OzcyMIc45uCb5cFYXIDMRquC2N -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:13 2025 by rpki-client