$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: DtuqQ04sdrpD+BZ3wkPm1pXRwdTEL2BGUNdiFBt+df4= Subject key identifier: 53:74:AB:96:7B:02:F6:3B:73:D8:F0:7E:37:F3:5F:50:0B:B3:4F:C6 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0B60 Signing time: Mon 08 Sep 2025 20:42:53 +0000 Manifest this update: Mon 08 Sep 2025 20:42:52 +0000 Manifest next update: Mon 15 Sep 2025 20:42:52 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: wGmI/Gj3VYb9YGZAapjBMclvYkvzdr5Rvq1bVbEyCBg=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: yncjWp9xwqpvqOv+gMeMTuxPHETfxjYdM3Cwt+khuW8=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: leiC+N+7T7KBF8xTueIqh0RjFttyTRTBR+jUcxpvEWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Sep 8 20:42:52 2025 GMT Not After : Sep 15 20:42:52 2025 GMT Subject: CN=68bf3fcd-6485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d0:42:9c:ec:33:02:88:85:e2:bc:2d:0f:61: e0:16:e9:50:14:e0:82:40:12:65:71:37:6f:41:76: f3:d8:a2:2d:d8:bb:41:3a:b1:f1:97:a2:60:46:1d: b1:c8:5d:ea:90:01:03:6f:5c:26:c8:1f:eb:32:08: a2:da:89:72:41:c4:60:18:22:ea:d2:11:cd:61:48: 11:53:a5:26:a2:8e:da:68:a7:64:25:b3:8d:20:3a: 95:6f:7e:c7:68:2d:90:51:04:09:38:f7:51:f0:3b: bc:11:6d:88:d3:e1:2a:d9:9d:c7:92:ac:c3:5f:8f: 47:8b:eb:82:28:4f:f9:42:c2:6c:1e:4d:17:92:c2: 23:ed:3c:5e:79:db:60:26:49:85:ed:29:42:48:2e: 18:52:ee:f5:71:86:60:65:9d:cf:51:2e:20:ec:5f: 74:b2:0f:43:33:94:b3:1c:9c:b5:24:d7:db:62:ef: 16:34:89:20:d4:b2:87:f5:5d:a4:70:30:7e:c6:03: 9d:7e:41:00:60:6a:52:4d:b1:57:c3:3c:63:eb:66: e2:2c:d3:c7:b5:82:73:4e:4b:76:ff:26:41:0b:9d: 32:89:f8:20:75:14:10:37:ce:ab:2b:0f:16:dd:ca: 91:3e:3f:cc:70:b2:ac:96:8d:05:cc:e7:fa:5d:b9: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:AB:96:7B:02:F6:3B:73:D8:F0:7E:37:F3:5F:50:0B:B3:4F:C6 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:db:7b:0c:28:2c:b4:ab:91:5e:a4:e3:c8:0a:a2:3b:5b:80: 49:34:35:af:03:e2:20:4a:fe:8f:48:23:62:e7:9c:15:ea:e7: e1:a3:70:9b:cd:c5:27:37:b2:6a:26:04:e2:cd:a2:05:e5:fe: fb:55:28:1f:e0:7e:b0:d9:35:02:50:d7:66:75:20:50:0c:73: e1:da:c8:47:a2:87:33:23:5f:ab:34:bf:f3:37:32:d3:27:9b: 73:ef:31:d2:ab:27:1a:1a:68:53:4a:f3:41:6c:a3:20:ec:27: a5:68:89:d9:d9:47:b9:16:15:c5:5f:97:dc:f5:f5:00:63:b6: fc:07:1d:fa:e8:61:92:23:fc:32:5e:c6:8b:52:17:18:98:5c: a8:a6:17:09:44:48:fc:1e:dc:18:c8:fc:7f:05:75:6e:1f:a5: 43:a2:f1:e6:13:80:c1:6e:a9:b3:80:79:94:22:58:e6:d9:5a: 66:9b:92:5c:2d:68:3b:7e:88:5c:b9:84:be:5d:3d:20:a4:f3: 38:3a:62:22:f1:a7:82:bb:03:3e:3d:74:43:a2:ef:dc:c2:8c: 6b:46:1f:11:e1:27:f7:36:3d:7b:6e:0e:d4:14:e6:0b:f6:09: 74:a4:9f:98:2c:49:d6:95:43:dc:ab:8c:17:cc:41:17:65:52: 6c:b9:19:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwOTA4MjA0MjUyWhcNMjUwOTE1MjA0MjUyWjAYMRYwFAYD VQQDEw02OGJmM2ZjZC02NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tBCnOwzAoiF4rwtD2HgFulQFOCCQBJlcTdvQXbz2KIt2LtBOrHxl6JgRh2x yF3qkAEDb1wmyB/rMgii2olyQcRgGCLq0hHNYUgRU6Umoo7aaKdkJbONIDqVb37H aC2QUQQJOPdR8Du8EW2I0+Eq2Z3HkqzDX49Hi+uCKE/5QsJsHk0XksIj7Txeedtg JkmF7SlCSC4YUu71cYZgZZ3PUS4g7F90sg9DM5SzHJy1JNfbYu8WNIkg1LKH9V2k cDB+xgOdfkEAYGpSTbFXwzxj62biLNPHtYJzTkt2/yZBC50yifggdRQQN86rKw8W 3cqRPj/McLKslo0FzOf6XbmjEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN0q5Z7 AvY7c9jwfjfzX1ALs0/GMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo23sMKCy0q5FepOPICqI7W4BJNDWvA+IgSv6PSCNi55wV6ufho3Cb zcUnN7JqJgTizaIF5f77VSgf4H6w2TUCUNdmdSBQDHPh2shHooczI1+rNL/zNzLT J5tz7zHSqycaGmhTSvNBbKMg7CelaInZ2Ue5FhXFX5fc9fUAY7b8Bx366GGSI/wy XsaLUhcYmFyophcJREj8HtwYyPx/BXVuH6VDovHmE4DBbqmzgHmUIljm2Vpmm5Jc LWg7fohcuYS+XT0gpPM4OmIi8aeCuwM+PXRDou/cwoxrRh8R4Sf3Nj17bg7UFOYL 9gl0pJ+YLEnWlUPcq4wXzEEXZVJsuRkL -----END CERTIFICATE-----Generated at Tue Sep 9 17:30:53 2025 by rpki-client