$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: kljKBAqYKlE4TYoOMfjr/yBwmIqQe+ilh0o+D3FTXCI= Subject key identifier: B7:7B:D0:C5:0D:1A:75:FA:3D:EA:0A:78:BB:5D:CE:46:88:A6:CA:53 Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 0124 Signing time: Tue 09 Sep 2025 04:50:31 +0000 Manifest this update: Tue 09 Sep 2025 04:50:30 +0000 Manifest next update: Tue 16 Sep 2025 04:50:30 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: n5Hb/Aj/P0FZWfbt3COOhxmHwI3U1KMtwNuIf2JNJFU=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Sep 9 04:50:30 2025 GMT Not After : Sep 16 04:50:30 2025 GMT Subject: CN=68bfb216-ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:d8:81:96:44:1c:fe:79:c9:3c:6c:1d:63: 3f:03:e8:81:4f:af:c7:88:9d:c7:77:c8:95:05:9c: be:a6:f7:e5:c6:16:de:cc:3b:8d:50:d3:59:f7:49: 66:32:de:38:ea:b7:40:1f:96:ef:27:a8:e7:39:38: 7c:ee:ea:6a:8b:a2:9a:3b:6a:5e:86:1b:ac:19:c6: 05:e6:6a:56:2b:55:10:21:52:6f:3c:bd:b1:c9:6a: 85:09:ef:e3:a3:92:20:bb:f4:19:b4:1a:ce:2e:75: ab:fe:73:e6:7b:25:d5:84:f0:96:35:85:70:ad:1c: b9:47:ae:ee:41:58:77:b1:63:a1:7e:92:b5:8f:e2: f2:3c:65:4f:79:6d:1a:1b:4e:81:7a:3b:98:6e:9e: 5d:d2:07:eb:05:57:0b:8d:95:a5:8e:34:ef:87:c6: 8a:73:4a:d6:e8:46:ef:bc:e4:9b:68:76:07:6e:d7: 51:78:fa:13:4b:97:42:f7:ff:69:81:0b:23:0b:58: 73:7d:78:a7:51:ff:e6:8b:f1:7e:23:34:39:2c:70: 8e:8a:e6:db:5c:4e:41:17:6d:59:de:cc:70:c9:ff: 1c:83:dc:0e:0c:a0:90:fa:86:5f:b9:85:9d:c6:88: 58:9b:2d:f6:88:a4:93:2e:97:fd:a6:b7:4b:24:1d: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7B:D0:C5:0D:1A:75:FA:3D:EA:0A:78:BB:5D:CE:46:88:A6:CA:53 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1e:89:7e:4e:d2:10:ff:db:17:74:a1:34:23:ad:04:e8:c7: 28:25:99:f0:77:31:95:83:77:ab:c4:68:4a:df:2f:d3:da:21: 68:49:9c:45:ca:cf:c4:10:c2:00:06:75:51:ea:fd:f4:9c:49: 66:a6:7c:83:19:ec:53:a0:63:7a:62:35:da:b8:55:55:1e:6c: e2:e4:20:9d:a7:22:7f:52:5f:c4:30:1b:24:0b:0e:58:a3:f9: 83:9b:4b:67:ad:91:13:8a:32:cb:95:b4:09:1f:92:09:bc:a8: 94:9b:01:80:78:ad:37:0f:45:69:c8:02:99:07:db:eb:42:32: b0:00:be:9e:e3:d2:ac:73:3b:77:cf:4f:75:f0:b1:b9:08:80: 9c:93:3e:0c:cb:9c:5d:30:b3:aa:97:9e:7d:9b:c3:e7:60:97: 2a:35:26:0d:ae:94:2f:d1:d7:3f:d0:35:01:18:6d:1d:c3:cb: 9b:45:03:81:a3:28:e9:01:fc:d3:91:3b:49:54:f9:5c:c1:30: fb:20:1f:a7:61:d1:ff:f0:7e:84:91:76:0b:5a:18:a7:2e:38: e3:2d:8a:e0:0e:c1:b4:f1:62:58:f5:6b:c6:bc:01:9e:ba:78: 49:60:ee:1d:45:9e:5f:ed:9e:b9:bf:ca:33:0b:7d:fb:6d:ef: b7:61:b6:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwOTA5MDQ1MDMwWhcNMjUwOTE2MDQ1MDMwWjAYMRYwFAYD VQQDEw02OGJmYjIxNi1hZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bzYgZZEHP55yTxsHWM/A+iBT6/HiJ3Hd8iVBZy+pvflxhbezDuNUNNZ90lm Mt446rdAH5bvJ6jnOTh87upqi6KaO2pehhusGcYF5mpWK1UQIVJvPL2xyWqFCe/j o5Igu/QZtBrOLnWr/nPmeyXVhPCWNYVwrRy5R67uQVh3sWOhfpK1j+LyPGVPeW0a G06BejuYbp5d0gfrBVcLjZWljjTvh8aKc0rW6EbvvOSbaHYHbtdRePoTS5dC9/9p gQsjC1hzfXinUf/mi/F+IzQ5LHCOiubbXE5BF21Z3sxwyf8cg9wODKCQ+oZfuYWd xohYmy32iKSTLpf9prdLJB14EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd70MUN GnX6PeoKeLtdzkaIpspTMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEHol+TtIQ/9sXdKE0I60E6McoJZnwdzGVg3erxGhK3y/T2iFoSZxF ys/EEMIABnVR6v30nElmpnyDGexToGN6YjXauFVVHmzi5CCdpyJ/Ul/EMBskCw5Y o/mDm0tnrZETijLLlbQJH5IJvKiUmwGAeK03D0VpyAKZB9vrQjKwAL6e49Ksczt3 z0918LG5CICckz4My5xdMLOql559m8PnYJcqNSYNrpQv0dc/0DUBGG0dw8ubRQOB oyjpAfzTkTtJVPlcwTD7IB+nYdH/8H6EkXYLWhinLjjjLYrgDsG08WJY9WvGvAGe unhJYO4dRZ5f7Z65v8ozC337be+3YbYt -----END CERTIFICATE-----Generated at Tue Sep 9 17:41:04 2025 by rpki-client