$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: yivieU218RuctzQP7KWy1GhFpWSMk6oYTOXYFZIUqCM= Subject key identifier: 18:F7:86:16:D1:15:D4:72:5F:DD:EC:6D:C0:FB:B1:1B:15:35:7E:27 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 34B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 34B3 Signing time: Wed 20 Aug 2025 15:01:51 +0000 Manifest this update: Wed 20 Aug 2025 15:01:51 +0000 Manifest next update: Wed 27 Aug 2025 15:01:51 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: WjkgF2EQqm6X6mUHo9o1cA5Coa4OOG98W/EbaN3DvHM=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Ijy1uWFshu2uXbMSDNdrdIor4pwld2OcIkcbdYGoQws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Aug 20 15:01:51 2025 GMT Not After : Aug 27 15:01:51 2025 GMT Subject: CN=68a5e35f-1dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:4b:22:de:c6:ff:53:58:84:d6:af:9f:b8: dd:1c:01:2d:30:f5:e8:50:80:c0:66:45:13:d4:69: e3:29:6c:0e:e7:e8:26:4a:c0:94:e2:55:4f:28:17: eb:35:2c:f0:fc:f7:df:3a:a6:2d:a7:10:1d:51:35: 72:e2:5c:f4:a4:43:57:9c:e0:9b:cc:54:94:66:bb: 63:13:dd:50:d0:2d:32:d1:58:7d:36:d9:c6:27:c0: 45:a9:70:32:b4:4c:85:cf:84:b3:dd:da:d6:41:7e: 3f:77:10:50:f5:22:10:48:cb:31:c9:dc:f1:19:1a: 8a:2e:42:df:75:56:98:36:42:94:a4:3d:a8:f2:f5: 20:90:91:01:ec:59:25:8e:d6:34:40:4c:37:bd:dd: 90:03:58:9b:f6:8e:63:f2:9e:6d:ad:79:8e:8a:d5: 7b:08:f2:c0:54:02:2f:30:09:fa:80:04:b6:63:6e: 7b:37:9a:a7:d5:38:4c:71:9e:60:8c:d8:ec:26:7e: 7a:f3:2c:59:c0:0c:12:09:18:6b:d5:a3:d4:b3:6a: b1:f8:88:6a:e1:0e:77:9d:35:d8:47:e2:07:51:fb: 11:b9:a9:b6:99:77:65:25:73:0f:c6:1e:8c:1c:b7: 60:e1:64:8b:16:82:69:7d:ce:78:d1:e8:89:99:ee: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F7:86:16:D1:15:D4:72:5F:DD:EC:6D:C0:FB:B1:1B:15:35:7E:27 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2c:53:22:21:fd:d7:6b:e5:ce:56:9d:5f:42:7f:cc:6a:15: 72:b6:a2:42:94:ab:b8:b6:8e:aa:38:8a:f6:63:08:96:0e:e2: 6e:c8:a2:45:a2:2c:97:eb:31:21:1a:61:58:34:c8:1e:81:7b: 3c:08:4b:34:2f:35:d4:97:f0:cc:c2:4e:7e:ff:ee:db:3b:4b: 0a:a3:20:49:2e:8c:fc:af:a0:a7:de:00:37:85:10:54:dd:8c: a4:c1:66:1b:57:21:ca:fa:96:65:63:d1:85:3b:94:6b:14:b5: 34:2c:6f:67:9b:3c:2a:ce:23:b2:17:58:16:2f:1d:0c:4e:ba: 22:89:ed:54:23:de:df:b1:8d:94:e3:98:44:47:83:72:f7:58: 03:e2:29:22:72:01:52:9e:eb:19:07:aa:22:f0:4a:0f:22:fd: 51:d5:ff:53:f2:5b:a8:19:f5:09:a0:43:96:dc:66:ac:f0:05: 44:36:82:45:6f:6a:81:15:23:ed:eb:cf:91:cc:e1:d2:72:a4: b0:6d:fb:59:7c:b5:5b:fb:ae:16:2f:18:fd:1f:38:58:9c:bd: 9c:41:16:27:82:b0:2a:78:26:ae:f6:2a:30:d3:19:23:79:17: 54:c6:8d:35:d0:ee:97:11:0e:62:b9:64:de:73:5b:44:d3:de: 49:36:41:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjUwODIwMTUwMTUxWhcNMjUwODI3MTUwMTUxWjAYMRYwFAYD VQQDEw02OGE1ZTM1Zi0xZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lBLIt7G/1NYhNavn7jdHAEtMPXoUIDAZkUT1GnjKWwO5+gmSsCU4lVPKBfr NSzw/PffOqYtpxAdUTVy4lz0pENXnOCbzFSUZrtjE91Q0C0y0Vh9NtnGJ8BFqXAy tEyFz4Sz3drWQX4/dxBQ9SIQSMsxydzxGRqKLkLfdVaYNkKUpD2o8vUgkJEB7Fkl jtY0QEw3vd2QA1ib9o5j8p5trXmOitV7CPLAVAIvMAn6gAS2Y257N5qn1ThMcZ5g jNjsJn568yxZwAwSCRhr1aPUs2qx+Ihq4Q53nTXYR+IHUfsRuam2mXdlJXMPxh6M HLdg4WSLFoJpfc540eiJme7XBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj3hhbR FdRyX93sbcD7sRsVNX4nMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiLFMiIf3Xa+XOVp1fQn/MahVytqJClKu4to6qOIr2YwiWDuJuyKJF oiyX6zEhGmFYNMgegXs8CEs0LzXUl/DMwk5+/+7bO0sKoyBJLoz8r6Cn3gA3hRBU 3YykwWYbVyHK+pZlY9GFO5RrFLU0LG9nmzwqziOyF1gWLx0MTroiie1UI97fsY2U 45hER4Ny91gD4ikicgFSnusZB6oi8EoPIv1R1f9T8luoGfUJoEOW3Gas8AVENoJF b2qBFSPt68+RzOHScqSwbftZfLVb+64WLxj9HzhYnL2cQRYngrAqeCau9iow0xkj eRdUxo010O6XEQ5iuWTec1tE095JNkFz -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:18 2025 by rpki-client