$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json) Hash identifier: Ynk8fYI7ZGVz8rHOdJcrt70KgUlCOvcWLNSPEgndXJI= Subject key identifier: FA:75:8A:56:8E:D9:0C:18:0D:63:9B:BA:67:5B:82:A7:EB:9B:D2:FA Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft Manifest number: 1F Signing time: Fri 05 Sep 2025 08:25:50 +0000 Manifest this update: Fri 05 Sep 2025 08:25:50 +0000 Manifest next update: Fri 12 Sep 2025 08:25:50 +0000 Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 5nFdcvb6eX/zmOe4JSm+SKyBUr4wEbCVr5oF73YTC40=) 2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: DzXy8BEuESMOqIj1ZsPp4HtWDSpRtccWGiXvOFf8WyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Validity Not Before: Sep 5 08:25:50 2025 GMT Not After : Sep 12 08:25:50 2025 GMT Subject: CN=68ba9e8e-e845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:2d:8b:97:cf:e2:1a:61:a5:62:34:7e:3c: 8f:62:d2:85:c4:25:83:ef:49:85:e3:57:ed:3d:a8: e4:af:5d:b2:39:f8:80:e7:14:fb:6c:01:0d:c0:0e: fc:ea:6e:1f:21:33:11:be:62:e7:f6:70:de:85:47: f5:09:ef:32:b2:6f:80:2c:b0:c9:1d:01:75:67:01: 83:ad:39:13:61:1b:0f:ca:a9:11:5f:34:46:f4:93: b8:bc:30:ed:d4:d7:28:b6:75:89:6a:22:df:e0:b4: 3c:a7:75:95:8f:aa:dd:bd:4e:eb:96:fa:fd:36:ea: e0:2d:e7:00:4a:02:7e:26:54:2f:cc:04:c4:bc:5d: 9f:ba:96:0a:a1:87:1e:2f:62:66:51:45:a1:e7:6d: e2:29:3f:71:a8:84:17:b9:c2:db:b8:34:d0:60:15: 25:7c:d3:26:02:59:16:4c:58:7c:98:1e:8a:6d:01: 00:dd:a6:f3:cc:75:18:4b:ca:c2:73:c6:0d:a1:af: 7a:ba:85:5e:6e:36:a7:96:46:db:6d:ef:18:4c:92: 0d:82:89:a5:dc:59:58:f6:99:fb:24:29:56:fd:19: eb:80:14:d1:c0:04:a5:18:ab:22:db:cf:81:82:e9: 45:e4:ba:7a:d4:cf:cb:0e:97:19:2f:a7:8a:88:c3: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:75:8A:56:8E:D9:0C:18:0D:63:9B:BA:67:5B:82:A7:EB:9B:D2:FA X509v3 Authority Key Identifier: keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2e:6f:e7:67:04:b7:bb:ef:8a:ea:f0:78:0e:2a:1b:3f:7d: e9:81:39:aa:76:1a:c2:ea:8f:79:d2:59:88:0a:27:aa:64:cc: e3:7c:38:cf:e0:4c:f9:64:0e:14:36:bc:dd:84:61:75:7d:0c: 05:fe:6e:36:82:ad:be:7d:c1:40:24:79:8c:55:1e:8a:94:8f: bc:39:91:66:08:37:7a:6a:32:00:5f:e2:38:89:91:79:8f:2f: e0:bb:63:84:bb:c2:82:02:b1:39:32:f4:d9:72:eb:ad:b0:a6: b7:fb:cb:0a:c7:b8:5d:2e:38:b4:ef:90:ed:b6:38:03:27:75: 39:c4:14:5c:77:16:1c:1f:c4:b5:b6:dc:e4:40:ac:af:e1:07: cf:38:0d:e0:c5:34:cc:c3:03:bf:2a:20:bd:51:4f:83:2a:dc: db:62:41:dc:6e:3b:23:02:c5:64:d6:df:72:ea:1a:2d:a0:30: 6b:6c:f8:b5:01:a6:19:ff:af:12:55:c5:fa:68:09:91:1d:15: 24:44:86:5b:15:9e:d6:d8:29:fe:6b:ab:71:e3:15:b6:b7:95: bd:14:c9:4c:fd:fe:69:06:74:33:74:1c:63:e6:b9:57:d2:36: 9c:6f:c4:f8:58:a8:08:8b:a6:cc:a3:18:ef:a8:7d:bb:ef:da: 86:60:59:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2 NDIzNjJBMjAeFw0yNTA5MDUwODI1NTBaFw0yNTA5MTIwODI1NTBaMBgxFjAUBgNV BAMTDTY4YmE5ZThlLWU4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoZS2Ll8/iGmGlYjR+PI9i0oXEJYPvSYXjV+09qOSvXbI5+IDnFPtsAQ3ADvzq bh8hMxG+Yuf2cN6FR/UJ7zKyb4AssMkdAXVnAYOtORNhGw/KqRFfNEb0k7i8MO3U 1yi2dYlqIt/gtDyndZWPqt29TuuW+v026uAt5wBKAn4mVC/MBMS8XZ+6lgqhhx4v YmZRRaHnbeIpP3GohBe5wtu4NNBgFSV80yYCWRZMWHyYHoptAQDdpvPMdRhLysJz xg2hr3q6hV5uNqeWRttt7xhMkg2CiaXcWVj2mfskKVb9GeuAFNHABKUYqyLbz4GC 6UXkunrUz8sOlxkvp4qIw6qVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+nWKVo7Z DBgNY5u6Z1uCp+ub0vowHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2LzZCNzI3RjMyNjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVq Sk82T2dfcE92RUdRallxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQub+dnBLe774rq8HgOKhs/femBOap2GsLqj3nSWYgKJ6pkzON8OM/g TPlkDhQ2vN2EYXV9DAX+bjaCrb59wUAkeYxVHoqUj7w5kWYIN3pqMgBf4jiJkXmP L+C7Y4S7woICsTky9Nly662wprf7ywrHuF0uOLTvkO22OAMndTnEFFx3FhwfxLW2 3ORArK/hB884DeDFNMzDA78qIL1RT4Mq3NtiQdxuOyMCxWTW33LqGi2gMGts+LUB phn/rxJVxfpoCZEdFSREhlsVntbYKf5rq3HjFba3lb0UyUz9/mkGdDN0HGPmuVfS NpxvxPhYqAiLpsyjGO+ofbvv2oZgWY8= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:14 2025 by rpki-client