$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: bCbgHuMkWvPAOwkdO00DAqeMjaCciKXSE0G+R6DYpTE= Subject key identifier: 81:7F:31:CE:F7:3F:51:74:43:06:DC:AD:7F:7C:7D:29:90:61:2A:6D Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0AB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0A9C Signing time: Mon 08 Sep 2025 19:36:51 +0000 Manifest this update: Mon 08 Sep 2025 19:36:51 +0000 Manifest next update: Mon 15 Sep 2025 19:36:51 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: 5LzE67QgplbMf1JiNiLQ2aHqoZTguBw92IvBm1NFs2M=) 2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Sep 8 19:36:51 2025 GMT Not After : Sep 15 19:36:51 2025 GMT Subject: CN=68bf3053-7424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:da:38:99:25:2b:0a:c6:86:f1:5d:3c:3e: 2c:35:d0:4a:97:28:a1:40:4c:21:16:82:bd:2f:1a: 9d:bb:73:48:d5:23:81:c5:53:85:48:6f:a4:32:81: 74:4e:75:7f:bc:40:01:b6:bf:15:74:5a:2e:87:1d: 25:47:05:6a:d4:f2:08:3f:1d:9e:2f:34:1a:f3:62: 06:e7:af:de:05:aa:77:44:88:8c:f5:d5:6e:34:c2: 98:d8:44:2d:f6:19:6e:d5:b1:f1:63:e1:d2:b9:36: c0:f6:44:e9:5c:f6:79:33:39:67:25:8d:23:15:e0: 99:19:82:67:99:68:f7:e5:7d:ad:e5:3b:ca:fa:66: eb:43:8e:70:6e:5f:1f:e8:00:5d:77:33:fa:56:30: 9f:da:8b:3c:0c:6f:85:41:de:dd:b5:b2:a5:3d:8e: 19:22:d5:4f:81:c5:5d:78:36:26:f7:4f:53:d8:3a: 97:88:2d:1a:9a:21:d5:3d:6d:24:a8:8f:d4:3a:95: 0e:49:66:87:8f:4d:98:07:be:d3:6a:fa:0b:3f:a3: 05:da:7a:2f:f7:83:b9:fc:84:7e:71:aa:4a:50:c3: 26:b8:78:f8:42:86:2e:1f:8d:2c:55:e3:78:95:0b: 9d:d2:23:c8:f7:01:f1:cd:5b:fd:3b:a5:ad:fd:50: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:31:CE:F7:3F:51:74:43:06:DC:AD:7F:7C:7D:29:90:61:2A:6D X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ed:6b:9b:70:6f:5a:01:6a:ed:59:ff:f1:7a:67:2b:47:60: 8d:3e:b4:7a:b2:c6:b2:8a:43:d2:24:97:5b:44:e0:2f:20:a7: 2c:e7:f6:18:fa:76:0e:03:ed:2f:09:62:66:03:61:f4:25:1c: 50:db:bc:27:a8:50:26:5d:3e:01:d7:48:31:c6:69:5f:5d:ca: 6f:e8:10:53:c1:a2:73:e5:96:d7:cd:4a:f1:3d:3b:cb:9f:19: e1:95:ca:c4:8a:81:5d:bf:e0:9b:29:69:88:07:67:13:67:64: 18:36:4d:bd:bf:b1:c3:5f:77:7c:24:98:f2:cf:41:df:3d:45: 7c:a4:4c:41:5e:48:1d:f9:20:9b:e3:5e:c7:b0:74:b9:7f:19: 82:01:c4:52:3b:2c:98:45:ed:76:71:6d:f8:ec:79:f9:a2:0a: 9c:93:4d:e9:75:66:3e:e7:83:5f:9b:bf:30:5d:be:90:96:c4: 5a:8c:ff:2a:16:3c:ec:d1:12:e8:b6:6c:f0:93:16:83:a4:de: ca:75:78:df:59:f8:bf:44:f2:d8:bb:e8:d4:e9:d8:7f:4f:29: d3:1c:c2:41:be:80:dc:2b:d1:98:34:a9:f2:96:8c:65:7b:1a: 44:e1:6a:17:fc:ed:7e:10:ca:72:b7:a3:51:7d:68:b9:a8:35: 57:b9:8b:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjUwOTA4MTkzNjUxWhcNMjUwOTE1MTkzNjUxWjAYMRYwFAYD VQQDEw02OGJmMzA1My03NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwTaOJklKwrGhvFdPD4sNdBKlyihQEwhFoK9Lxqdu3NI1SOBxVOFSG+kMoF0 TnV/vEABtr8VdFouhx0lRwVq1PIIPx2eLzQa82IG56/eBap3RIiM9dVuNMKY2EQt 9hlu1bHxY+HSuTbA9kTpXPZ5MzlnJY0jFeCZGYJnmWj35X2t5TvK+mbrQ45wbl8f 6ABddzP6VjCf2os8DG+FQd7dtbKlPY4ZItVPgcVdeDYm909T2DqXiC0amiHVPW0k qI/UOpUOSWaHj02YB77TavoLP6MF2nov94O5/IR+capKUMMmuHj4QoYuH40sVeN4 lQud0iPI9wHxzVv9O6Wt/VC3owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF/Mc73 P1F0QwbcrX98fSmQYSptMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK7WubcG9aAWrtWf/xemcrR2CNPrR6ssayikPSJJdbROAvIKcs5/YY +nYOA+0vCWJmA2H0JRxQ27wnqFAmXT4B10gxxmlfXcpv6BBTwaJz5ZbXzUrxPTvL nxnhlcrEioFdv+CbKWmIB2cTZ2QYNk29v7HDX3d8JJjyz0HfPUV8pExBXkgd+SCb 417HsHS5fxmCAcRSOyyYRe12cW347Hn5ogqck03pdWY+54Nfm78wXb6QlsRajP8q Fjzs0RLotmzwkxaDpN7KdXjfWfi/RPLYu+jU6dh/TynTHMJBvoDcK9GYNKnyloxl expE4WoX/O1+EMpyt6NRfWi5qDVXuYus -----END CERTIFICATE-----Generated at Tue Sep 9 17:12:24 2025 by rpki-client