$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft File: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json) Hash identifier: FlWL8dgDnbU8mkmab3qI+cUYYX5Bs7A8TDbj/cEFReo= Subject key identifier: A4:C6:35:5F:02:7C:9D:0C:A4:B6:CD:9E:97:B7:18:4E:AE:99:EF:89 Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD Certificate issuer: /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft Manifest number: 013B Signing time: Sat 09 Aug 2025 04:49:59 +0000 Manifest this update: Sat 09 Aug 2025 04:49:58 +0000 Manifest next update: Sat 16 Aug 2025 04:49:58 +0000 Files and hashes: 1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: 365WTy2zgMsCrhT3qSX5lL+KTm3QnZYKBtm6aN0I4Ts=) 2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: qMb5p2DafyW8EWL0hOaIMJWbQyW8PlH7p5vaUcSXFyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Validity Not Before: Aug 9 04:49:58 2025 GMT Not After : Aug 16 04:49:58 2025 GMT Subject: CN=6896d377-15a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:e1:ce:01:06:88:ca:5c:c5:d9:f3:59:89: ba:fe:b8:21:10:73:85:19:74:d2:a2:4e:bc:1c:da: 37:17:bc:27:0d:e1:29:79:c1:63:76:d0:3e:31:f7: 8e:80:a2:33:60:d1:4b:8d:10:92:f9:56:6d:86:00: dc:f2:0f:ea:43:b6:1a:c5:2d:3d:e7:8a:96:08:2f: e1:ad:37:c3:49:0f:9d:d0:a7:63:e0:2d:42:3c:22: 83:40:73:85:bf:3a:78:5d:51:2a:b6:ac:94:b2:d8: c0:59:c9:a6:f0:7a:49:c2:13:4e:ab:f7:93:69:e5: 15:86:b0:28:de:3c:83:70:f4:5a:32:ae:5d:db:06: 66:8c:d3:d0:ed:ca:b0:88:38:07:65:e1:96:1e:5d: 86:e6:6f:d9:b1:ad:a0:22:f2:d5:1e:ac:bb:7b:fa: 04:ba:44:6b:b5:ba:10:e6:18:31:b0:19:37:af:e4: ef:7c:c0:8d:23:1e:52:93:db:bb:92:08:bb:b8:9b: f6:1f:ce:c1:84:ef:b2:bf:2c:8d:04:7d:f3:2d:97: df:c9:95:99:9a:f8:a7:d8:99:ab:ea:6c:16:80:f7: b4:70:79:76:4d:e4:95:e1:76:33:8f:9e:49:ff:ab: 83:c8:cd:af:1a:18:35:c9:a3:88:78:d6:bf:f2:d4: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C6:35:5F:02:7C:9D:0C:A4:B6:CD:9E:97:B7:18:4E:AE:99:EF:89 X509v3 Authority Key Identifier: keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:17:a5:ec:d7:3d:e1:f1:e2:6b:2d:27:1b:56:67:27:fe:87: 6d:9b:bf:45:bf:c5:18:8e:b6:75:1f:da:88:e5:cc:09:f1:8a: cd:0a:cb:c9:e1:ae:98:9d:b6:68:44:e4:1d:21:f0:ab:0a:d4: a7:f2:cf:3e:63:eb:16:9b:6a:62:c6:0f:30:1f:10:e0:80:30: b2:d6:7f:d9:fd:ce:ee:fa:db:ea:aa:90:09:95:89:39:df:98: 7d:bc:18:ca:e6:55:2f:7a:2f:17:90:39:c4:a6:4b:41:2d:ea: 64:7f:a7:20:6b:58:dd:8b:23:45:8b:1d:a4:41:c3:29:a3:dc: 8b:2e:15:c5:94:7e:bb:6a:e5:36:c0:3a:d7:97:c7:5c:75:40: 17:98:5a:97:fc:90:af:23:9c:2a:4e:60:26:0c:72:13:1c:92: 6f:f7:fb:2c:7f:df:7f:1a:83:d3:8c:3a:b7:b2:57:17:16:cd: c9:1c:0d:35:6c:dd:1d:60:ee:53:41:9e:aa:8b:4f:d5:41:65: 96:b4:bd:f6:41:0a:50:ed:46:58:c2:50:17:99:28:6a:13:90: 36:64:94:c4:d0:dd:ae:dc:4f:02:c3:89:a4:a4:87:8e:18:ce: 48:61:8d:f7:36:5c:df:0d:e7:9c:d8:f2:74:2d:7f:fb:86:d8: 6d:e2:9d:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3QTIxMTAvBgNVBAUTKDQzODJGOUFBMzAxNkZDQkYzMUY5MjRDRjEzMkU5NUJG OTI3MDlBREQwHhcNMjUwODA5MDQ0OTU4WhcNMjUwODE2MDQ0OTU4WjAYMRYwFAYD VQQDEw02ODk2ZDM3Ny0xNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKfhzgEGiMpcxdnzWYm6/rghEHOFGXTSok68HNo3F7wnDeEpecFjdtA+MfeO gKIzYNFLjRCS+VZthgDc8g/qQ7YaxS0954qWCC/hrTfDSQ+d0Kdj4C1CPCKDQHOF vzp4XVEqtqyUstjAWcmm8HpJwhNOq/eTaeUVhrAo3jyDcPRaMq5d2wZmjNPQ7cqw iDgHZeGWHl2G5m/Zsa2gIvLVHqy7e/oEukRrtboQ5hgxsBk3r+TvfMCNIx5Sk9u7 kgi7uJv2H87BhO+yvyyNBH3zLZffyZWZmvin2Jmr6mwWgPe0cHl2TeSV4XYzj55J /6uDyM2vGhg1yaOIeNa/8tS0cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTGNV8C fJ0MpLbNnpe3GE6ume+JMB8GA1UdIwQYMBaAFEOC+aowFvy/MfkkzxMulb+ScJrd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzdBMi80OUU2RTNENjkz M0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19MOHgtU1RQRXk2VnY1Sndt dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0TDVxakFXX0w4eC1TVFBFeTZWdjVKd210MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzdBMi80OUU2RTNENjkzM0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19M OHgtU1RQRXk2VnY1SndtdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHF6Xs1z3h8eJrLScbVmcn/odtm79Fv8UYjrZ1H9qI5cwJ8YrNCsvJ 4a6YnbZoROQdIfCrCtSn8s8+Y+sWm2pixg8wHxDggDCy1n/Z/c7u+tvqqpAJlYk5 35h9vBjK5lUvei8XkDnEpktBLepkf6cga1jdiyNFix2kQcMpo9yLLhXFlH67auU2 wDrXl8dcdUAXmFqX/JCvI5wqTmAmDHITHJJv9/ssf99/GoPTjDq3slcXFs3JHA01 bN0dYO5TQZ6qi0/VQWWWtL32QQpQ7UZYwlAXmShqE5A2ZJTE0N2u3E8Cw4mkpIeO GM5IYY33NlzfDeec2PJ0LX/7htht4p07 -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:35 2025 by rpki-client