$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: Lvxcm/kTw1g8ABlZSDwLBF0h9pHF3apDSXxDyficfYQ= Subject key identifier: 3E:D6:2C:16:F4:55:61:CD:53:D9:09:86:CA:A1:E1:FB:C1:DC:EA:E7 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2DFE Signing time: Sat 14 Jun 2025 15:28:22 +0000 Manifest this update: Sat 14 Jun 2025 15:28:21 +0000 Manifest next update: Sat 21 Jun 2025 15:28:21 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: 4OpgQWW3VdxoMwJjD3X/Hm84fywiDytKmBtPoH90oIM=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11787 (0x2e0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Jun 14 15:28:21 2025 GMT Not After : Jun 21 15:28:21 2025 GMT Subject: CN=684d9516-0d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:d6:c1:87:27:4b:79:c6:bd:98:4f:3b:4e: a5:07:e2:69:32:7f:db:2c:f4:43:2f:6c:fd:81:f0: c3:bd:f1:08:67:c6:c4:f4:68:71:cd:1a:3f:dc:2b: c1:67:c2:38:9f:49:96:9c:86:66:27:25:0b:67:87: 29:e1:8b:43:5e:cd:d0:5f:44:7d:89:99:f6:d4:c2: 9c:ff:fe:a9:64:91:7d:4a:f1:56:9e:88:99:4a:f2: 80:b0:a6:01:be:43:08:85:26:8b:f5:98:fd:d0:d4: f7:de:f0:f4:e1:af:41:fc:ce:28:de:78:33:33:47: f9:79:99:47:8d:92:5e:f8:42:c3:0b:7f:5d:08:ce: f4:89:99:7a:a0:5e:dd:99:ad:6a:37:ad:bc:de:a0: 79:d3:ad:70:2c:68:9e:35:e6:56:aa:7e:e9:08:b6: 60:3c:69:02:0c:5c:19:be:88:b8:7d:ca:fa:c2:df: 50:31:25:d0:15:a7:e0:97:c7:4a:5a:bc:87:73:b5: 03:18:26:28:34:90:67:a6:d7:c0:21:6f:65:21:f1: 0e:38:e1:af:68:45:f7:cb:af:5f:b4:7d:ec:31:de: ee:fd:68:d6:f7:6c:36:2b:bc:21:5c:b4:78:bd:80: fd:a9:a0:1c:cf:28:3e:f1:b8:9c:7b:7e:9a:7d:41: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:2C:16:F4:55:61:CD:53:D9:09:86:CA:A1:E1:FB:C1:DC:EA:E7 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:bf:34:4b:50:bb:97:ff:86:9d:c6:94:c5:c8:c4:60:81:f1: ad:4a:5c:61:44:ef:81:a7:b8:b8:b8:3a:e5:bf:c6:f0:7f:57: 3d:1a:0d:08:96:bc:89:94:c9:ea:8a:af:c1:ee:80:c2:98:05: 49:d7:91:53:3d:54:59:9f:06:b9:8f:f4:48:0d:51:0b:80:cf: 49:cd:2f:82:05:51:be:74:d0:a5:38:a1:b7:d9:86:87:13:49: cc:ea:67:9e:db:f3:a5:67:bc:85:e3:85:e8:99:fd:9c:98:a9: 3c:7c:24:bb:a8:92:b6:9f:dd:a7:b2:d3:3a:83:6a:17:ea:14: ea:80:60:b1:6f:84:96:69:10:25:f4:63:44:e7:f0:c6:8d:f5: 72:79:dc:3a:28:b0:3a:fb:77:f3:41:ed:07:49:76:17:98:1f: ee:9f:34:e6:57:3a:e8:65:f0:43:53:b0:c7:81:75:fc:79:e9: 5a:fd:bc:3e:b3:ab:d5:19:a6:0e:e0:2b:85:ae:15:d4:6f:5c: f7:ab:49:ca:df:66:9e:8b:c4:b4:00:80:3f:fd:2b:78:92:bc: aa:a5:e6:cd:eb:61:2f:44:a3:1f:2b:35:2f:d2:a4:21:c2:24: 97:5d:26:e7:56:eb:04:cc:45:4a:9f:6c:67:be:1a:2d:00:5b: a1:86:42:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwNjE0MTUyODIxWhcNMjUwNjIxMTUyODIxWjAYMRYwFAYD VQQDEw02ODRkOTUxNi0wZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5DWwYcnS3nGvZhPO06lB+JpMn/bLPRDL2z9gfDDvfEIZ8bE9GhxzRo/3CvB Z8I4n0mWnIZmJyULZ4cp4YtDXs3QX0R9iZn21MKc//6pZJF9SvFWnoiZSvKAsKYB vkMIhSaL9Zj90NT33vD04a9B/M4o3ngzM0f5eZlHjZJe+ELDC39dCM70iZl6oF7d ma1qN6283qB5061wLGieNeZWqn7pCLZgPGkCDFwZvoi4fcr6wt9QMSXQFafgl8dK WryHc7UDGCYoNJBnptfAIW9lIfEOOOGvaEX3y69ftH3sMd7u/WjW92w2K7whXLR4 vYD9qaAczyg+8bice36afUGP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7WLBb0 VWHNU9kJhsqh4fvB3OrnMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkvzRLULuX/4adxpTFyMRggfGtSlxhRO+Bp7i4uDrlv8bwf1c9Gg0I lryJlMnqiq/B7oDCmAVJ15FTPVRZnwa5j/RIDVELgM9JzS+CBVG+dNClOKG32YaH E0nM6mee2/OlZ7yF44Xomf2cmKk8fCS7qJK2n92nstM6g2oX6hTqgGCxb4SWaRAl 9GNE5/DGjfVyedw6KLA6+3fzQe0HSXYXmB/unzTmVzroZfBDU7DHgXX8eela/bw+ s6vVGaYO4CuFrhXUb1z3q0nK32aei8S0AIA//St4kryqpebN62EvRKMfKzUv0qQh wiSXXSbnVusEzEVKn2xnvhotAFuhhkIl -----END CERTIFICATE-----Generated at Sun Jun 15 10:07:50 2025 by rpki-client