$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json) Hash identifier: yl5mWI7qGUfNSi2BBCWbC9YpVzivvmpTOlzOgswzqO0= Subject key identifier: D6:44:84:85:F0:32:10:11:BF:F8:2F:3C:0F:E9:6E:1E:6C:5F:72:E6 Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59 Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft Manifest number: 040F Signing time: Wed 13 Aug 2025 00:55:31 +0000 Manifest this update: Wed 13 Aug 2025 00:55:30 +0000 Manifest next update: Wed 20 Aug 2025 00:55:30 +0000 Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: 7QL702sKiN8bf/HocAgTYqDFFtt2zR3OuDNpwtpEFWk=) 2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: vev8cF3wVonEj/spB6AbH6AE+o8N+kb1JbFrPlAS1N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259 Validity Not Before: Aug 13 00:55:30 2025 GMT Not After : Aug 20 00:55:30 2025 GMT Subject: CN=689be282-e57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:b4:a2:7f:42:bd:1b:11:38:e9:c9:55:92: 03:6c:40:09:0f:1e:53:6e:60:a0:4f:73:e7:35:b0: ec:e1:a6:cc:f2:c6:6a:fd:52:f9:82:6e:9e:5c:70: 16:7b:6a:71:a5:5e:3d:9e:3c:6f:91:7f:17:e5:a4: b5:32:88:ce:fa:26:ae:79:75:32:3c:76:1b:aa:b6: 04:84:6e:b6:8a:55:05:ed:b3:fd:21:54:1f:d3:0c: c7:1f:1f:14:16:70:03:80:01:9c:79:30:95:47:f2: ca:94:80:36:d9:57:93:a3:d4:fe:55:37:ea:5c:ca: 20:77:dd:d2:b6:1d:fb:e7:ab:b1:d9:9e:08:f3:09: d0:08:eb:6c:1a:0f:02:63:77:cc:7a:02:a9:95:bd: a3:b6:f2:92:a0:5c:13:85:76:5d:30:83:aa:12:00: 15:fb:32:5d:25:39:83:cc:57:aa:e2:7b:d8:a1:6b: cd:bd:00:a9:5c:3d:f1:33:4e:a6:6c:92:91:c7:d2: fc:e7:d0:94:df:d0:1e:67:0c:5f:3f:76:df:99:fe: eb:4e:20:51:7c:98:f1:e5:d5:0f:11:66:a0:93:03: 68:8b:69:1f:79:35:34:e7:70:08:4a:00:17:e5:14: 30:1b:98:4c:67:47:3d:eb:23:9d:17:7c:54:54:39: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:84:85:F0:32:10:11:BF:F8:2F:3C:0F:E9:6E:1E:6C:5F:72:E6 X509v3 Authority Key Identifier: keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b4:b3:50:74:f0:ed:b7:86:b2:62:49:7c:d6:91:0e:d1:42: 67:62:82:3c:a3:d6:42:71:e7:ee:dc:e9:2c:ac:f9:59:59:a3: a5:f2:27:7f:ec:50:58:0b:6f:51:be:9b:3a:14:f4:5c:bb:68: cf:e2:78:7e:94:84:17:38:89:dd:2c:d1:00:3d:48:64:59:97: 6f:d0:ec:34:26:b6:28:de:38:41:31:ad:bf:4b:90:91:a4:a6: ae:4b:e6:7a:8f:3e:b2:39:5c:94:cd:a1:04:f2:3c:b4:25:e4: bd:6e:de:3a:a2:82:1f:af:af:15:93:7a:09:ce:a5:78:4f:1f: 18:d8:05:db:7e:f9:79:91:0a:dd:f0:7e:47:c2:21:d6:a7:81: f5:20:0b:28:d1:be:a9:35:23:a7:36:d9:a6:27:ed:61:ec:e8: 62:d4:d9:83:51:3a:80:06:c3:50:04:d9:42:10:83:15:89:48: ac:65:db:08:d4:68:8d:06:f5:b2:b4:e3:cd:0c:64:af:e6:cb: de:0b:a0:f7:b7:cb:ff:88:25:6b:e8:54:08:0d:b2:53:2f:04: 3d:75:cc:01:14:8b:b8:62:49:ee:b2:1b:02:75:25:6a:e7:88: 84:df:51:01:ea:5e:9a:14:02:b4:1d:aa:b5:43:90:0e:57:86: 0e:22:48:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA4RTExMTAvBgNVBAUTKDQwOUQwMTFFODkzRkQ4QzhGMEIzRThBQzE0NjkyQUE3 QkI5RDAyNTkwHhcNMjUwODEzMDA1NTMwWhcNMjUwODIwMDA1NTMwWjAYMRYwFAYD VQQDEw02ODliZTI4Mi1lNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Mi0on9CvRsROOnJVZIDbEAJDx5TbmCgT3PnNbDs4abM8sZq/VL5gm6eXHAW e2pxpV49njxvkX8X5aS1MojO+iaueXUyPHYbqrYEhG62ilUF7bP9IVQf0wzHHx8U FnADgAGceTCVR/LKlIA22VeTo9T+VTfqXMogd93Sth3756ux2Z4I8wnQCOtsGg8C Y3fMegKplb2jtvKSoFwThXZdMIOqEgAV+zJdJTmDzFeq4nvYoWvNvQCpXD3xM06m bJKRx9L859CU39AeZwxfP3bfmf7rTiBRfJjx5dUPEWagkwNoi2kfeTU053AISgAX 5RQwG5hMZ0c96yOdF3xUVDn87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZEhIXw MhARv/gvPA/pbh5sX3LmMB8GA1UdIwQYMBaAFECdAR6JP9jI8LPorBRpKqe7nQJZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDhFMS9GOTBGOUU4ODdF ODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJNandzLWlzRkdrcXA3dWRB bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKMEJIb2tfMk1qd3MtaXNGR2txcDd1ZEFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDhFMS9GOTBGOUU4ODdFODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJN andzLWlzRkdrcXA3dWRBbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYtLNQdPDtt4ayYkl81pEO0UJnYoI8o9ZCcefu3OksrPlZWaOl8id/ 7FBYC29Rvps6FPRcu2jP4nh+lIQXOIndLNEAPUhkWZdv0Ow0JrYo3jhBMa2/S5CR pKauS+Z6jz6yOVyUzaEE8jy0JeS9bt46ooIfr68Vk3oJzqV4Tx8Y2AXbfvl5kQrd 8H5HwiHWp4H1IAso0b6pNSOnNtmmJ+1h7Ohi1NmDUTqABsNQBNlCEIMViUisZdsI 1GiNBvWytOPNDGSv5sveC6D3t8v/iCVr6FQIDbJTLwQ9dcwBFIu4YknushsCdSVq 54iE31EB6l6aFAK0Haq1Q5AOV4YOIkj6 -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:29 2025 by rpki-client