$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: P04vHOinoig+fvE1SeWLComs6xPB7e4q9i2iReL6B0g= Subject key identifier: E4:66:5D:53:D0:C3:F7:2F:35:26:24:16:2E:FF:0F:FE:71:40:72:61 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 028C Signing time: Mon 11 Aug 2025 01:52:28 +0000 Manifest this update: Mon 11 Aug 2025 01:52:28 +0000 Manifest next update: Mon 18 Aug 2025 01:52:28 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: 6AdgrDxRymEAtj11QDy8Goes9fI2QeblVhCu83qnpKY=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Aug 11 01:52:28 2025 GMT Not After : Aug 18 01:52:28 2025 GMT Subject: CN=68994cdc-e967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:60:11:e8:6d:18:79:c8:8d:7c:38:c5:dc: ee:f4:57:ca:2c:38:9d:b2:79:9a:a6:1e:ea:31:23: 66:18:fc:54:92:c6:45:be:be:da:3c:98:81:c7:06: d2:e8:89:bb:5e:3b:0e:6d:f5:c5:47:2f:d3:e1:6c: 5c:5d:2d:64:f1:33:6c:e2:7f:69:a3:a3:2a:dd:53: 4a:17:f0:2d:30:1d:fb:b7:63:68:bf:36:c5:b5:2a: cf:2f:20:be:8a:81:f8:2a:42:71:d6:9d:1b:bc:62: 03:1f:a7:4a:1d:fb:e5:9e:b0:7d:48:b2:bb:a8:c7: 1d:1c:49:1e:df:f2:00:59:66:8c:80:d6:ee:a5:a0: aa:38:d7:4f:1c:46:03:42:10:c5:55:0c:c4:53:2b: 1c:fe:9a:67:c6:96:3d:ea:60:e7:87:ac:10:0e:64: 8c:e5:d6:cc:dd:9e:d2:36:62:2d:a1:d4:63:b9:dc: 51:46:88:bc:83:3f:49:62:7c:6c:25:ff:b8:17:40: e1:cb:f1:38:f6:5e:19:ba:47:28:ed:01:20:cc:b3: bb:07:1e:a5:70:2b:e0:43:04:f5:38:92:fe:2d:74: ce:e4:af:6e:f5:6b:d7:8e:93:24:d7:30:11:17:d8: a2:61:4f:bc:85:2a:8e:68:fa:20:2b:d2:4a:86:73: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:5D:53:D0:C3:F7:2F:35:26:24:16:2E:FF:0F:FE:71:40:72:61 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:82:47:18:8c:4a:c6:63:96:9f:a8:95:e9:13:af:bd:bb:03: 99:ba:c5:07:15:13:5b:a5:fc:f3:d3:74:92:9b:78:9d:d7:bf: dd:08:32:52:95:a4:8c:65:ed:72:75:d2:77:06:c4:75:a9:58: 33:1f:95:5a:ec:17:fc:5a:43:3a:66:d8:3d:a0:0a:c8:ed:1b: 41:1e:7d:96:1e:9e:af:fb:77:ca:b8:53:36:aa:6c:94:86:0d: 10:00:b3:5f:7f:75:4a:6c:26:61:cd:cb:74:8f:b7:1d:bb:d8: 7c:aa:0a:5a:00:42:0f:95:53:fe:ac:66:03:1f:a2:9c:6c:74: 27:13:ac:28:64:9b:00:cc:5e:05:db:24:62:3e:c2:19:54:b1: 74:c3:6a:1c:8f:41:b9:5d:6f:34:04:d3:16:5d:a5:93:82:47: ef:af:d4:28:f9:ef:a5:b7:74:f5:51:c6:2a:e9:1e:39:c9:52: a1:85:bd:cd:ef:f8:5a:d1:8d:f3:c5:54:86:0a:ec:66:0b:d0: 8e:ec:d9:7a:64:98:5d:59:41:ee:81:7e:4e:45:da:b6:90:a2: 14:46:fa:97:39:75:7f:ec:a8:46:93:17:1d:e4:26:c4:cf:ab: f6:53:25:15:d9:11:ac:c1:53:f5:8c:e9:5f:15:08:6c:3b:49: 23:44:34:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUwODExMDE1MjI4WhcNMjUwODE4MDE1MjI4WjAYMRYwFAYD VQQDEw02ODk5NGNkYy1lOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7ZgEehtGHnIjXw4xdzu9FfKLDidsnmaph7qMSNmGPxUksZFvr7aPJiBxwbS 6Im7XjsObfXFRy/T4WxcXS1k8TNs4n9po6Mq3VNKF/AtMB37t2NovzbFtSrPLyC+ ioH4KkJx1p0bvGIDH6dKHfvlnrB9SLK7qMcdHEke3/IAWWaMgNbupaCqONdPHEYD QhDFVQzEUysc/ppnxpY96mDnh6wQDmSM5dbM3Z7SNmItodRjudxRRoi8gz9JYnxs Jf+4F0Dhy/E49l4Zukco7QEgzLO7Bx6lcCvgQwT1OJL+LXTO5K9u9WvXjpMk1zAR F9iiYU+8hSqOaPogK9JKhnPo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORmXVPQ w/cvNSYkFi7/D/5xQHJhMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRgkcYjErGY5afqJXpE6+9uwOZusUHFRNbpfzz03SSm3id17/dCDJS laSMZe1yddJ3BsR1qVgzH5Va7Bf8WkM6Ztg9oArI7RtBHn2WHp6v+3fKuFM2qmyU hg0QALNff3VKbCZhzct0j7cdu9h8qgpaAEIPlVP+rGYDH6KcbHQnE6woZJsAzF4F 2yRiPsIZVLF0w2ocj0G5XW80BNMWXaWTgkfvr9Qo+e+lt3T1UcYq6R45yVKhhb3N 7/ha0Y3zxVSGCuxmC9CO7Nl6ZJhdWUHugX5ORdq2kKIURvqXOXV/7KhGkxcd5CbE z6v2UyUV2RGswVP1jOlfFQhsO0kjRDSh -----END CERTIFICATE-----Generated at Mon Aug 11 12:56:12 2025 by rpki-client