$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: HUBUYfF5MrehNUzzhuy3EEqS98R0zal296N1yiaE48o= Subject key identifier: 55:26:5A:11:15:AB:00:E3:A3:AB:22:37:59:F3:68:F5:31:1F:65:36 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 1862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 1857 Signing time: Fri 08 Aug 2025 16:40:07 +0000 Manifest this update: Fri 08 Aug 2025 16:40:06 +0000 Manifest next update: Fri 15 Aug 2025 16:40:06 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: BxTu/+Rh2btx5gFuWYLsVz5qStDB8K1gq9h6U49DwJc=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: WFmZvmOIKNk0az+zKPBYrOXakumFbE34A1nRoyLlGgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6242 (0x1862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Aug 8 16:40:06 2025 GMT Not After : Aug 15 16:40:06 2025 GMT Subject: CN=68962866-6761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:19:c9:b8:bb:df:b3:a0:d3:24:d3:56:be: 99:00:d1:84:91:02:c5:31:75:b4:ad:0d:67:03:db: e7:6c:37:b3:d3:14:4a:91:4c:e0:a8:3d:15:7c:29: e2:b7:c6:39:09:6f:cb:bc:6f:ae:e6:f3:eb:f3:68: 85:c7:bb:ac:a2:ef:fc:a1:1a:1c:e9:aa:d2:98:9f: 90:9f:4c:a7:48:dd:8e:a4:f6:46:cd:f4:c8:36:e4: d5:40:4a:b1:f6:41:bd:7c:26:62:f8:3a:bd:91:40: 0e:90:c4:7c:db:fc:28:91:e8:7a:99:e1:01:ff:5f: 64:d5:94:5d:5c:b4:3e:16:56:09:fe:dc:33:72:1e: b2:82:ed:98:fc:ca:e5:dc:a7:40:c5:8c:65:36:b1: c1:8e:cf:a1:ca:dd:6b:c3:46:fd:5d:e2:f8:b4:dd: 1d:dc:e1:12:c3:c0:bc:4f:55:eb:a9:ba:13:35:78: 9e:35:63:90:bc:39:06:ef:d2:c2:2b:31:fa:c4:c7: ce:32:9f:4b:c6:3a:c7:23:3a:42:22:52:9c:40:1a: 35:9d:1c:c0:49:7a:85:e9:d3:cf:c6:cc:04:c9:c1: 57:01:d8:d2:a8:ce:e8:02:cc:e1:72:22:33:ae:1c: e4:8b:d5:84:2d:20:69:0b:2e:8d:db:2f:dd:03:67: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:5A:11:15:AB:00:E3:A3:AB:22:37:59:F3:68:F5:31:1F:65:36 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1f:c1:d3:5d:d2:b8:b9:d2:b3:47:ba:a6:31:db:0a:e3:19: 44:ed:fa:82:04:d2:4c:93:20:10:28:a6:db:ab:3c:e8:34:26: e2:7f:d0:65:71:84:97:cf:39:49:6e:95:44:c1:ed:5d:f1:8b: 03:61:49:76:a5:ab:82:56:1e:c1:2c:ca:08:4f:35:c9:67:77: c6:f0:ea:4a:34:3e:e3:45:63:b3:47:53:30:35:c2:ec:aa:03: 92:f5:63:04:a0:97:d6:3f:7e:37:b9:ed:7e:05:32:e0:e6:2f: 61:82:81:ce:30:43:df:06:6c:1c:b2:3c:b5:8d:ad:87:33:6d: e8:f9:b2:cf:ae:34:68:eb:67:b7:57:db:6f:42:b3:23:2d:ff: 28:19:93:1e:ae:9a:92:ef:09:51:24:02:77:84:47:e4:ca:45: a1:87:ac:52:dc:95:64:68:c6:21:5e:43:08:94:eb:89:60:6a: 3a:7b:fe:27:83:79:42:61:96:91:75:26:46:b0:38:4c:6a:da: 1d:be:91:1b:12:ef:9a:bc:06:73:cc:f3:37:6c:eb:b6:0c:7e: 34:6a:d1:58:49:99:bd:51:2d:9b:b3:15:f1:2b:a6:80:69:aa: c8:94:60:49:f8:3a:2e:55:87:5f:7f:7f:ac:40:41:a3:84:a8: f0:f7:92:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUwODA4MTY0MDA2WhcNMjUwODE1MTY0MDA2WjAYMRYwFAYD VQQDEw02ODk2Mjg2Ni02NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/MZybi737Og0yTTVr6ZANGEkQLFMXW0rQ1nA9vnbDez0xRKkUzgqD0VfCni t8Y5CW/LvG+u5vPr82iFx7usou/8oRoc6arSmJ+Qn0ynSN2OpPZGzfTINuTVQEqx 9kG9fCZi+Dq9kUAOkMR82/wokeh6meEB/19k1ZRdXLQ+FlYJ/twzch6ygu2Y/Mrl 3KdAxYxlNrHBjs+hyt1rw0b9XeL4tN0d3OESw8C8T1XrqboTNXieNWOQvDkG79LC KzH6xMfOMp9LxjrHIzpCIlKcQBo1nRzASXqF6dPPxswEycFXAdjSqM7oAszhciIz rhzki9WELSBpCy6N2y/dA2e9qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUmWhEV qwDjo6siN1nzaPUxH2U2MB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuH8HTXdK4udKzR7qmMdsK4xlE7fqCBNJMkyAQKKbbqzzoNCbif9Bl cYSXzzlJbpVEwe1d8YsDYUl2pauCVh7BLMoITzXJZ3fG8OpKND7jRWOzR1MwNcLs qgOS9WMEoJfWP343ue1+BTLg5i9hgoHOMEPfBmwcsjy1ja2HM23o+bLPrjRo62e3 V9tvQrMjLf8oGZMerpqS7wlRJAJ3hEfkykWhh6xS3JVkaMYhXkMIlOuJYGo6e/4n g3lCYZaRdSZGsDhMatodvpEbEu+avAZzzPM3bOu2DH40atFYSZm9US2bsxXxK6aA aarIlGBJ+DouVYdff3+sQEGjhKjw95Ib -----END CERTIFICATE-----Generated at Sun Aug 10 03:50:14 2025 by rpki-client