$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: FtItAngAjNAbTwcgun7FvtreimTs3JxzONkKPcnifrs= Subject key identifier: 26:8A:BF:B2:25:6A:F0:0A:12:BB:FC:40:79:F2:D4:7C:BE:D2:57:49 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0C63 Signing time: Sun 10 Aug 2025 18:23:47 +0000 Manifest this update: Sun 10 Aug 2025 18:23:46 +0000 Manifest next update: Sun 17 Aug 2025 18:23:46 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: vonOVw7UZFRcrpdJZtYejEqsCLci/HLL1yNE2jJGAKI=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: l5CGLlauMb+Ni/lNc+v9jsE4+D1HZp9e9rAFpWt3fHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Aug 10 18:23:46 2025 GMT Not After : Aug 17 18:23:46 2025 GMT Subject: CN=6898e3b2-e20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:56:cc:6c:54:15:1a:c9:9a:17:b5:d5:33: 7a:5e:c3:4f:d6:e3:8b:6e:a5:14:15:fd:39:f1:ef: 44:e9:e9:ff:0b:fd:a2:a5:c7:d6:39:79:1d:f5:8f: 06:57:97:93:82:a2:76:bd:c2:04:6c:66:aa:f6:cd: 8b:7f:54:b0:dd:b2:d7:d4:f9:9d:79:c2:11:20:7e: 8c:89:01:95:8a:bb:43:a0:bb:0c:5f:06:84:95:30: 7a:3a:6c:dc:15:40:19:8e:73:38:35:13:df:5d:65: f3:9a:7b:c3:34:12:bf:f6:9e:5a:54:8c:8f:a5:06: 8f:be:23:48:3a:80:3d:b4:ad:df:57:a8:4e:28:6a: cc:da:94:e6:9a:ae:7b:f5:4a:cf:cb:09:e2:a6:6f: 84:10:ac:df:98:22:47:52:9e:4c:a8:d5:1b:ef:6e: b7:f2:20:1c:25:bd:16:76:63:c5:c1:9e:73:0d:28: 9b:e7:51:cc:9b:28:0b:ef:09:f1:b5:95:02:53:2c: 18:9d:fe:e1:b2:53:39:4c:e2:b9:b8:02:bf:36:d2: 0a:49:0c:41:80:be:d9:58:1f:3a:f0:eb:fb:8a:ce: 50:51:19:bf:e3:bb:8a:bc:fc:19:d6:4b:2e:c9:bc: 9c:5c:44:34:ae:d2:87:32:3a:40:92:fb:5f:3b:c2: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:BF:B2:25:6A:F0:0A:12:BB:FC:40:79:F2:D4:7C:BE:D2:57:49 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e8:f4:10:88:ef:32:b3:b1:25:64:49:18:e5:32:71:18:fd: d0:3c:2f:8e:66:4b:24:a5:cb:1f:87:a8:14:24:24:e6:8f:a5: c7:39:65:f5:8b:14:18:3c:c9:3a:9b:43:c8:ce:08:39:2f:94: ce:e4:5d:9a:0f:ef:d4:24:93:54:0b:de:87:45:59:7b:af:b7: bb:84:a4:6b:05:04:b7:34:da:60:0a:20:82:e0:b1:61:c6:50: 0d:28:e5:6c:34:34:bc:ed:1d:c5:de:1a:b8:b4:57:52:d4:43: de:8d:dc:3b:58:f7:3a:81:98:29:79:cf:52:29:d0:c7:e9:a1: 45:d9:08:85:a0:bb:3b:d0:9e:90:64:d5:66:60:10:f9:bf:80: bb:21:7f:a6:f6:4d:31:64:b1:bb:f7:86:b0:6f:17:da:56:53: 86:0b:86:c9:42:4f:bf:b7:94:34:30:72:88:8a:f6:c2:7b:b0: 5b:bc:d2:c9:b2:d0:bb:e8:45:33:a4:a1:6a:cc:43:b8:79:a3: 27:7d:8f:38:44:f8:e1:4b:31:ff:9f:28:24:7f:e0:c3:63:d9: 00:87:48:f4:9b:7a:91:b7:3d:6a:9e:6d:07:b3:02:a4:23:c9: ed:0d:17:26:7d:f8:af:26:58:13:81:83:80:f0:0c:b2:1f:7c: b7:06:41:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjUwODEwMTgyMzQ2WhcNMjUwODE3MTgyMzQ2WjAYMRYwFAYD VQQDEw02ODk4ZTNiMi1lMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJBWzGxUFRrJmhe11TN6XsNP1uOLbqUUFf058e9E6en/C/2ipcfWOXkd9Y8G V5eTgqJ2vcIEbGaq9s2Lf1Sw3bLX1PmdecIRIH6MiQGVirtDoLsMXwaElTB6Omzc FUAZjnM4NRPfXWXzmnvDNBK/9p5aVIyPpQaPviNIOoA9tK3fV6hOKGrM2pTmmq57 9UrPywnipm+EEKzfmCJHUp5MqNUb72638iAcJb0WdmPFwZ5zDSib51HMmygL7wnx tZUCUywYnf7hslM5TOK5uAK/NtIKSQxBgL7ZWB868Ov7is5QURm/47uKvPwZ1ksu ybycXEQ0rtKHMjpAkvtfO8K3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaKv7Il avAKErv8QHny1Hy+0ldJMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6PQQiO8ys7ElZEkY5TJxGP3QPC+OZkskpcsfh6gUJCTmj6XHOWX1 ixQYPMk6m0PIzgg5L5TO5F2aD+/UJJNUC96HRVl7r7e7hKRrBQS3NNpgCiCC4LFh xlANKOVsNDS87R3F3hq4tFdS1EPejdw7WPc6gZgpec9SKdDH6aFF2QiFoLs70J6Q ZNVmYBD5v4C7IX+m9k0xZLG794awbxfaVlOGC4bJQk+/t5Q0MHKIivbCe7BbvNLJ stC76EUzpKFqzEO4eaMnfY84RPjhSzH/nygkf+DDY9kAh0j0m3qRtz1qnm0HswKk I8ntDRcmffivJlgTgYOA8AyyH3y3BkEZ -----END CERTIFICATE-----Generated at Mon Aug 11 08:57:18 2025 by rpki-client