$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json) Hash identifier: XyKoNDk+5Ss5yjj6EVKAwqanvA/wBZYV83VfDm19YK4= Subject key identifier: 37:A0:BB:FD:19:5F:1C:EE:4E:CB:78:A9:14:86:24:B0:E5:BE:59:9B Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft Manifest number: 27 Signing time: Sat 09 Aug 2025 08:17:25 +0000 Manifest this update: Sat 09 Aug 2025 08:17:25 +0000 Manifest next update: Sat 16 Aug 2025 08:17:25 +0000 Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: +hFqBR8rxIxpoiAL2lTmzk1ig6KQ7SN46mtW6f3f1bE=) 2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: jPnHx/VwrEHzMcIk6hG/2vteGtB6XZZVA832ptEHOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Validity Not Before: Aug 9 08:17:25 2025 GMT Not After : Aug 16 08:17:25 2025 GMT Subject: CN=68970415-6a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:94:df:44:17:94:9a:79:6b:e5:07:b6:b1: 85:07:a9:42:7e:55:70:df:77:dc:cd:72:f9:00:bc: c4:86:60:32:f3:f6:19:42:ba:ad:82:b1:15:a0:b6: 27:2f:0c:22:a6:a0:49:06:ab:b6:fc:45:2d:87:2e: 25:dd:ba:b8:36:25:ac:1c:88:f2:e6:13:49:13:34: ac:c6:75:6d:6a:ec:24:a3:78:a3:c6:02:fb:1d:8a: 20:e9:61:5e:70:7d:19:02:b1:9d:d3:88:b1:ab:9d: 5d:45:f4:a2:43:29:f8:b5:ad:eb:46:b2:61:3e:c7: ad:dd:ba:cf:18:5d:9a:93:07:f8:27:d0:72:ca:1d: 31:82:d3:2d:d0:9d:53:bf:f1:07:86:45:a6:68:bc: 7c:6d:41:91:c4:91:99:77:84:ab:31:4c:7d:df:44: 7c:39:ac:57:ca:ab:e6:2d:7a:3f:25:8c:61:09:61: 6f:c4:04:0d:dc:94:da:c2:44:75:ff:b4:ae:b8:5c: 3a:32:74:60:8b:bc:34:55:61:e9:d6:3a:a4:a5:62: ef:14:87:42:b4:fb:42:63:ed:5f:ac:97:ce:97:ad: 23:1b:bc:aa:54:2d:f8:f1:df:c7:93:20:e8:a6:61: 4a:94:cb:c7:3e:37:ec:7d:01:0b:56:53:5e:6a:53: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:BB:FD:19:5F:1C:EE:4E:CB:78:A9:14:86:24:B0:E5:BE:59:9B X509v3 Authority Key Identifier: keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:02:6d:d9:30:eb:79:d4:90:f5:a4:c1:74:39:69:c7:33:de: 13:98:40:f6:50:f6:03:f4:f7:62:58:47:33:d1:40:81:d0:ae: ce:23:9a:ed:5c:52:20:65:a5:d4:4f:01:80:ee:ee:52:88:29: c4:61:bf:10:97:15:7d:05:9c:64:33:2b:b2:3e:32:6b:9b:9a: f6:24:96:f7:19:ce:f5:e6:d9:23:b6:8e:04:14:75:7d:e2:aa: 75:b6:c2:3d:05:f8:3d:24:63:9c:a0:41:59:09:e5:54:f8:47: bc:16:09:81:3c:79:64:01:c0:14:f3:5c:80:f6:34:a4:99:ec: bf:3c:56:bf:3f:5e:21:8a:48:d5:3e:2a:c8:e4:b4:db:01:2c: 5c:65:24:55:b7:49:3f:55:bc:f1:ac:d8:4a:7b:09:a9:aa:71: a0:62:2d:69:0f:bb:8a:d5:53:a1:07:5e:af:0e:77:b2:f3:33: 3e:44:93:9c:89:13:19:0d:8b:84:eb:35:a9:4c:5d:c4:7e:d2: 08:8d:76:2c:0a:50:cc:e4:db:28:a2:2c:48:6b:48:5f:a0:3c: aa:71:8a:bf:94:66:52:96:0e:8e:3b:55:af:5c:d2:75:34:d8: 94:01:40:a2:2f:11:4e:b3:88:50:91:70:14:e4:42:9b:1a:62: 6d:a1:5d:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTdGNDE5MjUxQTc5NjFERjI3NEQzOUI1MzRBMjJGM0VD REIzMTAyRjAeFw0yNTA4MDkwODE3MjVaFw0yNTA4MTYwODE3MjVaMBgxFjAUBgNV BAMTDTY4OTcwNDE1LTZhODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrp5TfRBeUmnlr5Qe2sYUHqUJ+VXDfd9zNcvkAvMSGYDLz9hlCuq2CsRWgticv DCKmoEkGq7b8RS2HLiXdurg2JawciPLmE0kTNKzGdW1q7CSjeKPGAvsdiiDpYV5w fRkCsZ3TiLGrnV1F9KJDKfi1retGsmE+x63dus8YXZqTB/gn0HLKHTGC0y3QnVO/ 8QeGRaZovHxtQZHEkZl3hKsxTH3fRHw5rFfKq+Ytej8ljGEJYW/EBA3clNrCRHX/ tK64XDoydGCLvDRVYenWOqSlYu8Uh0K0+0Jj7V+sl86XrSMbvKpULfjx38eTIOim YUqUy8c+N+x9AQtWU15qU7xRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN6C7/Rlf HO5Oy3ipFIYksOW+WZswHwYDVR0jBBgwFoAU5/QZJRp5Yd8nTTm1NKIvPs2zEC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzRGNDBCRTZDM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNV9RWkpScDVZZDhuVFRtMU5LSXZQczJ6RUM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzRGNDBCRTZDM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4 blRUbTFOS0l2UHMyekVDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIsCbdkw63nUkPWkwXQ5accz3hOYQPZQ9gP092JYRzPRQIHQrs4jmu1c UiBlpdRPAYDu7lKIKcRhvxCXFX0FnGQzK7I+MmubmvYklvcZzvXm2SO2jgQUdX3i qnW2wj0F+D0kY5ygQVkJ5VT4R7wWCYE8eWQBwBTzXID2NKSZ7L88Vr8/XiGKSNU+ KsjktNsBLFxlJFW3ST9VvPGs2Ep7CamqcaBiLWkPu4rVU6EHXq8Od7LzMz5Ek5yJ ExkNi4TrNalMXcR+0giNdiwKUMzk2yiiLEhrSF+gPKpxir+UZlKWDo47Va9c0nU0 2JQBQKIvEU6ziFCRcBTkQpsaYm2hXWg= -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:12 2025 by rpki-client