$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json) Hash identifier: K9x5STP2+5v9MuHK+8oUjOPAGQiz18FnlkA8Ws484II= Subject key identifier: 28:65:DC:F3:5E:0F:C0:AC:70:5A:18:A0:C3:D5:FA:D7:92:55:94:2A Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft Manifest number: 031F Signing time: Sat 09 Aug 2025 01:42:25 +0000 Manifest this update: Sat 09 Aug 2025 01:42:25 +0000 Manifest next update: Sat 16 Aug 2025 01:42:25 +0000 Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: Pta0bapLi+7ZIbN+UD3swsGlcYSH4J5cetKwyD1NN0Y=) 2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: C9cBIgp62dlijuyH/TsefWQ1spYTduwHvoUlA7V/520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Validity Not Before: Aug 9 01:42:25 2025 GMT Not After : Aug 16 01:42:25 2025 GMT Subject: CN=6896a781-71a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:44:35:5f:a7:ea:d2:6a:03:a9:02:78:84:ec: 81:a7:84:31:2f:cf:85:aa:95:a1:db:81:0a:98:a7: 7c:c9:54:98:2e:30:b8:1b:a2:3b:79:47:5b:9e:0b: 83:e8:5b:de:29:3e:41:34:90:12:49:ff:fc:07:cc: 38:21:5e:61:f4:6d:54:39:61:2f:44:4f:16:a2:5c: a0:34:96:fb:53:f3:5e:d4:1e:00:27:0a:73:8f:97: 11:b9:d0:7b:69:b1:84:5a:93:05:c6:4c:88:73:27: cb:e1:35:cc:42:17:91:02:7c:29:10:c5:ce:04:32: 37:76:6c:bb:42:7f:05:d7:d9:fd:14:d6:15:f7:21: 41:1b:3a:73:4c:14:f5:ce:bc:ad:b3:3a:af:cd:96: 38:5b:81:ec:c0:c4:00:32:66:6c:23:f5:d5:fb:dc: b1:a2:d7:cb:13:e8:2d:f0:ca:d8:55:5c:52:17:74: e7:07:d6:47:1d:64:50:e5:22:f9:a5:0f:aa:7a:a5: 7d:d1:c2:d4:ae:36:06:1a:d3:61:31:1e:e5:85:f8: 54:63:5b:57:12:ae:e6:2d:34:f2:16:f8:ae:03:fb: 47:03:2e:3e:5f:d4:ed:5d:8f:c2:2b:b9:2f:87:e7: 76:98:6a:3e:8a:aa:04:f6:1c:c3:54:38:62:37:b9: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:DC:F3:5E:0F:C0:AC:70:5A:18:A0:C3:D5:FA:D7:92:55:94:2A X509v3 Authority Key Identifier: keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:3d:4a:91:d7:37:93:1e:a0:65:7e:2c:10:3a:06:63:8f:51: 5a:16:af:72:19:cf:eb:ad:de:8f:f5:a6:3a:0e:89:a5:86:cb: 0b:8c:ea:4e:56:14:f2:c2:b0:fa:e7:d4:39:b1:95:d0:66:7b: 8a:15:db:47:00:1c:8d:c8:2f:d7:cd:36:c2:1f:70:f5:9e:de: 66:51:4d:ae:f5:44:6e:3f:87:34:57:07:03:95:2d:05:09:94: cd:1b:ad:b6:aa:3f:a9:eb:34:7a:7c:07:b6:90:ff:5e:eb:c4: 64:a8:67:78:ef:81:4f:57:fd:fd:c8:51:73:63:1a:18:70:3a: 40:2e:d6:9d:bd:bf:57:a2:ba:db:2b:ba:04:b2:b1:d3:d5:ec: 23:b5:ed:7c:d3:58:ab:24:ec:b3:c7:8e:61:b6:30:a7:28:c9: eb:7f:a0:c6:d7:cd:8c:25:e8:b7:20:e8:65:14:5b:b3:b2:ae: 1d:a0:5a:64:c9:69:43:c5:72:be:07:dc:ce:78:5f:b1:42:05: 6e:c1:23:64:3c:fa:18:c9:c8:11:f7:df:05:43:bf:68:1a:5a: 7f:6d:ef:d4:08:34:89:e0:10:85:ec:53:2f:fd:b6:82:76:02: 54:98:25:cc:14:03:48:9b:8f:68:49:0d:44:91:e4:3c:23:75: f8:e2:43:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4 NEQ5NzYwREQwHhcNMjUwODA5MDE0MjI1WhcNMjUwODE2MDE0MjI1WjAYMRYwFAYD VQQDEw02ODk2YTc4MS03MWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kQ1X6fq0moDqQJ4hOyBp4QxL8+FqpWh24EKmKd8yVSYLjC4G6I7eUdbnguD 6FveKT5BNJASSf/8B8w4IV5h9G1UOWEvRE8WolygNJb7U/Ne1B4AJwpzj5cRudB7 abGEWpMFxkyIcyfL4TXMQheRAnwpEMXOBDI3dmy7Qn8F19n9FNYV9yFBGzpzTBT1 zrytszqvzZY4W4HswMQAMmZsI/XV+9yxotfLE+gt8MrYVVxSF3TnB9ZHHWRQ5SL5 pQ+qeqV90cLUrjYGGtNhMR7lhfhUY1tXEq7mLTTyFviuA/tHAy4+X9TtXY/CK7kv h+d2mGo+iqoE9hzDVDhiN7no6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChl3PNe D8CscFoYoMPV+teSVZQqMB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3 LUNicDR3d0xlVUNFMlhZTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDPUqR1zeTHqBlfiwQOgZjj1FaFq9yGc/rrd6P9aY6DomlhssLjOpO VhTywrD659Q5sZXQZnuKFdtHAByNyC/XzTbCH3D1nt5mUU2u9URuP4c0VwcDlS0F CZTNG622qj+p6zR6fAe2kP9e68RkqGd474FPV/39yFFzYxoYcDpALtadvb9Xorrb K7oEsrHT1ewjte1801irJOyzx45htjCnKMnrf6DG182MJei3IOhlFFuzsq4doFpk yWlDxXK+B9zOeF+xQgVuwSNkPPoYycgR998FQ79oGlp/be/UCDSJ4BCF7FMv/baC dgJUmCXMFANIm49oSQ1EkeQ8I3X44kPq -----END CERTIFICATE-----Generated at Sun Aug 10 05:46:21 2025 by rpki-client