$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: NajI0TurBAWgT6H3uafqETwN/Wajn2vAdvfZxI2iEwU= Subject key identifier: 8C:2A:CF:BC:E7:6A:71:4A:FF:FE:D5:46:46:F4:B3:3B:FC:55:88:1C Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 03B0 Signing time: Sat 09 Aug 2025 01:16:01 +0000 Manifest this update: Sat 09 Aug 2025 01:16:01 +0000 Manifest next update: Sat 16 Aug 2025 01:16:01 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: uhfpK/faYCyG81MHSJaLqbNpBZPxgglA7pnfTy1Dj2M=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Aug 9 01:16:01 2025 GMT Not After : Aug 16 01:16:01 2025 GMT Subject: CN=6896a151-4e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:be:1e:e1:a5:fb:ea:91:c4:59:70:f4:60: 37:7b:8f:c4:b9:1e:f9:0d:cc:d4:47:f1:3d:2b:f5: e9:31:0e:a1:22:3b:9b:c0:d5:93:ba:b5:63:b2:60: fe:62:94:80:c5:14:0d:85:68:67:6e:79:1e:a4:dc: 54:0f:c2:88:c6:f3:d7:31:29:b6:7c:0e:7e:34:1f: ee:c4:be:54:5f:31:42:c9:08:b4:61:f4:26:7a:c3: b7:f7:74:4d:d8:75:60:5c:c9:75:a7:c4:8c:24:8a: 98:bf:d2:4b:7a:bd:5c:5d:d9:2a:38:a0:27:98:a6: f3:29:51:b5:97:7c:69:5c:30:e8:4a:56:22:93:8b: a3:f7:df:b0:66:df:30:e9:51:33:9f:8d:1c:46:00: c4:77:04:74:fd:d8:e0:68:4f:33:57:b8:6c:e4:a7: 74:4a:e0:c6:76:dd:89:8e:6b:dd:12:75:b5:a2:73: dd:a2:9c:43:6b:f8:8b:56:20:bb:b5:fd:c4:22:55: d2:e2:7a:21:78:01:2a:92:c8:d9:4a:7a:a1:a3:54: 18:df:dc:3a:3c:dd:71:25:a4:d0:3c:b7:65:77:cc: 7a:0b:60:5d:b5:7e:d7:54:98:10:7b:39:45:c0:fe: b2:79:10:09:63:3e:32:24:11:50:9e:db:f0:42:ce: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:CF:BC:E7:6A:71:4A:FF:FE:D5:46:46:F4:B3:3B:FC:55:88:1C X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f4:5c:4c:f9:65:ea:b5:12:69:56:62:f5:a1:bf:ad:9d:a9: e5:12:09:bd:e1:fb:06:f8:a9:6f:90:d6:9f:0d:01:6b:02:72: cb:16:e0:69:ee:91:69:b4:be:eb:e4:87:8d:7e:56:f8:cf:77: 6b:82:68:fa:db:fa:a4:3f:00:4b:b1:8a:b7:38:ff:4c:81:2b: dd:61:f8:94:16:8f:93:29:a7:ce:dc:6d:66:36:b5:db:0d:ba: f5:d1:15:3b:70:bb:e0:d8:d5:b7:ad:0f:8e:6f:bb:8d:ac:d0: 22:66:fe:6b:aa:de:48:90:b9:1b:d6:50:37:fc:a8:b1:d1:74: b6:b2:61:04:c8:af:53:e2:1b:eb:22:e4:8d:f2:31:cd:12:6d: 27:0b:99:7c:31:2a:c5:ad:44:09:11:e5:2e:6a:bc:65:82:a7: e6:0a:3e:5f:57:1a:f2:b6:5e:94:b3:ef:e2:90:96:10:97:84: f6:76:03:61:b6:da:5b:84:19:54:70:3a:81:9d:50:89:2d:39: ac:c3:9f:53:30:e7:73:75:13:d1:d5:24:63:3c:99:7e:dd:be: 64:ba:c2:8e:87:c9:72:4a:ac:72:ee:1e:f3:32:6d:14:08:b3: b9:e3:07:07:d2:d3:4a:bc:ce:48:16:c6:7b:e8:93:5b:d1:ca: 63:b2:72:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUwODA5MDExNjAxWhcNMjUwODE2MDExNjAxWjAYMRYwFAYD VQQDEw02ODk2YTE1MS00ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bK+HuGl++qRxFlw9GA3e4/EuR75DczUR/E9K/XpMQ6hIjubwNWTurVjsmD+ YpSAxRQNhWhnbnkepNxUD8KIxvPXMSm2fA5+NB/uxL5UXzFCyQi0YfQmesO393RN 2HVgXMl1p8SMJIqYv9JLer1cXdkqOKAnmKbzKVG1l3xpXDDoSlYik4uj99+wZt8w 6VEzn40cRgDEdwR0/djgaE8zV7hs5Kd0SuDGdt2JjmvdEnW1onPdopxDa/iLViC7 tf3EIlXS4noheAEqksjZSnqho1QY39w6PN1xJaTQPLdld8x6C2BdtX7XVJgQezlF wP6yeRAJYz4yJBFQntvwQs5a5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwqz7zn anFK//7VRkb0szv8VYgcMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD9FxM+WXqtRJpVmL1ob+tnanlEgm94fsG+KlvkNafDQFrAnLLFuBp 7pFptL7r5IeNflb4z3drgmj62/qkPwBLsYq3OP9MgSvdYfiUFo+TKafO3G1mNrXb Dbr10RU7cLvg2NW3rQ+Ob7uNrNAiZv5rqt5IkLkb1lA3/Kix0XS2smEEyK9T4hvr IuSN8jHNEm0nC5l8MSrFrUQJEeUuarxlgqfmCj5fVxrytl6Us+/ikJYQl4T2dgNh ttpbhBlUcDqBnVCJLTmsw59TMOdzdRPR1SRjPJl+3b5kusKOh8lySqxy7h7zMm0U CLO54wcH0tNKvM5IFsZ76JNb0cpjsnKb -----END CERTIFICATE-----Generated at Sun Aug 10 04:23:08 2025 by rpki-client