$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json) Hash identifier: tlo11hS20gnakRh602D829rSzYi3yrCt6uMK1mnZyY4= Subject key identifier: 0A:C1:A0:38:1C:97:D0:29:AC:EB:D7:11:B6:A0:DD:3A:14:0A:CE:A6 Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft Manifest number: 0153 Signing time: Thu 07 Aug 2025 04:41:13 +0000 Manifest this update: Thu 07 Aug 2025 04:41:13 +0000 Manifest next update: Thu 14 Aug 2025 04:41:13 +0000 Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: x6dmdr+II57alq7aLR5RhkCSCY2uwGpqsLQC9t2qBrI=) 2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Validity Not Before: Aug 7 04:41:13 2025 GMT Not After : Aug 14 04:41:13 2025 GMT Subject: CN=68942e69-55b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:da:00:26:3b:c3:e4:94:35:da:c2:04:9a: 89:1f:23:cb:e6:21:8c:ae:8c:f9:66:17:3b:76:9b: 37:00:e3:1a:4f:31:54:30:01:20:76:cd:08:a9:17: 05:65:20:a0:8c:88:cb:2d:ec:f1:5c:89:8a:9f:39: f4:1a:b4:21:ec:b4:df:c7:7c:c6:0e:a5:2d:17:93: 35:e5:ff:97:f0:90:65:68:03:28:89:eb:32:d8:70: be:18:2b:67:a2:4c:ae:8c:98:91:e1:d6:b1:67:19: 8a:49:5a:0a:37:af:2c:8e:31:3a:0d:15:85:0c:a8: 93:65:3f:5c:6d:ec:5f:ea:75:7d:7c:f3:4d:41:ae: 57:e7:6a:87:38:b2:4e:17:8b:be:a0:b8:7c:02:3b: cf:d1:b6:d3:0e:bc:ac:5d:f6:98:b0:5a:58:7a:a0: ad:b6:a8:77:01:be:3e:75:93:d6:ac:33:b6:1b:0d: 62:35:0e:cb:d2:6c:32:7d:48:86:f9:3c:51:00:1b: 15:e7:66:8e:40:bc:de:3f:6f:6a:bb:a8:31:3e:2b: cb:e8:ef:24:bb:be:23:79:2b:1a:c0:d2:f9:51:db: eb:bb:80:cd:ad:7c:cd:06:29:00:e4:e9:ed:0f:66: c5:8d:49:bb:55:dd:95:92:e7:6b:2b:ce:85:14:45: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C1:A0:38:1C:97:D0:29:AC:EB:D7:11:B6:A0:DD:3A:14:0A:CE:A6 X509v3 Authority Key Identifier: keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:68:1c:b6:26:26:15:f6:39:64:bb:61:7e:33:2e:9a:ce:63: e0:51:37:d5:0e:a4:3d:c8:88:70:16:72:1d:c6:f6:11:b4:b6: 63:e8:7d:3a:48:af:95:bb:28:e1:85:42:44:6c:d6:66:8f:dd: 93:b6:cb:5f:37:1d:a3:01:45:44:6c:85:f7:93:55:da:47:cc: 5a:4f:6b:a2:b4:cf:d7:80:05:7d:6e:81:9d:b1:10:34:22:b4: 42:d2:8c:48:5d:de:4e:33:8b:7e:c2:f1:19:6e:41:bb:43:38: d4:f3:22:34:ff:8e:aa:3c:48:91:e5:13:a0:57:f3:59:af:ac: bb:d5:ea:35:86:7a:e4:0a:bb:0b:dc:a7:51:ff:be:88:3d:ce: fa:dd:d0:5e:28:3e:d2:8f:e0:a1:83:55:28:fa:0d:a6:0d:21: 10:9b:53:54:1b:99:22:6e:d8:60:9d:eb:04:69:66:3a:e2:84: c0:f6:76:b4:09:f3:03:44:94:5b:d7:54:02:f7:b7:66:7b:4d: af:0f:b3:08:f3:30:16:f8:45:20:01:c6:87:37:58:ce:24:8d: 6e:a4:0d:d9:a5:2a:cf:61:69:21:4c:7e:3b:01:45:a6:d3:c6: 28:a5:e2:bc:16:9e:42:aa:b1:5b:9b:22:b1:9c:ce:d9:81:74: de:c6:fd:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY2NkQxMTAvBgNVBAUTKEFBOUEwRENCNTEzMTM5MkQ3MTk2QTg0NDE4QThBODQ2 NDU1MzFGOTcwHhcNMjUwODA3MDQ0MTEzWhcNMjUwODE0MDQ0MTEzWjAYMRYwFAYD VQQDEw02ODk0MmU2OS01NWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnl/aACY7w+SUNdrCBJqJHyPL5iGMroz5Zhc7dps3AOMaTzFUMAEgds0IqRcF ZSCgjIjLLezxXImKnzn0GrQh7LTfx3zGDqUtF5M15f+X8JBlaAMoiesy2HC+GCtn okyujJiR4daxZxmKSVoKN68sjjE6DRWFDKiTZT9cbexf6nV9fPNNQa5X52qHOLJO F4u+oLh8AjvP0bbTDrysXfaYsFpYeqCttqh3Ab4+dZPWrDO2Gw1iNQ7L0mwyfUiG +TxRABsV52aOQLzeP29qu6gxPivL6O8ku74jeSsawNL5Udvru4DNrXzNBikA5Ont D2bFjUm7Vd2VkudrK86FFEVd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArBoDgc l9AprOvXEbag3ToUCs6mMB8GA1UdIwQYMBaAFKqaDctRMTktcZaoRBioqEZFUx+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjY2RC81MTFBODkyRTcx QTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9TMXhscWhFR0tpb1JrVlRI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fwb055MUV4T1MxeGxxaEVHS2lvUmtWVEg1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjY2RC81MTFBODkyRTcxQTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9T MXhscWhFR0tpb1JrVlRINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvaBy2JiYV9jlku2F+My6azmPgUTfVDqQ9yIhwFnIdxvYRtLZj6H06 SK+VuyjhhUJEbNZmj92TtstfNx2jAUVEbIX3k1XaR8xaT2uitM/XgAV9boGdsRA0 IrRC0oxIXd5OM4t+wvEZbkG7QzjU8yI0/46qPEiR5ROgV/NZr6y71eo1hnrkCrsL 3KdR/76IPc763dBeKD7Sj+Chg1Uo+g2mDSEQm1NUG5kibthgnesEaWY64oTA9na0 CfMDRJRb11QC97dme02vD7MI8zAW+EUgAcaHN1jOJI1upA3ZpSrPYWkhTH47AUWm 08YopeK8Fp5CqrFbmyKxnM7ZgXTexv2J -----END CERTIFICATE-----Generated at Fri Aug 8 12:58:03 2025 by rpki-client