$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: xDvIfEBiDWI81Wvpy6aaTAwq9w8FhI5mqHywS3/pen8= Subject key identifier: AD:21:8A:6E:A4:07:F1:9B:E8:1A:B2:77:FB:BE:BC:F3:90:AC:2F:5A Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03DE Signing time: Tue 05 Aug 2025 01:03:38 +0000 Manifest this update: Tue 05 Aug 2025 01:03:38 +0000 Manifest next update: Tue 12 Aug 2025 01:03:38 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: bVmQRqCqBQ3+dlakZ7OFwsB3sZNWHHIKHFZWvtnRqHo=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Aug 5 01:03:38 2025 GMT Not After : Aug 12 01:03:38 2025 GMT Subject: CN=6891586a-fac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:f9:d5:19:6e:6b:fb:a5:90:9a:5b:ed:5b: a8:b9:c1:7d:0d:dc:32:a6:e7:aa:c1:00:59:3a:99: 9d:a4:6a:6a:5c:b6:af:86:cb:c5:3a:9e:70:25:f8: 86:ad:3e:0b:ba:86:1a:95:c4:2c:57:b4:72:7c:13: c6:29:ae:a4:1e:9a:87:ea:80:a9:1f:a7:df:ef:d2: f5:0e:e2:1f:c1:6f:a5:fa:5c:a2:ed:3c:fb:d6:bb: e1:5f:ff:60:82:68:43:e8:be:2a:45:b7:ed:5d:c7: 08:e1:08:00:4a:c6:4c:52:61:d9:9d:0c:c9:04:f1: 41:75:14:72:9b:3b:e3:12:a3:76:e6:43:d2:af:e5: f1:fb:7e:f4:6f:dd:71:05:33:74:4b:ea:0d:28:e0: 6d:57:be:a1:15:da:fb:c9:4b:c3:24:24:29:29:1a: f9:aa:bb:ef:0c:4a:3c:20:89:73:94:90:e5:fb:d4: c3:27:2e:58:73:7a:18:62:2f:c4:1b:f2:cc:05:3e: 44:ba:d6:18:c9:14:fb:cc:d0:f9:c5:e6:23:e2:20: 68:4d:e4:6a:e5:f0:51:86:dc:08:ff:91:80:19:7d: 68:37:ae:17:d4:5a:87:fa:19:42:e4:8e:6e:4c:6d: 1e:fe:d0:5f:13:b7:d0:22:b5:97:9b:c8:1e:f5:79: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:21:8A:6E:A4:07:F1:9B:E8:1A:B2:77:FB:BE:BC:F3:90:AC:2F:5A X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:97:79:30:6e:d2:44:ae:1a:ee:f5:3f:00:ae:a4:7a:37:0f: a5:ad:1a:5e:83:0c:02:9c:e2:05:54:e6:8a:5e:64:fa:60:e3: 9b:42:c6:3c:ff:34:df:83:0e:9c:63:e0:37:47:ce:b2:d0:7f: 25:fe:93:1b:51:0c:3f:97:0b:6b:11:52:0d:52:02:67:2e:f5: b6:0d:6f:89:8b:6f:78:57:b8:b2:93:b9:1f:5e:00:29:10:59: c9:f5:12:a5:d9:ad:07:cf:c3:f3:a4:6a:a9:1d:7b:bc:a9:52: 7f:4c:49:02:78:1e:a1:e4:24:b3:83:66:cd:1b:21:5a:5d:c5: eb:26:98:af:63:7b:a6:a3:aa:ba:86:1d:58:66:22:33:df:ba: c0:43:4f:49:69:b7:e2:5d:aa:3e:13:ee:6d:c3:d2:25:ed:a3: 27:d4:74:b9:dd:3d:f2:41:55:59:73:41:8c:24:47:96:91:e9: d2:49:d5:00:67:17:49:cc:07:47:c7:32:58:34:a9:db:f5:8e: 9c:27:cf:81:6d:e2:e1:ba:8a:57:00:37:73:1d:41:53:e0:9d: 3e:ef:83:ca:04:02:99:63:dc:98:08:06:a4:84:77:55:a9:1f: ab:aa:f7:85:aa:13:a2:e8:b3:2e:ea:ba:2c:00:1e:73:f2:89: ec:73:41:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwODA1MDEwMzM4WhcNMjUwODEyMDEwMzM4WjAYMRYwFAYD VQQDEw02ODkxNTg2YS1mYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBL51Rlua/ulkJpb7VuoucF9DdwypueqwQBZOpmdpGpqXLavhsvFOp5wJfiG rT4LuoYalcQsV7RyfBPGKa6kHpqH6oCpH6ff79L1DuIfwW+l+lyi7Tz71rvhX/9g gmhD6L4qRbftXccI4QgASsZMUmHZnQzJBPFBdRRymzvjEqN25kPSr+Xx+370b91x BTN0S+oNKOBtV76hFdr7yUvDJCQpKRr5qrvvDEo8IIlzlJDl+9TDJy5Yc3oYYi/E G/LMBT5EutYYyRT7zND5xeYj4iBoTeRq5fBRhtwI/5GAGX1oN64X1FqH+hlC5I5u TG0e/tBfE7fQIrWXm8ge9XnxmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0him6k B/Gb6Bqyd/u+vPOQrC9aMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbl3kwbtJErhru9T8ArqR6Nw+lrRpegwwCnOIFVOaKXmT6YOObQsY8 /zTfgw6cY+A3R86y0H8l/pMbUQw/lwtrEVINUgJnLvW2DW+Ji294V7iyk7kfXgAp EFnJ9RKl2a0Hz8PzpGqpHXu8qVJ/TEkCeB6h5CSzg2bNGyFaXcXrJpivY3umo6q6 hh1YZiIz37rAQ09JabfiXao+E+5tw9Il7aMn1HS53T3yQVVZc0GMJEeWkenSSdUA ZxdJzAdHxzJYNKnb9Y6cJ8+BbeLhuopXADdzHUFT4J0+74PKBAKZY9yYCAakhHdV qR+rqveFqhOi6LMu6rosAB5z8onsc0H5 -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:42 2025 by rpki-client