$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: 10i7I3NPB5JLa6OhUdwnQQe9J+0IxwrF3GBZzke1XK0= Subject key identifier: 0B:47:84:29:E3:45:EE:44:82:8E:37:AA:78:F4:BB:F7:D3:7F:28:8B Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:50:01 +0000 Manifest this update: Fri 22 Aug 2025 14:50:01 +0000 Manifest next update: Fri 29 Aug 2025 14:50:01 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: PWHpDfPUnSeLJoZ0TDDSlaMWoA6a8zWgTuFvviUoMRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Aug 22 14:50:01 2025 GMT Not After : Aug 29 14:50:01 2025 GMT Subject: CN=68a88399-f050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:c9:52:91:32:b4:79:76:03:b1:73:bf:cb: 52:2a:a3:f3:83:7c:a3:55:91:63:e8:e5:50:b1:1d: d1:69:41:a7:4b:85:60:d0:80:51:bf:ca:62:c9:f2: ce:2e:ee:84:68:49:37:18:ba:20:86:fe:d1:b5:07: 7c:83:2a:2c:8c:2e:96:b3:11:c4:57:fc:8e:f9:91: a4:82:9f:ad:62:02:bc:e5:a1:77:ca:40:94:42:2a: 20:76:5d:29:c8:f1:c5:9b:37:29:8f:43:8d:ca:00: 57:17:4b:7b:7e:23:a0:d0:5f:ed:c6:06:7e:63:2b: cf:58:8a:b9:50:2e:7f:6d:71:aa:cb:c7:d4:a9:17: 07:01:5d:9d:db:2e:46:de:cf:4c:84:c8:4c:16:e7: b8:07:6e:07:0c:db:26:2b:21:e1:84:90:f2:76:f7: d7:83:f2:6b:3f:da:2d:a0:fb:32:13:c6:f3:ca:1e: 93:88:69:d5:78:12:c4:16:16:75:b2:c4:e8:78:1d: d5:83:0f:42:f8:0a:5e:b9:cc:a8:d3:cf:ba:96:5e: cc:ea:46:80:95:24:00:d1:70:84:d9:4c:5e:13:bd: 70:a9:5f:14:8a:dc:61:5d:fd:d7:c5:b3:6e:9e:61: 38:c5:95:b7:c7:c4:fb:e7:a9:12:b5:3f:56:8e:72: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:47:84:29:E3:45:EE:44:82:8E:37:AA:78:F4:BB:F7:D3:7F:28:8B X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0b:bd:cf:92:2f:f4:3a:e0:e2:fb:ac:5f:2e:e9:69:4c:cb: 2e:90:e2:41:01:45:4c:3d:4d:8e:66:90:be:44:aa:18:73:1a: bc:d7:2f:69:8e:a6:c4:6f:4b:66:59:2c:0d:91:38:65:9b:db: 60:b2:5a:d5:a7:6f:f2:00:7c:fb:37:c5:b1:55:89:71:26:48: e7:df:54:4c:f7:bc:66:8f:82:54:9c:bd:bf:00:b4:09:a7:7c: b7:7c:c9:01:2a:fc:3a:48:59:8f:c5:ce:23:26:26:83:12:5d: f7:fc:84:11:36:43:f4:91:04:32:bd:15:6d:29:27:dc:2b:55: ec:a9:1b:4e:46:30:0e:e3:05:4d:f2:a3:ba:21:48:85:68:83: 28:62:83:b9:aa:83:c9:37:ef:e6:28:89:b1:70:42:d8:b3:c2: 50:da:1b:b8:a8:bd:20:a6:9f:9b:ef:c3:2b:a7:18:11:59:de: 00:a0:8e:db:8a:76:a2:2a:b7:64:d1:c0:a7:66:0e:b1:d9:ad: a1:9e:94:7e:b2:7a:08:98:08:a4:de:fe:e6:76:e0:66:73:98: c1:d4:95:58:13:66:d6:32:9a:a1:a9:cd:1f:8f:42:fb:d7:1c: 66:4a:f2:26:55:93:ee:41:1f:c3:5e:57:be:b3:fa:f5:fd:42: fc:db:f6:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUwODIyMTQ1MDAxWhcNMjUwODI5MTQ1MDAxWjAYMRYwFAYD VQQDEw02OGE4ODM5OS1mMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzobJUpEytHl2A7Fzv8tSKqPzg3yjVZFj6OVQsR3RaUGnS4Vg0IBRv8piyfLO Lu6EaEk3GLoghv7RtQd8gyosjC6WsxHEV/yO+ZGkgp+tYgK85aF3ykCUQiogdl0p yPHFmzcpj0ONygBXF0t7fiOg0F/txgZ+YyvPWIq5UC5/bXGqy8fUqRcHAV2d2y5G 3s9MhMhMFue4B24HDNsmKyHhhJDydvfXg/JrP9otoPsyE8bzyh6TiGnVeBLEFhZ1 ssToeB3Vgw9C+Apeucyo08+6ll7M6kaAlSQA0XCE2UxeE71wqV8UitxhXf3XxbNu nmE4xZW3x8T756kStT9WjnJbfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtHhCnj Re5Ego43qnj0u/fTfyiLMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvC73Pki/0OuDi+6xfLulpTMsukOJBAUVMPU2OZpC+RKoYcxq81y9p jqbEb0tmWSwNkThlm9tgslrVp2/yAHz7N8WxVYlxJkjn31RM97xmj4JUnL2/ALQJ p3y3fMkBKvw6SFmPxc4jJiaDEl33/IQRNkP0kQQyvRVtKSfcK1XsqRtORjAO4wVN 8qO6IUiFaIMoYoO5qoPJN+/mKImxcELYs8JQ2hu4qL0gpp+b78MrpxgRWd4AoI7b inaiKrdk0cCnZg6x2a2hnpR+snoImAik3v7mduBmc5jB1JVYE2bWMpqhqc0fj0L7 1xxmSvImVZPuQR/DXle+s/r1/UL82/Yk -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:39 2025 by rpki-client