$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: T5oEkEMiIjpfo6MIxH9YL1DMKlhtgy/tphsdsLKZE/4= Subject key identifier: A6:E9:CC:4B:11:D1:38:17:F2:42:33:40:2B:76:E7:68:5D:98:CC:7E Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0BE5 Signing time: Fri 22 Aug 2025 18:59:47 +0000 Manifest this update: Fri 22 Aug 2025 18:59:46 +0000 Manifest next update: Fri 29 Aug 2025 18:59:46 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: F32V2RajVtbbVX6jxZwzMIZFDX7cqBJsizzhh/nmspM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: Aug 22 18:59:46 2025 GMT Not After : Aug 29 18:59:46 2025 GMT Subject: CN=68a8be22-98bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:2f:13:b7:86:74:fa:7c:d4:12:68:c4:f9: 8c:05:71:70:5b:a1:0d:de:c5:57:cd:5c:ee:c2:27: f8:a3:7f:a8:3b:fe:e3:1e:bb:fb:3c:ac:bf:a6:1c: 45:44:b5:e0:5d:1a:62:aa:4b:7a:52:11:6c:80:ff: 4e:09:d8:3a:5d:e6:63:8a:f6:95:b8:40:99:5d:8b: b9:8f:80:1f:b1:a9:1f:b6:ac:b7:0b:7b:ca:2d:ef: 69:64:92:00:80:3a:26:59:12:92:a6:49:e6:89:90: 70:e6:64:57:18:21:bd:8e:f3:58:7b:25:30:d7:d1: 19:48:b5:73:df:5b:93:32:3d:5e:2e:06:09:1d:e9: 5f:b9:b2:39:13:61:e7:8d:64:0b:c1:35:9a:4d:10: e8:a0:21:88:93:7e:0f:81:4c:2a:a8:8c:b7:bb:07: 13:7b:d6:ef:21:e9:ef:8c:b1:9c:12:22:fe:a2:01: c7:b5:8c:14:66:fa:b5:25:8c:4c:d1:56:4b:d8:cc: 73:4c:a1:af:ca:5b:c1:bb:d8:93:e3:4f:0b:24:36: 21:fd:7c:45:f3:cc:2b:cf:69:bb:54:a5:8c:29:a1: 67:2d:0c:56:88:5f:77:a6:1c:75:b0:bc:9f:28:77: 8a:19:2c:ee:0e:a3:5a:15:51:0e:52:ab:cb:d2:4d: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E9:CC:4B:11:D1:38:17:F2:42:33:40:2B:76:E7:68:5D:98:CC:7E X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:06:cf:33:2f:90:ee:5b:57:6c:31:36:0a:4f:1c:73:db:10: 12:7a:e4:78:fb:80:20:c6:9f:50:d6:99:ac:7f:0c:7a:45:4f: a2:8d:31:0f:14:61:ed:d7:84:a2:26:c9:ef:d9:11:a8:ae:62: e9:37:b1:b1:c0:0d:35:03:9a:91:54:48:b1:3f:5e:97:34:9d: f6:cd:d7:b0:a2:76:d8:25:e1:99:43:4a:5b:44:ed:2c:d3:5f: a7:7f:5b:71:af:d1:87:22:43:17:f8:4b:d8:6a:70:cb:5f:7e: 35:7e:82:2b:43:a6:77:05:84:74:3f:b9:12:7b:fa:87:64:0e: ce:7f:9f:4f:cc:ee:50:b0:44:73:30:72:a4:c3:ec:06:56:d8: 45:36:6b:e8:f9:b8:77:59:18:7c:b7:b6:10:46:47:0a:a6:90: 45:7a:be:9e:14:ed:52:8f:22:e9:10:77:74:8d:21:d7:6c:fa: d8:5d:11:2b:ba:7f:90:05:5b:13:39:ac:64:7f:80:6e:cd:62: be:5e:48:98:09:36:f3:87:29:6d:87:e8:43:49:0b:27:e2:06: 36:4f:fd:fb:78:ab:26:cd:91:f4:2d:1e:c0:bb:20:6d:e9:99: 1e:76:56:32:3b:12:41:ff:63:c1:8f:c3:e6:66:c9:96:6d:d5: b9:58:58:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjUwODIyMTg1OTQ2WhcNMjUwODI5MTg1OTQ2WjAYMRYwFAYD VQQDEw02OGE4YmUyMi05OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrYvE7eGdPp81BJoxPmMBXFwW6EN3sVXzVzuwif4o3+oO/7jHrv7PKy/phxF RLXgXRpiqkt6UhFsgP9OCdg6XeZjivaVuECZXYu5j4Afsakftqy3C3vKLe9pZJIA gDomWRKSpknmiZBw5mRXGCG9jvNYeyUw19EZSLVz31uTMj1eLgYJHelfubI5E2Hn jWQLwTWaTRDooCGIk34PgUwqqIy3uwcTe9bvIenvjLGcEiL+ogHHtYwUZvq1JYxM 0VZL2MxzTKGvylvBu9iT408LJDYh/XxF88wrz2m7VKWMKaFnLQxWiF93phx1sLyf KHeKGSzuDqNaFVEOUqvL0k00VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbpzEsR 0TgX8kIzQCt252hdmMx+MB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHBs8zL5DuW1dsMTYKTxxz2xASeuR4+4Agxp9Q1pmsfwx6RU+ijTEP FGHt14SiJsnv2RGormLpN7GxwA01A5qRVEixP16XNJ32zdewonbYJeGZQ0pbRO0s 01+nf1txr9GHIkMX+EvYanDLX341foIrQ6Z3BYR0P7kSe/qHZA7Of59PzO5QsERz MHKkw+wGVthFNmvo+bh3WRh8t7YQRkcKppBFer6eFO1SjyLpEHd0jSHXbPrYXREr un+QBVsTOaxkf4BuzWK+XkiYCTbzhylth+hDSQsn4gY2T/37eKsmzZH0LR7AuyBt 6ZkedlYyOxJB/2PBj8PmZsmWbdW5WFj7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:15 2025 by rpki-client