$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: w6nomS0iNzCmmkhTlkiL13c4s8KrLzxBVOfoKVnOdV0= Subject key identifier: 35:A8:74:09:18:D9:81:E4:78:02:BC:0A:CE:33:7F:70:2E:69:2B:E4 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 0174 Signing time: Sat 23 Aug 2025 03:57:59 +0000 Manifest this update: Sat 23 Aug 2025 03:57:58 +0000 Manifest next update: Sat 30 Aug 2025 03:57:58 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: ujziX8BijLErtOQRz1dAiWEk30YLkr6nJwdfx3KrSpo=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: ZZYkG0rN+pICOhz09TrHJ/M/KfssTlJ7hgwatztFUEg=) 3: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: C5/o5aDwWxMI021UTT3+Muuzc6BZ58/1ktFFSh5UflU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: Aug 23 03:57:58 2025 GMT Not After : Aug 30 03:57:58 2025 GMT Subject: CN=68a93c46-a472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:d6:2a:2c:8b:70:40:cf:0c:19:ba:c9:00: a2:ad:f5:bd:36:1e:e4:3d:21:17:f8:da:89:c3:e6: ec:b7:25:cf:d5:89:cf:79:40:22:25:58:04:c4:b1: 94:0c:b2:99:ba:eb:42:6f:60:91:a4:1c:74:9b:57: 6a:cc:eb:7e:f4:aa:f3:dd:0a:23:f3:7d:ee:39:2d: a4:4b:ba:8d:88:c2:dc:43:dc:79:43:89:d7:71:9e: f2:23:37:2b:4a:b1:0f:bb:79:19:11:ad:fe:43:c1: 42:bd:2b:33:a8:05:26:53:c3:4f:cb:92:ab:02:9f: 41:fe:e4:a6:04:ff:6c:cc:f4:6a:dc:94:41:8b:71: dc:40:d3:bf:16:fd:77:6a:d2:72:7b:f4:6a:83:24: 98:14:f4:45:f2:66:ef:89:91:8d:d9:6e:70:1a:82: a2:be:2f:3f:82:3a:f5:a4:84:eb:bf:cf:65:9e:ea: 57:9d:f9:69:e3:1d:bd:a6:40:9d:3c:85:8a:ac:e3: 0f:fe:6c:1a:83:97:81:a3:c0:00:01:c2:be:99:9b: ab:0b:11:59:b7:64:73:6e:27:6d:36:d6:63:76:c2: 22:03:88:72:41:09:c3:83:c6:24:1c:f2:b4:ee:a1: 0b:88:fa:c8:ba:bb:cd:92:59:b3:31:a5:f1:2a:84: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:74:09:18:D9:81:E4:78:02:BC:0A:CE:33:7F:70:2E:69:2B:E4 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:5c:c1:2c:01:c3:d7:77:f5:34:62:fe:ef:74:fb:80:d7:b1: c2:0c:0a:6d:ba:63:3e:2a:e1:04:c7:e7:a4:a5:94:95:63:19: 34:fe:ee:05:a5:31:24:92:d2:3d:8c:ad:fb:d9:c3:ee:2d:98: 84:7c:86:83:ca:7a:06:f8:65:95:f9:83:ff:90:7f:b1:d2:45: 77:bd:59:74:4f:d6:61:eb:9a:2c:bf:2f:ef:75:98:aa:4e:13: 3b:b6:05:27:af:06:34:68:76:8d:b4:9c:86:33:a0:86:1e:ae: 51:e6:f1:e8:05:8f:6a:2e:c4:af:a6:12:2d:8d:66:04:35:c1: 3e:54:16:25:18:f9:55:b2:f5:b1:31:eb:9a:f4:24:e6:84:71: 96:90:dd:e3:1a:30:37:12:05:67:64:94:4b:f8:7a:75:7e:ce: 51:58:e1:63:37:c6:23:eb:39:f5:cc:a9:e6:16:25:47:89:43: 0d:43:06:b2:bb:ce:e5:08:39:d4:35:ba:a9:1a:28:e0:ef:0d: 16:eb:f0:ef:83:1a:fc:72:5e:e5:e1:7a:6d:59:1f:b0:40:77: 12:b7:0e:4b:ce:b1:ac:20:88:67:b8:77:56:74:16:0c:95:65: 90:f0:73:99:f2:ec:e5:23:bb:39:ad:44:17:f6:ce:13:ac:70: 95:90:bb:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjUwODIzMDM1NzU4WhcNMjUwODMwMDM1NzU4WjAYMRYwFAYD VQQDEw02OGE5M2M0Ni1hNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus7WKiyLcEDPDBm6yQCirfW9Nh7kPSEX+NqJw+bstyXP1YnPeUAiJVgExLGU DLKZuutCb2CRpBx0m1dqzOt+9Krz3Qoj833uOS2kS7qNiMLcQ9x5Q4nXcZ7yIzcr SrEPu3kZEa3+Q8FCvSszqAUmU8NPy5KrAp9B/uSmBP9szPRq3JRBi3HcQNO/Fv13 atJye/RqgySYFPRF8mbviZGN2W5wGoKivi8/gjr1pITrv89lnupXnflp4x29pkCd PIWKrOMP/mwag5eBo8AAAcK+mZurCxFZt2RzbidtNtZjdsIiA4hyQQnDg8YkHPK0 7qELiPrIurvNklmzMaXxKoQCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWodAkY 2YHkeAK8Cs4zf3AuaSvkMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwXMEsAcPXd/U0Yv7vdPuA17HCDAptumM+KuEEx+ekpZSVYxk0/u4F pTEkktI9jK372cPuLZiEfIaDynoG+GWV+YP/kH+x0kV3vVl0T9Zh65osvy/vdZiq ThM7tgUnrwY0aHaNtJyGM6CGHq5R5vHoBY9qLsSvphItjWYENcE+VBYlGPlVsvWx Meua9CTmhHGWkN3jGjA3EgVnZJRL+Hp1fs5RWOFjN8Yj6zn1zKnmFiVHiUMNQway u87lCDnUNbqpGijg7w0W6/Dvgxr8cl7l4XptWR+wQHcStw5LzrGsIIhnuHdWdBYM lWWQ8HOZ8uzlI7s5rUQX9s4TrHCVkLvD -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:14 2025 by rpki-client