$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json) Hash identifier: +bdAM3VUbXd2aVaui2BNv5uR3psnRIfBqq/qVrwoSa8= Subject key identifier: 87:65:42:77:FB:30:E1:C2:72:DB:C5:72:CF:AE:49:68:A2:A4:1C:C9 Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft Manifest number: 19 Signing time: Sat 23 Aug 2025 08:16:08 +0000 Manifest this update: Sat 23 Aug 2025 08:16:07 +0000 Manifest next update: Sat 30 Aug 2025 08:16:07 +0000 Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: AMM/9bJZt4LD9+MapJCS9WB46vdM1o7ZwnYK9bm41Bo=) 2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: wD0psrpZ8N2yh6yYDhmlPC1nQhfBRq0VtHwYcpyvMJM=) 3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: R9MuPEXmcb9QPVduJszFJZ3jI05Vo9fUIK/CYjPl3pQ=) 4: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: Vi+X8eC77LW+19x04LHYzDEZAgS3KYmTg+MI+Li5Sts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Validity Not Before: Aug 23 08:16:07 2025 GMT Not After : Aug 30 08:16:07 2025 GMT Subject: CN=68a978c7-ba5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:5c:97:1d:65:e8:96:7d:ee:19:c6:58:80: 74:a6:41:ea:34:dd:05:65:e3:f7:4c:3e:4d:3c:ab: b2:4e:b2:5f:1e:c0:5d:75:2c:28:f0:00:d2:36:79: 5f:77:ca:c1:cd:54:5d:1d:60:f3:19:1c:0a:01:9e: fd:19:16:4c:e6:d5:a5:28:c7:6c:fa:93:0f:8a:84: d3:7a:da:35:73:ba:89:3d:6c:ee:e3:ea:73:de:f7: be:74:2e:ca:4d:d6:c1:ed:37:9a:e8:a4:63:89:06: 9f:19:24:e5:7d:39:12:e2:81:41:75:c2:51:73:1a: 3a:30:b3:30:db:62:e3:9a:f2:4e:12:a5:a5:b0:47: 55:63:de:c3:09:92:92:07:eb:46:44:d9:71:a6:b4: 07:51:e9:0f:af:d8:40:ce:bc:53:7d:3e:52:53:e3: 61:66:86:2b:39:e4:d0:a8:ba:2b:a3:de:f9:32:63: 9e:e1:89:b5:05:0d:1b:7b:72:a3:f2:41:dd:cd:21: 01:d5:71:64:18:7b:66:04:3c:4f:32:6e:91:f1:99: 45:6d:3d:be:f2:a1:a0:de:39:cc:37:bf:45:ef:0c: 34:35:85:08:e6:8d:ab:7d:40:1c:14:79:d0:e9:55: 57:53:66:6e:0b:83:e9:bf:a6:63:91:05:2d:6c:94: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:65:42:77:FB:30:E1:C2:72:DB:C5:72:CF:AE:49:68:A2:A4:1C:C9 X509v3 Authority Key Identifier: keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:90:18:2b:38:c2:6a:8e:ab:ef:e0:3f:12:d6:1e:8f:0b:2b: 60:9b:84:b4:42:0f:67:3c:5d:15:ad:26:35:9e:f3:c5:d5:b9: b4:92:99:14:be:8f:c8:f1:92:07:37:7b:df:a4:de:3b:68:c4: 9c:4c:74:41:f4:63:00:1a:39:78:f5:77:a1:b8:9d:15:3e:dc: f0:e6:91:14:6d:af:22:fd:16:35:61:95:66:ca:21:00:60:cb: f3:fd:fa:22:b9:9f:05:12:f6:12:ea:30:9e:73:ab:a1:36:35: ab:f6:a9:eb:62:b9:a5:1a:0d:58:58:94:28:7c:8a:90:f4:94: 80:f4:41:78:22:ac:8f:c4:68:3c:d5:c8:c4:c3:5f:75:04:ed: 95:54:12:fa:6b:ad:9a:7c:4a:1c:4a:81:ea:8f:13:cc:19:b1: 10:6c:96:9e:74:09:9c:69:d3:15:ad:de:3c:3a:2e:24:2f:0f: 54:b9:3c:a5:82:97:16:84:18:6d:c5:98:2e:6f:67:b8:a5:ee: 1c:99:76:73:bf:42:66:43:ed:47:69:96:f5:86:b2:fd:16:53: b0:68:64:7a:93:ff:f0:5d:10:ed:1e:8e:55:b3:78:3e:58:cd: 6b:16:1e:94:03:bb:ee:e3:6a:4a:1d:d3:2c:9a:50:24:15:9c: 21:15:1e:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQUFENkEwQkNDNERCMDU3RTE0NjlGMUREQjMwMTlCMTY1 MzMwQ0U0MjAeFw0yNTA4MjMwODE2MDdaFw0yNTA4MzAwODE2MDdaMBgxFjAUBgNV BAMTDTY4YTk3OGM3LWJhNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXQVyXHWXoln3uGcZYgHSmQeo03QVl4/dMPk08q7JOsl8ewF11LCjwANI2eV93 ysHNVF0dYPMZHAoBnv0ZFkzm1aUox2z6kw+KhNN62jVzuok9bO7j6nPe9750LspN 1sHtN5ropGOJBp8ZJOV9ORLigUF1wlFzGjowszDbYuOa8k4SpaWwR1Vj3sMJkpIH 60ZE2XGmtAdR6Q+v2EDOvFN9PlJT42Fmhis55NCouiuj3vkyY57hibUFDRt7cqPy Qd3NIQHVcWQYe2YEPE8ybpHxmUVtPb7yoaDeOcw3v0XvDDQ1hQjmjat9QBwUedDp VVdTZm4Lg+m/pmORBS1slPunAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh2VCd/sw 4cJy28Vyz65JaKKkHMkwHwYDVR0jBBgwFoAUqtagvMTbBX4UafHdswGbFlMwzkIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzRCRTY5RDAyNjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3pr SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRhZ3ZNVGJCWDRVYWZIZHN3R2JGbE13emtJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzRCRTY5RDAyNjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0 VWFmSGRzd0diRmxNd3prSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqQGCs4wmqOq+/gPxLWHo8LK2CbhLRCD2c8XRWtJjWe88XVubSSmRS+ j8jxkgc3e9+k3jtoxJxMdEH0YwAaOXj1d6G4nRU+3PDmkRRtryL9FjVhlWbKIQBg y/P9+iK5nwUS9hLqMJ5zq6E2Nav2qetiuaUaDVhYlCh8ipD0lID0QXgirI/EaDzV yMTDX3UE7ZVUEvprrZp8ShxKgeqPE8wZsRBslp50CZxp0xWt3jw6LiQvD1S5PKWC lxaEGG3FmC5vZ7il7hyZdnO/QmZD7UdplvWGsv0WU7BoZHqT//BdEO0ejlWzeD5Y zWsWHpQDu+7jakod0yyaUCQVnCEVHvE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:43 2025 by rpki-client