$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json) Hash identifier: P1oDkVzLKNLw7slVFBy+1vKzFv43SwEA0tRdxP3thRM= Subject key identifier: 68:41:CB:BD:86:5D:D9:4F:3E:55:73:2B:FC:D4:AC:54:A3:7D:51:9C Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft Manifest number: 0AF0 Signing time: Fri 22 Aug 2025 19:33:19 +0000 Manifest this update: Fri 22 Aug 2025 19:33:19 +0000 Manifest next update: Fri 29 Aug 2025 19:33:19 +0000 Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: Fb1s46RaJtoVBGmn18diG9HgSdiIiRTjcDQCZ7YRCAI=) 2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: En9dIPtNAsqzocSYMmtm97H1ooZs8MGknLuErJdgZyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Validity Not Before: Aug 22 19:33:19 2025 GMT Not After : Aug 29 19:33:19 2025 GMT Subject: CN=68a8c5ff-d749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:4b:ab:d2:28:66:6d:1d:9b:a3:c5:03:c0: ad:8c:d4:dd:fb:78:24:cf:79:31:61:db:a2:df:2d: b8:73:9e:fb:fb:97:d6:2b:3b:08:e8:71:b9:c8:2f: 5f:47:f3:e7:fd:bb:55:e1:9b:39:96:af:61:9c:2f: 24:57:ff:85:50:38:45:15:1a:f9:7a:e8:09:03:d2: ba:24:b2:d9:22:f4:33:6b:a1:c4:22:77:3f:33:f1: 52:42:40:fb:7e:0e:3a:c2:2a:c7:32:34:9d:5c:f6: c3:47:ad:35:05:0c:37:64:45:3d:23:34:d9:9f:31: a2:7e:d1:aa:aa:1a:bd:70:41:90:33:cc:46:0f:57: 57:92:90:f6:6a:3a:4d:f4:fd:ca:de:6b:9f:46:0c: 7f:1b:b5:f4:c2:c1:51:bc:ad:30:a2:19:11:da:1b: 62:8d:fd:f1:c2:21:97:bc:c0:09:2f:17:b7:fe:e5: 94:12:b7:c3:c2:66:87:c8:8c:a3:94:d0:8a:7e:ae: 18:88:6e:1f:b6:b7:9d:52:0f:33:ae:5a:1a:a0:35: f3:c0:48:f6:3e:c8:81:6a:9e:ef:98:86:ef:5b:f7: 76:3a:37:a6:d4:77:a6:92:34:cb:fa:5a:0c:c0:5d: 08:2d:b5:27:f4:5c:67:9c:c3:6c:e1:ab:c8:90:36: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:41:CB:BD:86:5D:D9:4F:3E:55:73:2B:FC:D4:AC:54:A3:7D:51:9C X509v3 Authority Key Identifier: keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:cf:f8:d5:87:e1:2f:61:e8:33:51:38:1b:56:80:3f:c1: 51:22:f8:75:e8:05:37:fd:8d:16:93:d8:0a:c5:2a:af:0b:2e: 7b:7e:d6:50:d3:2b:4e:b4:96:4f:9a:28:9e:44:a1:ad:f2:20: 83:80:16:7f:be:cc:c1:6a:bc:f8:9e:ef:09:9b:a7:0f:54:f5: bf:de:5f:20:81:18:f7:09:b4:e1:64:37:d2:ff:6e:ef:aa:30: 6b:a6:20:44:64:30:a9:50:29:36:17:04:93:c8:df:7d:d1:10: 11:59:83:33:96:59:a7:d2:3b:a6:ce:ef:77:15:21:85:67:d5: 89:58:69:07:c0:42:24:3c:69:ee:94:5c:16:f4:3c:7f:71:0c: 7c:3b:18:3f:fe:c2:dd:2b:92:ea:5d:d2:66:62:6b:f9:07:96: 3e:84:68:db:c3:64:9e:16:eb:3d:c8:d0:f3:31:06:d1:00:68: 2e:75:00:eb:5d:bd:9c:35:f9:24:c9:0a:dc:2d:18:a0:44:31: 8f:23:c7:3f:3b:47:df:04:83:46:09:1b:72:4c:89:a0:3a:b6: fa:b2:d3:5a:51:34:5d:2f:b1:d7:3e:9b:31:ec:10:a4:c3:88: 38:27:59:7a:dc:49:de:1b:0b:4f:38:fc:29:78:24:0a:da:e6: 70:22:06:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE Q0E5ODQwOEUwHhcNMjUwODIyMTkzMzE5WhcNMjUwODI5MTkzMzE5WjAYMRYwFAYD VQQDEw02OGE4YzVmZi1kNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y9Lq9IoZm0dm6PFA8CtjNTd+3gkz3kxYdui3y24c577+5fWKzsI6HG5yC9f R/Pn/btV4Zs5lq9hnC8kV/+FUDhFFRr5eugJA9K6JLLZIvQza6HEInc/M/FSQkD7 fg46wirHMjSdXPbDR601BQw3ZEU9IzTZnzGiftGqqhq9cEGQM8xGD1dXkpD2ajpN 9P3K3mufRgx/G7X0wsFRvK0wohkR2htijf3xwiGXvMAJLxe3/uWUErfDwmaHyIyj lNCKfq4YiG4ftredUg8zrloaoDXzwEj2PsiBap7vmIbvW/d2Ojem1HemkjTL+loM wF0ILbUn9FxnnMNs4avIkDZj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhBy72G XdlPPlVzK/zUrFSjfVGcMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG djFGSWhoVkctal9jcVlRSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7g8/41YfhL2HoM1E4G1aAP8FRIvh16AU3/Y0Wk9gKxSqvCy57ftZQ 0ytOtJZPmiieRKGt8iCDgBZ/vszBarz4nu8Jm6cPVPW/3l8ggRj3CbThZDfS/27v qjBrpiBEZDCpUCk2FwSTyN990RARWYMzllmn0jumzu93FSGFZ9WJWGkHwEIkPGnu lFwW9Dx/cQx8Oxg//sLdK5LqXdJmYmv5B5Y+hGjbw2SeFus9yNDzMQbRAGgudQDr Xb2cNfkkyQrcLRigRDGPI8c/O0ffBINGCRtyTImgOrb6stNaUTRdL7HXPpsx7BCk w4g4J1l63EneGwtPOPwpeCQK2uZwIga9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:47 2025 by rpki-client