$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: 9wxq9EyVUDyjqK8SK5sjZ1T1Dj4HyyLw9f4O/PeA7d4= Subject key identifier: 00:4D:91:0C:5B:97:E5:D0:F0:4C:2D:FA:E4:D8:59:54:F2:E9:50:75 Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 03C0 Signing time: Sat 23 Aug 2025 00:54:50 +0000 Manifest this update: Sat 23 Aug 2025 00:54:49 +0000 Manifest next update: Sat 30 Aug 2025 00:54:49 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: Vl0bGBkfv9LPIGrVY4RHQVahg/F3JbJ1VsmDtB4wA2w=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Aug 23 00:54:49 2025 GMT Not After : Aug 30 00:54:49 2025 GMT Subject: CN=68a91159-109a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:16:75:e6:4e:25:8c:95:97:b5:5b:ef:7a: 14:b8:2a:84:7a:92:ed:27:dd:ce:4e:bb:f2:28:02: f4:c1:8e:5b:53:ea:c5:fa:48:1d:bf:23:e9:85:10: f6:5d:30:ec:b1:7d:bc:c5:e2:3a:fc:cd:a7:f9:b6: c8:85:02:fe:f1:88:ec:be:32:8e:d4:1d:99:9d:83: 37:77:bd:13:c3:48:fe:78:74:cc:55:62:a9:a0:87: b8:7f:dc:8e:d9:da:56:2c:f4:8c:17:4e:1f:6d:2f: 2d:bd:a1:40:42:bb:24:85:70:63:d3:85:ec:22:4a: 3b:81:e1:bc:fd:f1:0f:fa:19:20:fc:e5:e3:f8:e3: b3:ce:f9:9f:ad:27:29:e4:0d:57:bb:30:04:51:95: 81:a9:42:fc:88:e2:2f:41:b7:34:c1:6c:9c:1b:af: 99:e8:4d:93:f2:ff:82:e3:8c:f0:70:55:26:34:d9: 4a:5e:3d:56:dd:59:81:dd:d0:36:03:a1:96:85:d8: 29:85:86:a9:33:e4:f7:ae:0b:bc:5a:9c:6f:8d:c9: bf:61:da:86:a0:6b:77:25:44:2e:34:53:48:13:b5: cf:2f:07:8e:13:f8:9b:3d:41:5c:7e:eb:ac:14:ab: 98:ac:1d:5e:35:be:f3:b8:91:91:d7:06:20:02:6d: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4D:91:0C:5B:97:E5:D0:F0:4C:2D:FA:E4:D8:59:54:F2:E9:50:75 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:60:f9:3e:ab:f2:dc:e8:51:29:2d:3c:3b:17:a5:cd:1c:ff: 8c:67:35:f8:7a:97:7a:5a:67:02:7c:30:df:0e:42:ab:0d:b3: 6b:07:08:1c:c2:30:e9:9f:5b:60:db:63:f2:38:50:02:f8:93: a3:38:e0:15:b7:d8:c6:db:73:1e:6c:2a:59:c0:16:f4:97:48: 68:ad:a7:70:8d:b3:bc:f5:a4:72:df:e3:cf:e0:68:73:1c:ca: bc:c3:26:98:b6:36:49:38:8d:d2:7e:01:ea:23:8a:99:6c:57: 41:4c:ce:da:85:0d:6c:f3:9b:93:6e:04:46:84:95:0b:fb:00: 5a:b6:88:b8:b4:84:40:5c:22:bd:f7:74:74:b0:ab:a4:ab:a8: 53:69:e6:17:37:da:f4:9a:3d:9e:72:91:d6:e6:82:af:70:68: e9:3b:43:fd:7a:3a:d2:72:4f:36:b9:a4:4e:fb:2a:04:84:53: 5c:8d:04:06:ae:36:fb:70:f7:e6:c9:5d:cc:a1:0d:75:9c:07: 3d:eb:d8:e3:a2:f0:bc:c5:22:df:ba:f9:27:7a:5b:d2:c4:63: 76:95:19:02:55:3f:34:73:1e:59:2e:3a:01:90:59:27:52:7d: 21:36:bc:dc:53:1f:05:1f:12:3c:8f:b0:f3:bb:7d:e7:5e:b1: 7c:4e:7d:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUwODIzMDA1NDQ5WhcNMjUwODMwMDA1NDQ5WjAYMRYwFAYD VQQDEw02OGE5MTE1OS0xMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVQWdeZOJYyVl7Vb73oUuCqEepLtJ93OTrvyKAL0wY5bU+rF+kgdvyPphRD2 XTDssX28xeI6/M2n+bbIhQL+8YjsvjKO1B2ZnYM3d70Tw0j+eHTMVWKpoIe4f9yO 2dpWLPSMF04fbS8tvaFAQrskhXBj04XsIko7geG8/fEP+hkg/OXj+OOzzvmfrScp 5A1XuzAEUZWBqUL8iOIvQbc0wWycG6+Z6E2T8v+C44zwcFUmNNlKXj1W3VmB3dA2 A6GWhdgphYapM+T3rgu8Wpxvjcm/YdqGoGt3JUQuNFNIE7XPLweOE/ibPUFcfuus FKuYrB1eNb7zuJGR1wYgAm2CdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABNkQxb l+XQ8Ewt+uTYWVTy6VB1MB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPYPk+q/Lc6FEpLTw7F6XNHP+MZzX4epd6WmcCfDDfDkKrDbNrBwgc wjDpn1tg22PyOFAC+JOjOOAVt9jG23MebCpZwBb0l0horadwjbO89aRy3+PP4Ghz HMq8wyaYtjZJOI3SfgHqI4qZbFdBTM7ahQ1s85uTbgRGhJUL+wBatoi4tIRAXCK9 93R0sKukq6hTaeYXN9r0mj2ecpHW5oKvcGjpO0P9ejrSck82uaRO+yoEhFNcjQQG rjb7cPfmyV3MoQ11nAc969jjovC8xSLfuvknelvSxGN2lRkCVT80cx5ZLjoBkFkn Un0hNrzcUx8FHxI8j7Dzu33nXrF8Tn1r -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:39 2025 by rpki-client