$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: 9TNXhNiPFG9ObZDF4k71Cu/59VvF0YEMIFxQsm2WemE= Subject key identifier: CD:37:1A:C1:E5:E4:52:E3:3A:55:EA:9D:65:07:65:88:D4:04:A2:28 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 01DF Signing time: Sat 23 Aug 2025 02:46:22 +0000 Manifest this update: Sat 23 Aug 2025 02:46:22 +0000 Manifest next update: Sat 30 Aug 2025 02:46:22 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: 6QtTMmQvWhSx6Qi1+iChHi4Movw3fCGtJKI1xGwQYh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Aug 23 02:46:22 2025 GMT Not After : Aug 30 02:46:22 2025 GMT Subject: CN=68a92b7e-c52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:03:35:4b:8b:ca:e8:b2:c0:af:6a:59:ab: 0e:b6:68:20:da:2a:2e:bc:10:27:1f:2e:c0:2e:36: d6:c7:c5:dd:15:d4:78:6d:fe:3a:a7:3a:c7:10:2c: 97:c2:78:94:68:3f:02:e9:f5:09:a6:c4:31:78:25: ea:a2:78:fa:fb:28:1f:f9:59:da:a7:a8:e0:7a:62: ca:7b:ef:15:25:3d:f0:92:c4:49:2c:39:4b:c8:7e: 43:cd:27:f6:5f:54:7d:26:51:b5:d1:f8:d0:aa:08: c0:06:8e:b7:58:56:f3:c6:4a:fb:d9:25:24:5c:15: cd:a1:9c:bf:a0:38:17:41:06:62:65:4a:a3:96:ec: e7:cb:40:38:24:d0:4d:70:18:89:29:9b:49:96:71: 23:42:8e:57:71:15:b7:60:09:b4:3f:9e:d8:59:6d: a7:95:1c:a1:3d:ac:71:ef:78:81:d6:70:af:7a:07: 22:99:dc:c8:5f:92:9d:c1:f5:fb:e1:a9:86:cb:6b: a4:fa:78:b8:d3:ea:d3:8e:ef:33:40:7c:55:6d:94: a0:de:dd:12:21:68:dd:42:92:55:fd:4e:8a:ac:a3: fb:cd:42:ac:5e:29:39:d2:77:bb:ad:4e:3f:9e:69: 3c:8c:11:dd:21:b2:c6:b6:7a:d8:b0:c7:fb:94:27: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:37:1A:C1:E5:E4:52:E3:3A:55:EA:9D:65:07:65:88:D4:04:A2:28 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b9:31:db:86:df:4d:04:78:98:d9:13:7b:94:c6:96:ca:6a: b3:1d:1c:6a:ef:e4:f9:a2:66:c6:43:c7:33:e7:e4:3d:66:20: 73:a3:dd:c0:36:d7:26:0c:86:fc:15:ab:24:4b:c3:78:96:1e: a5:c1:2c:c7:0a:16:ea:95:3d:60:81:e3:86:c6:3b:22:49:48: ef:3c:f6:6b:f4:42:07:60:af:d0:86:b1:ca:36:7e:04:74:ff: 16:a9:e8:2d:85:b3:ec:a6:e2:a0:b1:5a:35:e5:87:ef:18:ed: c5:c1:7e:b1:ad:f2:e2:09:e4:7e:e5:04:c0:a8:66:47:c2:ec: 84:f6:28:85:64:35:df:70:52:f0:13:95:44:b6:12:8a:16:48: f7:ec:97:26:5a:fa:57:5f:0b:1f:7b:fa:76:01:61:b4:40:63: 95:f9:4a:08:65:be:f2:3e:3c:43:00:e6:b8:fd:5e:7a:68:bb: fc:78:90:a6:a0:1d:17:20:81:26:86:21:6e:86:4b:bb:50:c0: e2:82:8e:47:f5:84:48:c4:6f:13:28:10:3f:24:6b:b6:f8:70: 10:e5:7d:f4:bb:fa:2f:4f:b6:2b:b3:62:d3:09:e5:b1:6f:27: 18:c1:fd:a8:e4:b6:2b:34:79:5a:fa:17:e5:9d:0c:1b:19:29: e3:40:40:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUwODIzMDI0NjIyWhcNMjUwODMwMDI0NjIyWjAYMRYwFAYD VQQDEw02OGE5MmI3ZS1jNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt8DNUuLyuiywK9qWasOtmgg2iouvBAnHy7ALjbWx8XdFdR4bf46pzrHECyX wniUaD8C6fUJpsQxeCXqonj6+ygf+Vnap6jgemLKe+8VJT3wksRJLDlLyH5DzSf2 X1R9JlG10fjQqgjABo63WFbzxkr72SUkXBXNoZy/oDgXQQZiZUqjluzny0A4JNBN cBiJKZtJlnEjQo5XcRW3YAm0P57YWW2nlRyhPaxx73iB1nCvegcimdzIX5KdwfX7 4amGy2uk+ni40+rTju8zQHxVbZSg3t0SIWjdQpJV/U6KrKP7zUKsXik50ne7rU4/ nmk8jBHdIbLGtnrYsMf7lCfklQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM03GsHl 5FLjOlXqnWUHZYjUBKIoMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRuTHbht9NBHiY2RN7lMaWymqzHRxq7+T5ombGQ8cz5+Q9ZiBzo93A NtcmDIb8FaskS8N4lh6lwSzHChbqlT1ggeOGxjsiSUjvPPZr9EIHYK/QhrHKNn4E dP8WqegthbPspuKgsVo15YfvGO3FwX6xrfLiCeR+5QTAqGZHwuyE9iiFZDXfcFLw E5VEthKKFkj37JcmWvpXXwsfe/p2AWG0QGOV+UoIZb7yPjxDAOa4/V56aLv8eJCm oB0XIIEmhiFuhku7UMDigo5H9YRIxG8TKBA/JGu2+HAQ5X30u/ovT7Yrs2LTCeWx bycYwf2o5LYrNHla+hflnQwbGSnjQEC+ -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:42 2025 by rpki-client