$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: 3qrFS2jfWOW2OKuwq9bEmPFgKwNLv6FuNKQSMOO7xSA= Subject key identifier: E1:86:A1:4F:EA:0B:6D:44:3F:58:8C:33:06:F7:95:E1:48:1E:C3:E0 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 8C Signing time: Sat 23 Aug 2025 06:45:54 +0000 Manifest this update: Sat 23 Aug 2025 06:45:54 +0000 Manifest next update: Sat 30 Aug 2025 06:45:54 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: CQrvq7LnnWe2hmgHpRUj4B73LnOPKGhVxNJANTSjWcU=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Aug 23 06:45:54 2025 GMT Not After : Aug 30 06:45:54 2025 GMT Subject: CN=68a963a2-fad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0c:9d:a9:69:74:34:54:1a:97:ad:e4:5c:2b: be:c2:5b:ba:eb:6e:68:ad:5d:8d:7c:72:cb:f6:21: e7:85:fd:bb:3e:9a:06:17:4b:ac:30:fa:0e:e0:cb: 69:eb:30:03:78:32:bf:37:0f:11:53:f7:0a:bf:9f: b0:73:9d:07:4d:78:b4:9a:3b:a3:cc:6e:e8:86:ca: e5:c8:8e:5c:87:18:48:a8:0f:fb:0d:9a:13:7d:cb: 6c:d8:b8:68:82:b8:03:f9:ef:1d:44:11:af:21:64: e8:ad:ad:98:9f:a6:3c:53:02:33:b6:4e:fd:06:98: c8:89:62:95:c6:eb:4b:c6:a0:76:c3:aa:11:52:8c: 43:b0:34:b7:38:ae:00:e5:cf:3a:53:23:27:aa:ec: 57:5d:02:b0:04:08:a4:77:c7:6f:4f:2f:3c:72:eb: 9c:e2:b2:93:d5:72:13:d0:0f:fa:a3:63:4f:f7:8d: 29:25:8c:ca:b2:dc:bf:6e:7e:6e:21:ee:56:8a:51: 65:54:76:c7:e7:d7:ab:fa:aa:22:f2:2d:23:43:60: 5e:9a:40:e2:86:d4:54:45:1a:b4:d4:61:81:5f:ed: e1:ca:f9:9c:08:4f:5e:77:89:39:11:3a:4d:fb:a1: 36:a1:ef:26:60:9d:3e:ec:d9:5b:4c:7f:4b:56:d4: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:86:A1:4F:EA:0B:6D:44:3F:58:8C:33:06:F7:95:E1:48:1E:C3:E0 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dd:74:0b:dc:a6:17:bc:41:e6:bf:b1:6d:2f:00:82:d6:f9: 9d:76:52:ce:51:88:8e:90:35:d3:8a:cc:c8:14:f7:41:91:19: b6:f6:ea:38:5e:7e:ec:b2:65:35:36:b5:e8:16:ea:da:87:51: 5d:97:20:50:1e:df:7a:24:7a:c2:00:50:9e:8f:ac:3b:0c:c6: 85:02:45:a5:51:20:fd:89:4a:0e:39:06:b5:f9:64:e6:23:db: fc:9f:20:8f:e4:58:4f:26:63:c1:27:90:e5:89:ab:9f:df:74: 46:25:67:0d:6c:c1:1f:b5:e9:25:53:ad:1a:d4:6d:d3:8c:1b: bf:51:b6:a3:3c:3c:2b:87:61:39:c6:8d:4e:5d:83:f3:d3:c2: 4e:8c:50:51:6e:87:0e:ed:73:17:49:5d:20:71:71:6e:5f:6d: d0:db:84:99:ae:80:c1:c1:b0:02:da:5a:7d:80:90:c8:a5:16: 43:12:42:a6:14:7b:89:02:4e:1c:2d:3b:80:09:9d:de:a1:a6: a6:95:aa:8d:02:02:e2:a4:63:3a:ad:11:e5:34:92:2d:3f:c0: 6a:fe:97:9b:72:5a:fa:be:77:ff:e9:a1:ed:bd:26:be:43:46: 50:32:39:40:b4:75:5e:fa:07:44:42:dc:05:74:f2:0f:c8:ed: 73:a2:53:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjUwODIzMDY0NTU0WhcNMjUwODMwMDY0NTU0WjAYMRYwFAYD VQQDEw02OGE5NjNhMi1mYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8wydqWl0NFQal63kXCu+wlu6625orV2NfHLL9iHnhf27PpoGF0usMPoO4Mtp 6zADeDK/Nw8RU/cKv5+wc50HTXi0mjujzG7ohsrlyI5chxhIqA/7DZoTfcts2Lho grgD+e8dRBGvIWTora2Yn6Y8UwIztk79BpjIiWKVxutLxqB2w6oRUoxDsDS3OK4A 5c86UyMnquxXXQKwBAikd8dvTy88cuuc4rKT1XIT0A/6o2NP940pJYzKsty/bn5u Ie5WilFlVHbH59er+qoi8i0jQ2BemkDihtRURRq01GGBX+3hyvmcCE9ed4k5ETpN +6E2oe8mYJ0+7NlbTH9LVtSKRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGGoU/q C21EP1iMMwb3leFIHsPgMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq3XQL3KYXvEHmv7FtLwCC1vmddlLOUYiOkDXTiszIFPdBkRm29uo4 Xn7ssmU1NrXoFurah1FdlyBQHt96JHrCAFCej6w7DMaFAkWlUSD9iUoOOQa1+WTm I9v8nyCP5FhPJmPBJ5Dliauf33RGJWcNbMEfteklU60a1G3TjBu/UbajPDwrh2E5 xo1OXYPz08JOjFBRbocO7XMXSV0gcXFuX23Q24SZroDBwbAC2lp9gJDIpRZDEkKm FHuJAk4cLTuACZ3eoaamlaqNAgLipGM6rRHlNJItP8Bq/pebclr6vnf/6aHtvSa+ Q0ZQMjlAtHVe+gdEQtwFdPIPyO1zolPp -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:39 2025 by rpki-client