$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: MMynwfN88QqylEWmLnJzR6X2obNUXax2Xt0qw+sl7pI= Subject key identifier: D0:61:F8:BD:39:FB:06:F6:2A:CC:E1:0D:A8:22:3B:A2:3C:74:87:1B Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 054D Signing time: Fri 22 Aug 2025 23:38:49 +0000 Manifest this update: Fri 22 Aug 2025 23:38:49 +0000 Manifest next update: Fri 29 Aug 2025 23:38:49 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: vlUDRrwNEf3qOi7DQss2D+Ns7eBTLuDUDUd9NIyXlSM=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Aug 22 23:38:49 2025 GMT Not After : Aug 29 23:38:49 2025 GMT Subject: CN=68a8ff89-3afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:3d:21:e5:e7:cc:f9:53:f7:b5:71:1c:27: ae:ed:cd:2b:e6:73:3a:b4:77:c9:23:15:ee:7a:6e: 45:58:97:14:dd:a6:10:20:12:4b:0f:ee:db:2f:e6: 74:81:80:0e:e5:3b:ad:f1:5b:30:d1:57:25:ce:09: da:f4:fa:f0:a7:78:6a:b1:eb:c7:f2:ed:01:ee:a3: 54:00:d1:4c:53:04:28:58:ef:0c:5a:90:c0:c5:be: e8:3b:4a:c6:2e:94:6a:8c:73:87:75:05:77:98:8c: f8:e9:db:b2:b5:a4:78:06:89:63:49:53:ac:85:9f: 2e:da:95:db:aa:a3:d3:7e:2d:d4:56:75:12:ca:36: fa:90:00:3c:23:23:1c:a4:14:ec:da:59:d4:f8:fb: ff:8d:33:d5:c0:33:d0:52:7a:7f:f7:ba:97:17:35: 8c:c0:22:63:12:0a:c3:cc:bf:4d:a8:c1:51:30:97: ad:da:97:4f:41:cf:ad:33:0c:d6:5e:1e:6a:11:bb: 92:a5:53:32:54:c7:f0:b2:ab:c6:f7:eb:3d:9b:2d: f4:34:1e:06:64:66:ce:ab:e0:c4:ed:20:42:32:b5: cb:c3:33:da:07:6e:2e:36:1a:8b:b4:93:f6:e1:bf: cc:9a:6a:21:90:53:ca:8f:98:43:3e:51:b0:90:72: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:61:F8:BD:39:FB:06:F6:2A:CC:E1:0D:A8:22:3B:A2:3C:74:87:1B X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5b:98:99:a0:b5:b7:db:83:6b:e2:60:01:fa:39:23:9a:78: a6:dc:67:fe:6a:98:23:7e:c7:06:e7:b5:9e:25:1d:e6:8a:2a: 3e:de:36:2e:3d:ea:db:f4:46:2d:d9:30:f3:8a:4f:21:9d:94: 73:03:b3:92:e4:82:67:1b:f6:46:3d:34:73:62:71:8d:45:95: 21:3a:16:12:83:db:e2:44:ab:e3:b1:36:1f:3c:03:e2:6b:0a: 1d:17:6c:d3:fc:38:5d:81:c0:c5:14:44:0e:11:bd:d1:22:b1: f6:a9:90:29:0d:4b:84:2a:4c:c0:e4:9e:f6:5f:e0:f3:04:30: 02:a2:0f:11:a4:87:04:d9:a1:0c:67:5d:5a:6f:6b:d7:b3:3e: 39:1c:5a:b3:d1:ae:5a:ba:61:4d:da:cb:71:d6:44:1f:2d:bd: ff:4b:0f:e6:ed:ec:e2:77:43:5b:0d:5f:01:ec:c7:63:89:7a: ea:01:dc:85:bf:b6:0a:57:8a:fa:2d:77:b3:74:23:5a:95:85: ed:27:23:e2:41:69:81:e2:dd:29:63:3f:e6:03:ea:4d:53:09: 89:be:33:90:0f:7f:06:00:c5:04:1b:5c:af:e7:75:2b:33:03: 51:8e:8d:d5:80:12:4f:be:90:cd:35:8c:a0:61:c5:f8:ba:39: 15:5d:f6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUwODIyMjMzODQ5WhcNMjUwODI5MjMzODQ5WjAYMRYwFAYD VQQDEw02OGE4ZmY4OS0zYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohg9IeXnzPlT97VxHCeu7c0r5nM6tHfJIxXuem5FWJcU3aYQIBJLD+7bL+Z0 gYAO5Tut8Vsw0Vclzgna9Prwp3hqsevH8u0B7qNUANFMUwQoWO8MWpDAxb7oO0rG LpRqjHOHdQV3mIz46duytaR4BoljSVOshZ8u2pXbqqPTfi3UVnUSyjb6kAA8IyMc pBTs2lnU+Pv/jTPVwDPQUnp/97qXFzWMwCJjEgrDzL9NqMFRMJet2pdPQc+tMwzW Xh5qEbuSpVMyVMfwsqvG9+s9my30NB4GZGbOq+DE7SBCMrXLwzPaB24uNhqLtJP2 4b/MmmohkFPKj5hDPlGwkHI34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBh+L05 +wb2KszhDagiO6I8dIcbMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEW5iZoLW324Nr4mAB+jkjmnim3Gf+apgjfscG57WeJR3miio+3jYu Perb9EYt2TDzik8hnZRzA7OS5IJnG/ZGPTRzYnGNRZUhOhYSg9viRKvjsTYfPAPi awodF2zT/DhdgcDFFEQOEb3RIrH2qZApDUuEKkzA5J72X+DzBDACog8RpIcE2aEM Z11ab2vXsz45HFqz0a5aumFN2stx1kQfLb3/Sw/m7ezid0NbDV8B7MdjiXrqAdyF v7YKV4r6LXezdCNalYXtJyPiQWmB4t0pYz/mA+pNUwmJvjOQD38GAMUEG1yv53Ur MwNRjo3VgBJPvpDNNYygYcX4ujkVXfYL -----END CERTIFICATE-----Generated at Sat Aug 23 23:56:41 2025 by rpki-client