$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: GerALapAaKjNuGgOcSLGpQnfMTGrnFpb6/61o/tf978= Subject key identifier: 0C:F0:47:1F:36:BD:D1:40:DF:70:80:A1:05:C5:43:2F:9A:A0:45:3C Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B43 Signing time: Fri 22 Aug 2025 16:21:50 +0000 Manifest this update: Fri 22 Aug 2025 16:21:49 +0000 Manifest next update: Fri 29 Aug 2025 16:21:49 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: GgmAXI1FfOUMRXhDhAm5Spf73v4CoPUJSdvWe35brQ4=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6990 (0x1b4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Aug 22 16:21:49 2025 GMT Not After : Aug 29 16:21:49 2025 GMT Subject: CN=68a8991e-26f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:ad:6f:e1:57:1a:ca:b8:cb:15:8d:a6:f2: 40:8c:ea:99:ea:84:68:79:bd:bc:98:f5:89:b6:66: 4a:ac:86:7e:ca:77:71:f2:e4:87:a2:b5:39:29:48: 72:c4:3b:25:22:33:82:0b:14:b0:74:d2:e9:aa:8e: 6e:4f:94:a9:3a:b4:30:86:10:e1:fa:e5:df:74:97: 49:12:75:3f:24:89:3b:3a:4a:02:8b:e6:75:11:fc: 86:6f:24:e1:67:4b:bd:c2:18:6e:72:2f:27:6b:b7: 83:69:67:60:04:7f:40:05:17:11:21:e7:da:f9:36: 71:f2:70:bc:8d:4b:6d:c1:f9:06:a8:fb:41:ab:ae: 01:37:d5:f9:e8:39:d5:fb:4e:cc:59:e2:05:f6:05: c8:0d:9d:a8:f1:6c:d9:fc:37:5b:83:97:ab:5b:df: 19:ed:e5:31:30:71:46:81:71:c9:b2:47:d8:dc:70: 04:e0:fd:4f:ec:c6:22:22:f0:b4:b9:00:1d:05:3a: 00:02:ff:30:c5:65:40:b7:f0:88:ae:60:33:ea:f9: e7:46:de:be:5d:d8:fc:44:c6:26:4d:08:d9:28:95: 2d:06:29:d5:61:fb:2f:0d:38:b2:8a:04:6c:14:b7: ec:72:8b:3e:ea:a6:5a:52:06:7a:9d:a0:a4:2d:62: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F0:47:1F:36:BD:D1:40:DF:70:80:A1:05:C5:43:2F:9A:A0:45:3C X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:05:f7:fb:56:2e:3a:be:75:5f:20:95:b5:61:9e:01:dd:31: 1a:1e:2d:8e:6c:7e:88:d6:c1:77:33:78:84:9f:3f:7e:67:b3: fc:d9:f5:4e:49:56:c7:bb:b3:b4:45:73:ac:de:44:01:dc:4f: 46:eb:a5:3f:da:b9:bb:de:a1:46:e5:40:ac:45:3b:65:b6:7b: 10:e1:b4:9f:06:a9:67:f9:21:7b:11:66:0f:c7:cb:28:98:4a: 8c:6a:ea:60:8e:bc:64:c8:a6:c7:97:a4:a6:04:08:96:36:ba: 10:bb:aa:46:ba:48:df:45:87:45:34:3e:6f:32:0a:8d:a1:2b: 55:71:de:9f:5a:3e:70:1d:1b:f9:20:1f:b9:2e:c7:5a:c9:5b: 53:f5:33:b5:49:9e:f7:ab:50:33:b6:14:ef:9c:a9:f0:a2:6d: 24:2b:68:f4:08:e3:12:09:6d:ef:f0:1d:c2:22:88:b0:5e:2f: c4:16:29:22:4f:2a:de:6a:fa:55:79:6d:71:c5:57:60:c6:2e: 22:8b:43:1b:ec:5d:c0:14:37:53:01:8a:ea:6a:28:6b:09:0b: ec:3e:75:c7:7e:57:b3:8a:05:de:1f:01:a6:34:ce:74:f3:17: 68:32:5d:74:66:07:71:c4:a2:e8:84:76:d4:ce:1b:3f:a4:fe: 67:8d:13:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwODIyMTYyMTQ5WhcNMjUwODI5MTYyMTQ5WjAYMRYwFAYD VQQDEw02OGE4OTkxZS0yNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCStb+FXGsq4yxWNpvJAjOqZ6oRoeb28mPWJtmZKrIZ+yndx8uSHorU5KUhy xDslIjOCCxSwdNLpqo5uT5SpOrQwhhDh+uXfdJdJEnU/JIk7OkoCi+Z1EfyGbyTh Z0u9whhuci8na7eDaWdgBH9ABRcRIefa+TZx8nC8jUttwfkGqPtBq64BN9X56DnV +07MWeIF9gXIDZ2o8WzZ/Ddbg5erW98Z7eUxMHFGgXHJskfY3HAE4P1P7MYiIvC0 uQAdBToAAv8wxWVAt/CIrmAz6vnnRt6+Xdj8RMYmTQjZKJUtBinVYfsvDTiyigRs FLfscos+6qZaUgZ6naCkLWJUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzwRx82 vdFA33CAoQXFQy+aoEU8MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbBff7Vi46vnVfIJW1YZ4B3TEaHi2ObH6I1sF3M3iEnz9+Z7P82fVO SVbHu7O0RXOs3kQB3E9G66U/2rm73qFG5UCsRTtltnsQ4bSfBqln+SF7EWYPx8so mEqMaupgjrxkyKbHl6SmBAiWNroQu6pGukjfRYdFND5vMgqNoStVcd6fWj5wHRv5 IB+5LsdayVtT9TO1SZ73q1AzthTvnKnwom0kK2j0COMSCW3v8B3CIoiwXi/EFiki TyreavpVeW1xxVdgxi4ii0Mb7F3AFDdTAYrqaihrCQvsPnXHflezigXeHwGmNM50 8xdoMl10ZgdxxKLohHbUzhs/pP5njROC -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:33 2025 by rpki-client