$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: BBfKUJbWQmrF80Mni+gJVpoIHem0CLpl6HnM4/qhFMo= Subject key identifier: A1:E5:35:0D:0C:5A:EB:F4:08:3C:BC:13:9A:B4:4B:23:71:D1:AE:F3 Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 03B7 Signing time: Sat 23 Aug 2025 00:58:00 +0000 Manifest this update: Sat 23 Aug 2025 00:57:59 +0000 Manifest next update: Sat 30 Aug 2025 00:57:59 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: 3rFnaQ9Z+5YHWcLx2bfFU484Rrz2CDns4GrLl4IF5qU=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Aug 23 00:57:59 2025 GMT Not After : Aug 30 00:57:59 2025 GMT Subject: CN=68a91218-8f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fa:99:40:12:80:33:23:d4:be:7a:3e:c7:2f: 61:e1:3e:8e:a9:4f:d2:5c:6d:5d:32:e3:11:f8:ce: ef:ba:44:0b:7e:7a:3f:ff:e0:85:88:94:d1:5c:7e: 31:8b:25:ae:96:11:c2:b7:9e:a6:d3:c9:a9:da:49: 79:a5:30:22:9c:2e:05:f6:f4:40:59:12:3c:37:fe: a0:6e:54:ce:5b:96:c4:f2:7b:df:62:3a:24:1b:f3: 1c:ea:88:9d:58:18:a8:fa:d7:e6:94:7f:81:e7:97: 15:76:6e:e9:4f:33:dc:35:c8:04:d1:28:b7:c9:e6: 4d:04:8f:a2:36:c1:86:f5:6a:76:e8:a3:06:f0:f4: 5e:14:52:d2:0d:24:f0:36:5b:d2:02:5e:88:1f:16: 76:6a:16:57:24:91:c6:aa:1a:33:20:2e:73:e6:06: 6f:14:82:76:b5:08:de:8e:bb:9a:33:4d:fa:2f:14: 0e:94:a6:db:8c:e6:a5:3b:78:35:4e:7d:d4:1d:62: 89:94:4c:ae:e5:aa:40:f8:32:4d:a3:39:b5:19:07: 08:4e:87:c6:f5:15:52:0b:ff:cd:ae:10:d0:ef:be: 40:2f:c9:2c:ba:d0:6d:3d:0b:55:f6:65:91:0c:4e: f8:88:68:4e:36:7f:88:a1:02:5e:6b:75:91:d5:96: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E5:35:0D:0C:5A:EB:F4:08:3C:BC:13:9A:B4:4B:23:71:D1:AE:F3 X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:7c:29:80:83:7b:d9:24:81:7e:c3:ae:cb:46:8f:35:a0: c9:5a:27:e9:5b:2b:cd:68:fc:64:f0:90:aa:59:f5:16:4a:cc: c0:d4:b5:27:a0:e5:c3:5b:79:35:7d:0a:c1:b3:e7:dd:72:12: ab:46:26:1b:eb:6a:e0:4f:ff:c2:f2:8e:d2:fe:63:0b:76:31: 3e:5a:06:39:7f:a9:ec:a3:07:bf:8b:4f:60:2a:02:f4:25:4e: 00:73:57:8c:26:4c:41:d0:97:18:42:a5:ab:31:bd:0b:87:86: 80:de:98:12:e3:ce:ef:fe:f9:91:8f:59:05:b2:7d:de:7b:3a: 4c:a8:d6:ca:7b:d7:c9:6e:a4:a1:2f:60:b5:b3:61:f7:f7:8b: 14:c9:7e:a3:9e:a1:69:09:48:77:d6:69:56:d0:c3:1a:cf:43: 0f:eb:96:1b:b8:63:b5:ef:c7:2d:60:30:c3:ed:d8:97:c7:1b: 24:38:ec:e9:02:60:be:ff:79:7f:c2:29:ed:73:b3:95:95:f7: 40:fb:e4:8b:a1:11:dd:37:b9:df:cc:fe:66:65:96:6b:34:bb: aa:d4:ec:0f:af:57:a3:7a:9c:86:e0:1c:1d:2a:4e:84:31:cc: b8:ca:96:95:95:7a:57:cb:ad:d7:be:10:33:4e:33:c5:13:65: 68:ff:90:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUwODIzMDA1NzU5WhcNMjUwODMwMDA1NzU5WjAYMRYwFAYD VQQDEw02OGE5MTIxOC04Zjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fqZQBKAMyPUvno+xy9h4T6OqU/SXG1dMuMR+M7vukQLfno//+CFiJTRXH4x iyWulhHCt56m08mp2kl5pTAinC4F9vRAWRI8N/6gblTOW5bE8nvfYjokG/Mc6oid WBio+tfmlH+B55cVdm7pTzPcNcgE0Si3yeZNBI+iNsGG9Wp26KMG8PReFFLSDSTw NlvSAl6IHxZ2ahZXJJHGqhozIC5z5gZvFIJ2tQjejruaM036LxQOlKbbjOalO3g1 Tn3UHWKJlEyu5apA+DJNozm1GQcITofG9RVSC//NrhDQ775AL8ksutBtPQtV9mWR DE74iGhONn+IoQJea3WR1ZYrzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHlNQ0M Wuv0CDy8E5q0SyNx0a7zMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMcHwpgIN72SSBfsOuy0aPNaDJWifpWyvNaPxk8JCqWfUWSszA1LUn oOXDW3k1fQrBs+fdchKrRiYb62rgT//C8o7S/mMLdjE+WgY5f6nsowe/i09gKgL0 JU4Ac1eMJkxB0JcYQqWrMb0Lh4aA3pgS487v/vmRj1kFsn3eezpMqNbKe9fJbqSh L2C1s2H394sUyX6jnqFpCUh31mlW0MMaz0MP65YbuGO178ctYDDD7diXxxskOOzp AmC+/3l/wintc7OVlfdA++SLoRHdN7nfzP5mZZZrNLuq1OwPr1ejepyG4BwdKk6E Mcy4ypaVlXpXy63XvhAzTjPFE2Vo/5AI -----END CERTIFICATE-----Generated at Sun Aug 24 09:02:05 2025 by rpki-client