$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: ZXZ2MixeFz/6NRqTixgZEwR7DJWM8w1lcsYiLJxy8mY= Subject key identifier: C2:E7:54:11:B8:09:5A:E1:B4:20:6E:56:65:6D:37:59:CD:B3:10:8B Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 039D Signing time: Thu 03 Jul 2025 01:09:56 +0000 Manifest this update: Thu 03 Jul 2025 01:09:56 +0000 Manifest next update: Thu 10 Jul 2025 01:09:56 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: V4MGbRxiA64vNdyx072yelB27W9lTD1aDx8UCU25o+M=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Jul 3 01:09:56 2025 GMT Not After : Jul 10 01:09:56 2025 GMT Subject: CN=6865d864-c64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:b8:16:b1:4b:f5:55:4b:75:5e:8f:9e:2a: 58:c0:5a:13:fd:93:05:d1:43:5f:49:5c:b9:88:11: 84:b7:a6:f8:35:eb:49:d2:ce:ff:3d:24:c8:0c:7a: 92:44:55:21:69:68:fa:26:a8:6b:de:26:00:a7:58: 0e:22:f9:4e:14:58:44:60:55:dc:32:c7:67:a8:d3: f3:03:ca:04:86:b3:c6:61:a8:51:06:ef:03:2e:cc: 51:be:84:f8:f5:e5:b9:55:08:03:f7:c5:13:1f:05: 67:53:ff:01:52:ad:45:0d:22:82:1c:1c:fc:b3:3b: a4:7f:e7:49:e9:74:be:37:ad:81:5b:ef:d3:64:f4: ce:10:09:e3:52:de:ee:a7:c6:4e:09:96:db:3a:d5: 5e:b8:35:a3:42:08:c0:b3:cc:9b:40:cc:02:1e:79: c8:19:34:b8:70:8d:cf:2a:82:0d:ee:f1:88:8a:7d: ef:0e:cd:09:d0:22:c1:ce:8f:45:e4:38:7f:21:21: 42:f1:7f:25:9b:82:80:57:23:07:8b:2e:55:62:c3: 37:3f:e5:25:d9:6f:c1:c4:cf:3d:8a:31:e1:f9:e8: 8a:4f:22:40:0c:de:85:28:9f:94:d8:25:12:ab:c4: ec:fc:be:6b:e1:56:06:f6:14:fa:4e:2e:fe:cf:4e: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E7:54:11:B8:09:5A:E1:B4:20:6E:56:65:6D:37:59:CD:B3:10:8B X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e4:4d:28:98:d8:50:9f:3e:ec:08:e0:70:6a:d7:45:5d:cf: c4:d2:8a:b7:d7:eb:ba:8d:58:c4:eb:9f:f0:bd:f5:17:19:f6: a1:78:e7:7c:75:e0:5f:ef:27:d4:95:6a:d4:fc:74:33:04:19: 0d:2f:c6:df:6e:de:d2:ef:ec:7b:5c:9f:8a:72:e4:0d:d0:b7: 69:6d:6a:3c:ee:8e:cf:57:51:84:db:96:fa:f0:86:c2:c6:9d: 3d:a2:57:f7:99:16:01:e4:75:3d:89:16:7d:ca:96:b8:86:5c: 53:48:91:4e:25:d7:1d:4f:e2:97:8e:0b:b4:2c:bc:de:1f:de: 59:1b:f5:3f:e7:1f:86:72:d5:ff:83:b8:15:7e:6a:bb:f5:5d: 5b:d3:4e:4e:d9:cb:06:77:64:03:7c:95:9e:8b:8e:32:0b:ba: b2:8a:c1:46:4d:b1:12:01:8b:1d:e5:ef:e7:49:da:d3:d5:5a: d3:4c:40:ac:43:25:9d:e1:4a:fd:8b:68:85:a5:e0:bb:0b:8c: 82:a9:90:33:d1:5a:a6:2b:e8:b9:03:2b:49:c4:2f:05:9a:20: 03:27:1a:1f:8e:07:a7:d5:80:c5:4c:2f:8e:6b:de:da:aa:f8: 7b:ac:9c:43:73:e7:9c:1f:6d:be:c1:f1:8d:13:09:28:f5:15: 7b:2b:0d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUwNzAzMDEwOTU2WhcNMjUwNzEwMDEwOTU2WjAYMRYwFAYD VQQDEw02ODY1ZDg2NC1jNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra64FrFL9VVLdV6PnipYwFoT/ZMF0UNfSVy5iBGEt6b4NetJ0s7/PSTIDHqS RFUhaWj6Jqhr3iYAp1gOIvlOFFhEYFXcMsdnqNPzA8oEhrPGYahRBu8DLsxRvoT4 9eW5VQgD98UTHwVnU/8BUq1FDSKCHBz8szukf+dJ6XS+N62BW+/TZPTOEAnjUt7u p8ZOCZbbOtVeuDWjQgjAs8ybQMwCHnnIGTS4cI3PKoIN7vGIin3vDs0J0CLBzo9F 5Dh/ISFC8X8lm4KAVyMHiy5VYsM3P+Ul2W/BxM89ijHh+eiKTyJADN6FKJ+U2CUS q8Ts/L5r4VYG9hT6Ti7+z07vKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLnVBG4 CVrhtCBuVmVtN1nNsxCLMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw5E0omNhQnz7sCOBwatdFXc/E0oq31+u6jVjE65/wvfUXGfaheOd8 deBf7yfUlWrU/HQzBBkNL8bfbt7S7+x7XJ+KcuQN0LdpbWo87o7PV1GE25b68IbC xp09olf3mRYB5HU9iRZ9ypa4hlxTSJFOJdcdT+KXjgu0LLzeH95ZG/U/5x+GctX/ g7gVfmq79V1b005O2csGd2QDfJWei44yC7qyisFGTbESAYsd5e/nSdrT1VrTTECs QyWd4Ur9i2iFpeC7C4yCqZAz0VqmK+i5AytJxC8FmiADJxofjgen1YDFTC+Oa97a qvh7rJxDc+ecH22+wfGNEwko9RV7Kw15 -----END CERTIFICATE-----Generated at Fri Jul 4 14:22:55 2025 by rpki-client