$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft File: qJeuj_IUHLM06qS4gcw8VlbUdDY.mft (raw, json) Hash identifier: bti8kysGHLKPpsre0CF4ogkny258amhdUuovYz6J0KU= Subject key identifier: AA:E8:E6:FB:18:9E:38:17:01:F3:68:12:43:08:B7:46:61:CC:0F:17 Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 Certificate issuer: /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft Manifest number: 24 Signing time: Sat 23 Aug 2025 02:03:38 +0000 Manifest this update: Sat 23 Aug 2025 02:03:37 +0000 Manifest next update: Sat 30 Aug 2025 02:03:37 +0000 Files and hashes: 1: qJeuj_IUHLM06qS4gcw8VlbUdDY.crl (hash: aeenfZjfcOv3X6gtygpyJcKy4qRp4qbY6kMa+L18c/0=) 2: 87FB8F3E614711F0AA20F35DC4F9AE02.roa (hash: vZFJvJ1TxTtoBoReX1Xn4H7Py94psmS4LWOK+hAq3I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Validity Not Before: Aug 23 02:03:37 2025 GMT Not After : Aug 30 02:03:37 2025 GMT Subject: CN=68a9217a-b492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:7a:13:b8:80:41:c0:a0:8b:71:93:39:63: d1:a8:42:49:e1:0d:bd:68:eb:00:43:22:51:55:6c: 5c:74:61:83:f8:99:36:91:5b:57:b8:98:15:34:b9: 0f:7b:0f:3f:90:a2:00:d9:b2:6a:06:52:58:43:e3: 7f:42:58:84:75:e0:5e:9b:23:32:3d:39:1e:99:ee: 95:00:14:9e:0d:e2:87:81:1a:e1:ca:db:f1:88:75: e3:ca:d2:3d:8b:46:db:22:c8:ef:8c:11:69:34:ba: 8c:20:f6:47:0e:17:d0:ca:d7:8a:23:d3:8b:f1:8b: 1a:ab:9f:c2:a4:12:3a:34:4a:d3:c0:bf:b8:55:e1: 85:25:af:83:69:08:c0:5f:ac:da:e0:90:cc:00:a0: f6:7c:9c:59:0e:cf:f0:55:a4:3d:2c:6f:80:87:5a: 0c:25:5e:fa:1b:bb:45:06:c6:e5:ec:fd:e6:bb:0d: 0f:d3:89:0f:21:b0:e1:c6:71:81:e4:20:45:5a:75: 31:3c:77:3a:d3:15:4c:a7:65:0a:96:b4:1c:ad:a4: 2b:cd:11:86:24:7d:58:cc:66:07:58:1f:d5:3e:22: 8d:2d:68:d4:e9:88:19:3b:39:4a:0d:5b:72:dd:09: b6:35:67:a4:08:bf:45:de:97:0f:32:10:30:39:95: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E8:E6:FB:18:9E:38:17:01:F3:68:12:43:08:B7:46:61:CC:0F:17 X509v3 Authority Key Identifier: keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:84:e1:7a:5d:b2:5f:b9:aa:68:18:44:ba:36:b3:2a:ae:f8: 1f:5f:03:f0:cf:c8:7b:26:9e:5d:41:22:da:6d:af:38:33:80: 9a:1d:e4:7b:b0:7f:79:7d:25:96:fe:fc:b2:d6:f5:4d:10:b6: eb:17:92:4c:ba:a4:74:04:6c:f8:80:ac:38:d4:2e:7e:5d:6c: 26:7b:9a:38:1c:c0:f2:f2:9c:74:39:f6:71:c3:1c:d2:37:aa: f3:eb:58:a4:e3:cf:66:14:44:5f:f2:43:f7:0e:99:6b:78:8f: 3d:5c:02:6d:0c:90:9f:b9:65:d4:c5:7c:a0:d2:f5:4a:e0:a1: f3:e5:df:b4:71:3e:9e:a7:c4:1e:6e:f3:73:65:2b:e2:4c:67: 9f:51:7a:f3:d0:07:c5:b8:57:61:a2:7c:9f:ab:d3:23:1b:5d: 58:66:d9:f4:08:28:d1:e1:89:76:07:80:f6:bd:c9:1a:90:bc: 9b:74:d3:44:ca:c3:bd:49:85:d7:f1:64:eb:2b:5a:bc:d6:98: 03:fb:41:77:a4:8c:cd:89:47:96:f1:c0:ae:c8:1d:1a:7d:09: 9f:68:f0:7f:f3:fc:a3:78:da:bd:97:f5:7b:c6:20:a1:06:b4: 76:54:53:7a:27:a0:2d:4d:ca:ea:da:3e:98:af:a4:b8:46:b4: a0:34:66:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjJCODExMC8GA1UEBRMoQTg5N0FFOEZGMjE0MUNCMzM0RUFBNEI4ODFDQzNDNTY1 NkQ0NzQzNjAeFw0yNTA4MjMwMjAzMzdaFw0yNTA4MzAwMjAzMzdaMBgxFjAUBgNV BAMTDTY4YTkyMTdhLWI0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLynoTuIBBwKCLcZM5Y9GoQknhDb1o6wBDIlFVbFx0YYP4mTaRW1e4mBU0uQ97 Dz+QogDZsmoGUlhD439CWIR14F6bIzI9OR6Z7pUAFJ4N4oeBGuHK2/GIdePK0j2L RtsiyO+MEWk0uowg9kcOF9DK14oj04vxixqrn8KkEjo0StPAv7hV4YUlr4NpCMBf rNrgkMwAoPZ8nFkOz/BVpD0sb4CHWgwlXvobu0UGxuXs/ea7DQ/TiQ8hsOHGcYHk IEVadTE8dzrTFUynZQqWtBytpCvNEYYkfVjMZgdYH9U+Io0taNTpiBk7OUoNW3Ld CbY1Z6QIv0Xelw8yEDA5lWQzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqujm+xie OBcB82gSQwi3RmHMDxcwHwYDVR0jBBgwFoAUqJeuj/IUHLM06qS4gcw8VlbUdDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCMkI4LzM1ODNFNTg2NTE2 NTExRjBCQzFDQUY3NUM0RjlBRTAyL3FKZXVqX0lVSExNMDZxUzRnY3c4VmxiVWRE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUpldWpfSVVITE0wNnFTNGdjdzhWbGJVZERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC MkI4LzM1ODNFNTg2NTE2NTExRjBCQzFDQUY3NUM0RjlBRTAyL3FKZXVqX0lVSExN MDZxUzRnY3c4VmxiVWREWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMyE4Xpdsl+5qmgYRLo2syqu+B9fA/DPyHsmnl1BItptrzgzgJod5Huw f3l9JZb+/LLW9U0QtusXkky6pHQEbPiArDjULn5dbCZ7mjgcwPLynHQ59nHDHNI3 qvPrWKTjz2YURF/yQ/cOmWt4jz1cAm0MkJ+5ZdTFfKDS9UrgofPl37RxPp6nxB5u 83NlK+JMZ59RevPQB8W4V2GifJ+r0yMbXVhm2fQIKNHhiXYHgPa9yRqQvJt000TK w71JhdfxZOsrWrzWmAP7QXekjM2JR5bxwK7IHRp9CZ9o8H/z/KN42r2X9XvGIKEG tHZUU3onoC1NyuraPpivpLhGtKA0Zn4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:41 2025 by rpki-client