$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json) Hash identifier: 44bCGvlg7uBZOYWXImW3IjQyk9U/1IFh3OcoZTy/Faw= Subject key identifier: 4D:AD:D3:12:B6:A5:67:65:8B:05:5C:99:3C:5F:6E:33:0C:66:5F:18 Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft Manifest number: 015B Signing time: Sat 23 Aug 2025 04:14:26 +0000 Manifest this update: Sat 23 Aug 2025 04:14:26 +0000 Manifest next update: Sat 30 Aug 2025 04:14:26 +0000 Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: fyvToqsF4/DTJO929YpdFQyDIWcF2LM8N2jkPH4KpHg=) 2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Validity Not Before: Aug 23 04:14:26 2025 GMT Not After : Aug 30 04:14:26 2025 GMT Subject: CN=68a94022-abc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:7c:50:dd:34:82:39:45:19:9d:e0:6a:2a: e4:38:ac:90:d1:e9:9c:aa:40:08:1b:60:fa:eb:79: 33:03:44:42:b9:1e:42:b5:04:7e:bc:f6:e8:6d:92: ee:46:be:e9:c6:04:7c:a9:f1:fe:47:fa:d1:c4:30: 62:e3:e1:5c:05:ad:a6:82:2d:25:2c:4b:41:2c:17: db:28:77:5f:1e:b8:50:79:16:7e:ab:16:5e:87:78: cb:b0:5f:cf:eb:9b:a1:ed:18:1c:c9:18:58:88:0f: c5:b5:6c:d6:82:22:83:1c:b3:83:3f:b8:c6:07:41: 38:2b:41:5a:e2:5c:bf:12:d6:85:b3:cf:cb:5b:7f: 2c:fd:8e:11:d1:cf:ae:08:5d:5c:3d:05:e6:25:33: df:0a:3f:61:20:2e:eb:03:44:11:2f:c4:04:09:b4: e3:02:4d:0c:e9:4f:d0:0d:bc:7a:44:0f:ea:22:c4: df:b2:fe:e8:a9:b2:83:29:4b:e6:b9:77:5b:3d:4a: 94:32:5c:28:e8:6f:4b:d1:08:ed:2a:b1:52:12:88: b2:f0:64:77:a0:b5:fa:9a:56:43:b6:4e:4b:5a:ce: 38:ae:c2:65:b1:e3:1d:9e:0a:5c:d5:88:4e:4c:10: 98:68:01:88:9a:c0:87:71:52:22:f4:3b:6d:68:c8: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AD:D3:12:B6:A5:67:65:8B:05:5C:99:3C:5F:6E:33:0C:66:5F:18 X509v3 Authority Key Identifier: keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e8:d5:99:30:0d:af:60:a2:bd:2c:3c:3b:63:18:a0:f8:df: 6d:04:ff:3d:a2:63:fa:88:9c:14:89:e7:e9:5b:2d:ae:f6:29: 4a:57:33:24:ac:87:11:cd:b5:cd:d4:9b:20:7f:72:15:c5:00: 97:e0:38:94:77:c8:26:88:d3:d7:eb:b4:0a:30:8e:fd:05:9d: d6:ca:f3:31:0b:2c:96:31:f7:41:44:eb:21:89:2f:97:57:fd: 84:4c:db:e1:ba:3c:56:3a:af:07:18:d6:ec:a8:7f:f6:3a:e9: 3c:c9:5a:17:89:eb:c6:ed:d8:fa:b9:32:33:80:e1:8a:85:7f: 42:75:45:ba:a3:95:b0:bb:47:47:19:32:27:f9:57:03:34:d2: 62:d7:51:f7:4a:2d:57:c2:e9:36:a4:1d:ab:b4:e4:bc:fa:20: 18:4c:cc:a7:ed:c4:41:f9:6c:07:36:a2:4f:d2:06:3d:24:8d: df:89:dc:51:6a:0f:ea:c3:46:2a:2f:66:76:ee:ae:1e:67:49: 3b:00:9f:bc:40:98:2f:f4:b7:e2:98:31:cf:71:a5:78:32:c2: 06:31:12:b4:61:53:69:19:cf:86:7c:34:31:9a:04:03:57:58: 3b:9c:aa:71:e5:e9:13:e4:51:7b:28:6d:a1:0c:4f:90:11:81: b0:e3:28:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY2NkQxMTAvBgNVBAUTKEFBOUEwRENCNTEzMTM5MkQ3MTk2QTg0NDE4QThBODQ2 NDU1MzFGOTcwHhcNMjUwODIzMDQxNDI2WhcNMjUwODMwMDQxNDI2WjAYMRYwFAYD VQQDEw02OGE5NDAyMi1hYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+x8UN00gjlFGZ3gairkOKyQ0emcqkAIG2D663kzA0RCuR5CtQR+vPbobZLu Rr7pxgR8qfH+R/rRxDBi4+FcBa2mgi0lLEtBLBfbKHdfHrhQeRZ+qxZeh3jLsF/P 65uh7RgcyRhYiA/FtWzWgiKDHLODP7jGB0E4K0Fa4ly/EtaFs8/LW38s/Y4R0c+u CF1cPQXmJTPfCj9hIC7rA0QRL8QECbTjAk0M6U/QDbx6RA/qIsTfsv7oqbKDKUvm uXdbPUqUMlwo6G9L0QjtKrFSEoiy8GR3oLX6mlZDtk5LWs44rsJlseMdngpc1YhO TBCYaAGImsCHcVIi9DttaMi4aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2t0xK2 pWdliwVcmTxfbjMMZl8YMB8GA1UdIwQYMBaAFKqaDctRMTktcZaoRBioqEZFUx+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjY2RC81MTFBODkyRTcx QTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9TMXhscWhFR0tpb1JrVlRI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fwb055MUV4T1MxeGxxaEVHS2lvUmtWVEg1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjY2RC81MTFBODkyRTcxQTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9T MXhscWhFR0tpb1JrVlRINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA76NWZMA2vYKK9LDw7Yxig+N9tBP89omP6iJwUiefpWy2u9ilKVzMk rIcRzbXN1Jsgf3IVxQCX4DiUd8gmiNPX67QKMI79BZ3WyvMxCyyWMfdBROshiS+X V/2ETNvhujxWOq8HGNbsqH/2Ouk8yVoXievG7dj6uTIzgOGKhX9CdUW6o5Wwu0dH GTIn+VcDNNJi11H3Si1Xwuk2pB2rtOS8+iAYTMyn7cRB+WwHNqJP0gY9JI3fidxR ag/qw0YqL2Z27q4eZ0k7AJ+8QJgv9LfimDHPcaV4MsIGMRK0YVNpGc+GfDQxmgQD V1g7nKpx5ekT5FF7KG2hDE+QEYGw4yiC -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:24 2025 by rpki-client