$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: dG9U7QvVqx1qcgwx+ZS5wWIwF9zl6EAD22nzMyHWWpM= Subject key identifier: C9:34:BD:A0:DD:F7:DB:D1:09:6B:47:92:AC:0E:78:B2:BF:3B:45:36 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03E7 Signing time: Sat 23 Aug 2025 00:45:52 +0000 Manifest this update: Sat 23 Aug 2025 00:45:52 +0000 Manifest next update: Sat 30 Aug 2025 00:45:52 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: F8MdBkHInf1Gvft7jeFyozhyMEXN7aYpCjOPYOeet0M=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Aug 23 00:45:52 2025 GMT Not After : Aug 30 00:45:52 2025 GMT Subject: CN=68a90f40-7acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:09:40:8f:26:a6:da:ee:26:c1:80:a3:0e: 35:42:71:41:03:64:f2:19:18:f3:c7:18:26:c0:6d: 2f:b5:11:09:29:c7:b4:fe:8b:1a:b0:d4:be:22:a1: 03:b6:fc:88:63:09:fb:29:11:2d:d3:f4:43:71:16: 69:22:cb:c9:7f:05:b9:f4:0c:f5:7a:79:01:59:b7: 72:be:9e:63:41:68:6f:b5:55:6c:47:44:d0:8a:63: a5:97:1f:10:dc:59:1e:2d:b5:96:1f:f6:56:9d:72: 85:b1:ae:84:bd:1a:ea:a5:49:ac:9c:e9:45:c9:1e: bf:f6:98:35:b0:ce:27:51:1d:06:bc:3b:ce:2f:bb: 8c:8c:a4:ca:47:dc:45:32:61:2f:c6:94:3b:f2:b7: fa:79:ad:57:a7:f5:36:52:3d:df:1b:5a:01:84:24: b3:a3:57:e7:7e:0c:59:40:17:4f:d1:0a:43:0d:c7: 91:04:a4:ba:13:33:55:4c:50:c2:dd:35:92:d7:5d: 9c:d4:9d:83:b9:eb:bc:a7:d3:3e:db:ac:2a:26:a4: 62:b9:3b:7c:bf:82:4f:a3:44:f9:cd:85:f5:fb:29: c8:2d:3d:ea:53:ee:9b:56:ef:27:c3:ec:23:d7:16: 8a:63:b6:cc:4a:88:45:6c:8c:ed:fd:84:5c:a8:24: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:BD:A0:DD:F7:DB:D1:09:6B:47:92:AC:0E:78:B2:BF:3B:45:36 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:eb:83:7d:84:23:dd:e0:d2:57:b3:59:bd:2f:be:d2:f4:9e: b1:6f:7c:e1:4d:89:cc:09:80:bd:f1:98:80:f2:64:b0:51:cb: ec:b8:d1:79:5e:b4:0f:2e:77:93:94:a2:f9:0e:1a:b7:8c:a9: ab:99:a2:4e:c6:fc:c9:f9:55:fe:98:a8:a5:2d:9e:ba:da:78: 76:88:7b:dd:71:af:f1:91:ac:a4:7b:75:82:9f:40:ff:a5:b1: ca:d3:2b:d9:bf:c9:88:2a:e9:6d:f8:51:2f:96:36:22:e4:05: 3d:b4:41:bf:57:ee:ae:a9:97:da:c7:08:b4:9e:7a:9e:34:94: ca:3a:28:a5:f3:0b:14:b8:dc:34:0f:cd:1f:0c:9f:bb:02:9b: 6b:57:dd:d2:3e:0f:6c:dd:03:28:d7:14:9e:68:7d:00:84:4e: 49:ec:5d:26:7e:a1:3e:0e:c4:48:ba:10:fd:02:ba:e4:ca:4f: 94:19:17:ae:97:e4:68:54:37:89:59:e2:77:f1:d8:09:f8:66: 3b:58:ac:f2:b4:41:5a:29:63:48:93:a6:03:c0:37:98:79:0c: 19:b9:36:0d:2f:c4:c4:dd:36:34:e5:00:9f:30:01:f7:b8:a2: 4c:78:46:99:37:f8:6e:60:ce:11:92:ca:c4:38:57:40:7d:65: 66:63:4d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwODIzMDA0NTUyWhcNMjUwODMwMDA0NTUyWjAYMRYwFAYD VQQDEw02OGE5MGY0MC03YWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GgJQI8mptruJsGAow41QnFBA2TyGRjzxxgmwG0vtREJKce0/osasNS+IqED tvyIYwn7KREt0/RDcRZpIsvJfwW59Az1enkBWbdyvp5jQWhvtVVsR0TQimOllx8Q 3FkeLbWWH/ZWnXKFsa6EvRrqpUmsnOlFyR6/9pg1sM4nUR0GvDvOL7uMjKTKR9xF MmEvxpQ78rf6ea1Xp/U2Uj3fG1oBhCSzo1fnfgxZQBdP0QpDDceRBKS6EzNVTFDC 3TWS112c1J2Dueu8p9M+26wqJqRiuTt8v4JPo0T5zYX1+ynILT3qU+6bVu8nw+wj 1xaKY7bMSohFbIzt/YRcqCSRAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk0vaDd 99vRCWtHkqwOeLK/O0U2MB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+64N9hCPd4NJXs1m9L77S9J6xb3zhTYnMCYC98ZiA8mSwUcvsuNF5 XrQPLneTlKL5Dhq3jKmrmaJOxvzJ+VX+mKilLZ662nh2iHvdca/xkayke3WCn0D/ pbHK0yvZv8mIKult+FEvljYi5AU9tEG/V+6uqZfaxwi0nnqeNJTKOiil8wsUuNw0 D80fDJ+7AptrV93SPg9s3QMo1xSeaH0AhE5J7F0mfqE+DsRIuhD9Arrkyk+UGReu l+RoVDeJWeJ38dgJ+GY7WKzytEFaKWNIk6YDwDeYeQwZuTYNL8TE3TY05QCfMAH3 uKJMeEaZN/huYM4RksrEOFdAfWVmY03U -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:57 2025 by rpki-client