$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: seWUAV5r4jJ2Gfc2UJ6gl7uQ9UaKE/3gmkCvQl/gzu4= Subject key identifier: 96:79:2C:BF:2A:43:C9:F1:76:A9:27:BF:6A:A5:BB:1E:10:ED:B6:FC Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E10 Signing time: Sun 20 Jul 2025 15:30:36 +0000 Manifest this update: Sun 20 Jul 2025 15:30:35 +0000 Manifest next update: Sun 27 Jul 2025 15:30:35 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: VoHu/f9bjglGI7r2J1PLP1qiGsFYAhjh4GGXwK4tcuc=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11805 (0x2e1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Jul 20 15:30:35 2025 GMT Not After : Jul 27 15:30:35 2025 GMT Subject: CN=687d0b9c-21a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:bc:a2:c8:6d:ac:b9:2f:e1:fa:a3:e1:21: b4:3d:3e:67:cd:48:1d:6e:4b:a4:df:f1:99:5c:19: 19:ed:ac:a0:49:a9:e4:ce:11:68:7b:81:49:a3:a4: ce:62:ff:42:c8:4d:82:5c:be:77:e2:20:1c:8e:df: 0b:a0:e5:77:ff:eb:74:cb:a2:da:6c:82:f1:8d:56: 4d:fa:92:f0:f3:40:30:f5:d5:4f:25:86:85:fa:8b: 99:f6:7a:d1:ad:e5:30:05:95:75:25:1c:9b:62:31: db:26:64:a4:79:23:0d:9d:7c:09:5d:95:57:31:8e: a2:c8:43:cb:73:15:dd:bf:8a:bd:ba:ca:ea:9e:77: 7d:f6:61:c0:cf:3f:dc:d3:e0:5c:9d:28:67:5c:cf: 20:53:66:46:03:f7:0b:a7:49:7c:d5:00:68:65:28: 2a:ce:33:0c:e9:b5:e2:0a:8c:bd:57:87:c9:e1:c0: 16:2a:09:da:20:31:3a:52:57:62:c5:48:ad:cc:96: 36:5d:46:0d:f0:96:e8:57:7a:15:95:e4:b0:82:40: aa:91:80:75:d6:03:0e:d2:32:6f:d3:82:6f:28:6c: b0:38:12:39:fd:66:52:29:dc:da:77:75:f2:d2:15: c4:f6:2b:b0:95:ec:61:15:75:1f:69:a1:7a:8e:78: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:79:2C:BF:2A:43:C9:F1:76:A9:27:BF:6A:A5:BB:1E:10:ED:B6:FC X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b9:dd:e5:ac:22:82:ae:d7:fe:84:43:a0:25:ea:3a:9e:aa: 8b:75:e6:62:53:38:06:57:f7:73:fe:b8:95:99:71:f7:85:43: d4:80:02:91:ef:8a:83:92:7f:5e:ec:1a:6d:d2:eb:51:3f:8c: b4:74:c7:af:e0:64:b7:00:c0:09:b3:2d:89:c7:b6:2f:ab:3c: ff:28:d3:f8:a7:24:48:fe:57:c3:21:4f:1f:26:e6:25:0d:47: 3f:8a:6b:10:32:1c:00:df:e8:be:e3:f9:f6:a7:d1:d9:40:2d: b1:9b:80:af:99:72:b6:a1:9f:33:b0:3f:6c:87:ad:32:93:40: df:50:4e:1b:4f:5e:50:96:e5:93:76:29:f4:21:a0:6c:63:2e: 16:91:41:c1:20:fe:b1:1f:ac:7f:02:98:d2:15:51:b7:73:13: ab:52:59:54:cb:c3:08:5a:c7:b1:cf:c0:b2:69:f2:21:5c:02: 77:58:8e:a2:ee:df:90:fa:7f:0b:09:3a:75:ee:b6:d9:7f:75: 32:0d:fd:33:3d:49:e6:07:18:f2:24:a9:f3:3f:34:be:30:0c: c5:c6:ce:90:72:a8:48:77:4f:ec:9a:b2:03:be:98:12:72:64: 74:78:9e:2a:c7:63:d2:6b:b8:80:fc:45:4a:ce:a9:c7:36:7c: 62:10:f5:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwNzIwMTUzMDM1WhcNMjUwNzI3MTUzMDM1WjAYMRYwFAYD VQQDEw02ODdkMGI5Yy0yMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxq8oshtrLkv4fqj4SG0PT5nzUgdbkuk3/GZXBkZ7aygSankzhFoe4FJo6TO Yv9CyE2CXL534iAcjt8LoOV3/+t0y6LabILxjVZN+pLw80Aw9dVPJYaF+ouZ9nrR reUwBZV1JRybYjHbJmSkeSMNnXwJXZVXMY6iyEPLcxXdv4q9usrqnnd99mHAzz/c 0+BcnShnXM8gU2ZGA/cLp0l81QBoZSgqzjMM6bXiCoy9V4fJ4cAWKgnaIDE6Uldi xUitzJY2XUYN8JboV3oVleSwgkCqkYB11gMO0jJv04JvKGywOBI5/WZSKdzad3Xy 0hXE9iuwlexhFXUfaaF6jnjo5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ5LL8q Q8nxdqknv2qlux4Q7bb8MB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ud3lrCKCrtf+hEOgJeo6nqqLdeZiUzgGV/dz/riVmXH3hUPUgAKR 74qDkn9e7Bpt0utRP4y0dMev4GS3AMAJsy2Jx7Yvqzz/KNP4pyRI/lfDIU8fJuYl DUc/imsQMhwA3+i+4/n2p9HZQC2xm4CvmXK2oZ8zsD9sh60yk0DfUE4bT15QluWT din0IaBsYy4WkUHBIP6xH6x/ApjSFVG3cxOrUllUy8MIWsexz8CyafIhXAJ3WI6i 7t+Q+n8LCTp17rbZf3UyDf0zPUnmBxjyJKnzPzS+MAzFxs6QcqhId0/smrIDvpgS cmR0eJ4qx2PSa7iA/EVKzqnHNnxiEPVp -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:09 2025 by rpki-client