$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: 3whKeTMs3BGXwctpVcx6fMljV7wpeifGs4JWU52XUqE= Subject key identifier: A2:1F:BE:5F:2C:45:E0:46:56:0E:D2:11:92:81:63:37:45:B5:A0:E1 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: A3 Signing time: Sat 19 Jul 2025 06:27:42 +0000 Manifest this update: Sat 19 Jul 2025 06:27:41 +0000 Manifest next update: Sat 26 Jul 2025 06:27:41 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: Teqh8qwTw8MBjDtE4fID25Fx3F5oi57ZtZ3Gmp2FQ2M=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Jul 19 06:27:41 2025 GMT Not After : Jul 26 06:27:41 2025 GMT Subject: CN=687b3add-6bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:b8:68:37:73:bc:ec:20:b2:22:30:45:32: b1:cf:66:3e:cc:c2:4d:c7:df:5e:05:f9:ce:ce:a9: 59:a9:01:2f:df:c7:bd:a8:bf:8a:ca:96:01:fc:dc: 2d:80:3e:89:8f:35:0a:8a:98:fa:98:c7:0c:60:c0: a7:f1:e2:25:66:f4:be:99:c6:2d:b8:51:b0:80:17: b0:f6:a8:e1:47:a3:60:e0:82:95:f2:8f:1a:36:d3: fa:25:af:02:0b:99:2f:4e:06:54:d3:59:4d:21:51: 62:10:f5:bc:02:a4:69:61:7c:e2:29:be:f8:bd:72: 63:85:19:42:86:14:36:1f:99:84:cb:b8:2e:33:a2: 3b:e6:02:a8:1a:8e:d7:49:de:25:56:54:33:b4:3f: 9b:73:ec:a7:d1:26:e9:8c:45:00:0a:f9:f7:74:9f: 88:c4:af:37:de:81:ae:ab:f0:fb:9a:5b:18:05:1d: c6:1f:8b:c6:f3:a1:ad:80:b8:79:4d:d0:84:0d:1a: b5:d8:99:c4:8a:f1:80:ba:4c:10:da:25:85:34:1b: e7:cf:d3:6a:5c:37:8c:00:f8:71:bb:da:2a:4b:89: 21:96:0d:a7:27:b6:bb:70:4a:9d:4a:c0:1a:e9:e8: c0:86:70:43:f3:50:df:ba:8b:5e:07:9d:da:2f:bb: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:BE:5F:2C:45:E0:46:56:0E:D2:11:92:81:63:37:45:B5:A0:E1 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:82:5a:b3:6b:20:c3:2e:e1:b9:e4:b1:20:34:f4:93:40:cf: 17:c4:02:74:4e:17:a2:26:89:e5:47:53:70:4c:41:79:ae:1c: e6:29:6d:48:6f:94:21:08:02:b2:0f:b4:f4:ba:a0:04:a2:7f: 8f:f1:87:6c:54:72:b1:38:b4:86:ca:99:0e:d8:88:6e:a0:33: 14:74:5e:10:c2:f4:17:bb:3d:d5:a7:cc:e7:c5:ea:f1:11:59: 69:a6:a9:68:dd:17:a8:8a:89:e9:05:40:6f:a3:25:35:ed:a8: 3e:9e:5f:6f:87:92:b4:17:1a:b0:df:0f:c3:ec:d1:e1:4b:da: 2b:68:de:22:8a:3b:d3:75:95:73:30:0a:fb:45:77:41:8a:69: 63:b5:7b:4e:69:de:27:dc:73:55:8c:50:49:50:35:5c:e6:50: 45:af:52:4f:d9:ee:fc:ec:74:b1:5d:45:f7:37:48:4e:4a:1c: c4:ef:92:d4:d5:f0:23:62:80:75:08:e2:ab:1d:50:70:50:bb: f7:fa:07:32:a7:b1:2e:dc:a2:56:f2:63:b0:2c:ee:b5:e3:a4: 81:35:35:3e:0a:6e:3a:00:3e:73:43:6d:f4:8e:0f:e2:97:a4: f1:76:d8:8f:a5:e5:db:31:a7:db:42:d3:5f:75:e4:8a:90:4f: ff:2f:e1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUwNzE5MDYyNzQxWhcNMjUwNzI2MDYyNzQxWjAYMRYwFAYD VQQDEw02ODdiM2FkZC02YmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK64aDdzvOwgsiIwRTKxz2Y+zMJNx99eBfnOzqlZqQEv38e9qL+KypYB/Nwt gD6JjzUKipj6mMcMYMCn8eIlZvS+mcYtuFGwgBew9qjhR6Ng4IKV8o8aNtP6Ja8C C5kvTgZU01lNIVFiEPW8AqRpYXziKb74vXJjhRlChhQ2H5mEy7guM6I75gKoGo7X Sd4lVlQztD+bc+yn0SbpjEUACvn3dJ+IxK833oGuq/D7mlsYBR3GH4vG86GtgLh5 TdCEDRq12JnEivGAukwQ2iWFNBvnz9NqXDeMAPhxu9oqS4khlg2nJ7a7cEqdSsAa 6ejAhnBD81DfuoteB53aL7v9YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIfvl8s ReBGVg7SEZKBYzdFtaDhMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCglqzayDDLuG55LEgNPSTQM8XxAJ0TheiJonlR1NwTEF5rhzmKW1I b5QhCAKyD7T0uqAEon+P8YdsVHKxOLSGypkO2IhuoDMUdF4QwvQXuz3Vp8znxerx EVlppqlo3ReoionpBUBvoyU17ag+nl9vh5K0Fxqw3w/D7NHhS9oraN4iijvTdZVz MAr7RXdBimljtXtOad4n3HNVjFBJUDVc5lBFr1JP2e787HSxXUX3N0hOShzE75LU 1fAjYoB1COKrHVBwULv3+gcyp7Eu3KJW8mOwLO6146SBNTU+Cm46AD5zQ230jg/i l6TxdtiPpeXbMafbQtNfdeSKkE//L+E4 -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:16 2025 by rpki-client