$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: GIwpkaSS50ZekyKpzVRrwClicLWCV1rO1mEGa7Uro2E= Subject key identifier: 1D:84:37:27:3B:D1:C5:4B:A1:F2:1E:AE:B1:5B:38:B0:50:58:B3:1E Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03D5 Signing time: Sat 19 Jul 2025 00:59:38 +0000 Manifest this update: Sat 19 Jul 2025 00:59:38 +0000 Manifest next update: Sat 26 Jul 2025 00:59:38 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: 4dr5ogXidNOd+6jo/NSE8Ju2MFttVftWoCFR2RsJLvM=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Jul 19 00:59:38 2025 GMT Not After : Jul 26 00:59:38 2025 GMT Subject: CN=687aedfa-3595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f1:28:dc:c4:50:80:c6:28:d2:55:b9:a9:2d: 52:89:90:f5:ee:95:c8:ef:b5:06:b9:04:06:48:6e: 33:f5:fa:b6:45:25:52:e8:c2:86:2d:93:05:1b:49: 16:94:d8:04:2d:f6:9d:d8:db:8b:8f:f1:f0:ba:a9: 42:d7:a7:14:42:ed:9a:43:8f:19:07:8e:61:69:c3: dc:c9:32:f5:ac:aa:be:1e:5a:83:d9:f3:15:25:db: 69:45:47:cd:e9:27:ff:a1:78:34:bb:fc:5e:50:c1: 88:f2:20:90:92:76:5a:7b:0a:8f:34:2e:ad:50:e4: e9:3a:65:6c:09:47:11:a2:fc:35:49:b3:cc:59:f1: 5f:fb:ab:81:9f:27:94:56:bd:3d:da:72:50:64:75: 80:82:8c:ba:b7:64:f2:13:81:f9:11:cf:63:00:fd: 5b:ef:c3:ec:ce:aa:1b:ba:11:b5:87:30:50:ae:2f: 59:e5:71:54:fd:55:b0:ff:b3:04:26:37:10:7a:4a: 02:6f:5f:7c:d6:dc:80:b6:a7:00:c9:c7:50:4d:ca: e3:20:f0:71:e6:d1:72:a3:c4:c8:a0:e5:6d:38:b4: 7a:1d:fd:6f:9f:d9:b8:8a:73:84:db:40:18:1b:9e: 1b:af:72:d4:fc:dc:22:3a:0d:97:12:f4:f6:29:8d: 19:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:37:27:3B:D1:C5:4B:A1:F2:1E:AE:B1:5B:38:B0:50:58:B3:1E X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:45:cf:7a:d7:e7:78:40:3c:fe:e2:0c:6e:1e:83:2b:f3:c0: f9:4a:51:13:e3:83:5f:8f:6a:68:9d:a2:ee:b4:4b:58:6c:06: 0e:2f:b3:17:66:8b:19:8d:1c:0e:5d:52:e2:b5:89:fa:b1:7d: e5:c6:74:db:dd:b5:32:16:df:07:ea:f8:f7:a7:87:8e:af:a6: f4:24:fd:27:b0:02:b2:27:73:9f:55:67:23:81:38:30:f8:9d: 99:2e:a0:a1:97:14:22:cd:df:38:0e:af:38:03:ae:71:6f:e5: db:b1:13:a0:f2:ea:34:f2:9b:09:a0:32:cb:4d:2c:eb:fd:3b: 49:14:bc:77:14:a6:42:e7:8a:63:9a:52:cc:fc:3b:21:cc:50: c9:ba:bd:05:e0:b5:f8:06:4e:18:c7:68:79:5e:84:5a:81:96: 03:28:45:f4:5b:a5:18:17:92:5e:e3:a2:b9:95:8a:61:2b:25: 8c:45:f7:61:49:a0:9e:8e:3e:eb:1f:b4:27:1f:67:ca:7c:a1: e8:37:22:ef:54:52:36:5d:eb:cd:ef:7d:f0:15:85:16:0e:5a: ec:43:44:da:85:5d:e4:a6:4f:23:36:2e:09:8e:3f:f9:c0:26: a5:ff:e2:1c:3b:69:bf:26:11:92:9b:bc:af:35:61:fd:bf:e4: 5d:7d:10:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwNzE5MDA1OTM4WhcNMjUwNzI2MDA1OTM4WjAYMRYwFAYD VQQDEw02ODdhZWRmYS0zNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vEo3MRQgMYo0lW5qS1SiZD17pXI77UGuQQGSG4z9fq2RSVS6MKGLZMFG0kW lNgELfad2NuLj/HwuqlC16cUQu2aQ48ZB45hacPcyTL1rKq+HlqD2fMVJdtpRUfN 6Sf/oXg0u/xeUMGI8iCQknZaewqPNC6tUOTpOmVsCUcRovw1SbPMWfFf+6uBnyeU Vr092nJQZHWAgoy6t2TyE4H5Ec9jAP1b78PszqobuhG1hzBQri9Z5XFU/VWw/7ME JjcQekoCb1981tyAtqcAycdQTcrjIPBx5tFyo8TIoOVtOLR6Hf1vn9m4inOE20AY G54br3LU/NwiOg2XEvT2KY0ZBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2ENyc7 0cVLofIerrFbOLBQWLMeMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiRc961+d4QDz+4gxuHoMr88D5SlET44Nfj2ponaLutEtYbAYOL7MX ZosZjRwOXVLitYn6sX3lxnTb3bUyFt8H6vj3p4eOr6b0JP0nsAKyJ3OfVWcjgTgw +J2ZLqChlxQizd84Dq84A65xb+XbsROg8uo08psJoDLLTSzr/TtJFLx3FKZC54pj mlLM/DshzFDJur0F4LX4Bk4Yx2h5XoRagZYDKEX0W6UYF5Je46K5lYphKyWMRfdh SaCejj7rH7QnH2fKfKHoNyLvVFI2XevN733wFYUWDlrsQ0TahV3kpk8jNi4Jjj/5 wCal/+IcO2m/JhGSm7yvNWH9v+RdfRDj -----END CERTIFICATE-----Generated at Sun Jul 20 16:26:02 2025 by rpki-client