$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: GqjqWwzhSC6lwgT3UNvDVqdAuQkn+vFxFOTEfY3CqzM= Subject key identifier: 77:28:A9:75:16:5C:2F:B6:58:E1:42:F4:0C:D8:77:B5:71:72:3A:31 Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 34AE Signing time: Wed 20 Aug 2025 14:49:19 +0000 Manifest this update: Wed 20 Aug 2025 14:49:19 +0000 Manifest next update: Wed 27 Aug 2025 14:49:19 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: MCQ+rQJEVO5DnatIJpqLTrdU02b/HuRNSAdT4QunUdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 14:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Aug 20 14:49:19 2025 GMT Not After : Aug 27 14:49:19 2025 GMT Subject: CN=68a5e06f-c810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:85:c8:9c:22:0b:3f:f5:32:74:9b:57:20: 99:34:91:c4:c1:c5:7b:65:2f:ee:a4:06:65:73:b0: ac:bc:d6:10:2e:03:c8:ed:aa:56:49:ce:70:53:58: 54:e7:e9:75:43:85:c9:cd:6f:33:4b:a0:84:50:ec: eb:df:ef:c7:34:f6:f6:21:3f:bb:3a:d1:dc:63:2f: f4:56:4a:43:3a:fa:16:af:e6:57:2d:31:dc:e2:76: e4:b9:b8:9a:b7:bb:8d:4d:88:ff:ad:c0:77:8d:42: e6:f8:a8:ac:2d:b3:44:4c:71:4c:b2:e1:f1:0e:2d: b8:9f:b1:ff:cb:8a:c1:f1:78:1c:6f:90:4f:63:ea: 82:dc:2b:78:52:0c:03:94:ad:7f:7a:9a:14:df:a5: 48:bf:fb:c9:d7:ad:4f:14:9b:8f:90:de:b9:99:08: e7:e5:a6:a7:37:f6:e3:98:79:1b:2e:da:e9:c0:16: 4f:c3:ab:f6:8c:26:67:30:bf:75:15:8e:41:80:d7: 64:32:ec:56:e8:e9:1f:67:75:d5:a1:bc:b0:4d:a5: 8b:af:48:03:76:6b:98:80:98:48:12:73:43:f5:1c: 8f:af:22:e8:76:f6:05:52:7c:14:14:5d:d1:d2:8d: 3c:3d:92:43:76:a1:16:b4:bd:cb:d3:e2:8c:96:60: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:28:A9:75:16:5C:2F:B6:58:E1:42:F4:0C:D8:77:B5:71:72:3A:31 X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:10:54:40:ad:17:50:a5:b6:a7:d6:d0:80:1a:7c:df:89:e2: 3a:4c:09:18:9c:cc:61:cb:90:99:1a:2b:02:38:cc:a0:e5:50: 92:22:03:2c:62:0f:1a:15:50:be:37:52:2e:09:ce:61:43:fd: 9e:8b:61:1c:5a:8b:8b:53:0b:5a:36:df:88:da:a0:37:10:98: 7c:a2:1e:4d:ba:32:1f:31:21:90:da:43:23:5c:38:c0:5c:b8: 13:7f:c5:61:f6:31:c3:6a:9d:97:24:ef:53:e1:b9:0f:3f:dc: 84:25:52:b5:b5:2e:02:5f:33:1e:12:a0:4e:2c:12:dc:3b:c5: 55:fc:5b:1e:aa:ae:58:b1:e1:ba:77:d5:ce:e9:58:67:39:52: 34:8e:9d:70:26:3b:ab:66:d1:69:b9:9b:c0:12:39:6e:93:08: 32:44:11:ee:3e:01:be:1d:0f:45:38:aa:59:e9:0c:a5:df:3b: be:b3:6d:88:fb:f9:b7:ee:cd:a1:49:d6:58:96:75:1d:bd:a3: ef:e5:f7:1a:1d:c6:f1:e9:47:82:9a:d2:1b:77:57:fc:25:ce: b1:31:62:e9:eb:7e:71:b4:60:8a:1d:d1:13:54:f5:f3:9f:00: e5:70:ac:1a:79:49:6c:17:06:7b:1d:a6:74:2b:2c:72:c3:7a: 45:47:4b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUwODIwMTQ0OTE5WhcNMjUwODI3MTQ0OTE5WjAYMRYwFAYD VQQDEw02OGE1ZTA2Zi1jODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHqFyJwiCz/1MnSbVyCZNJHEwcV7ZS/upAZlc7CsvNYQLgPI7apWSc5wU1hU 5+l1Q4XJzW8zS6CEUOzr3+/HNPb2IT+7OtHcYy/0VkpDOvoWr+ZXLTHc4nbkubia t7uNTYj/rcB3jULm+KisLbNETHFMsuHxDi24n7H/y4rB8Xgcb5BPY+qC3Ct4UgwD lK1/epoU36VIv/vJ161PFJuPkN65mQjn5aanN/bjmHkbLtrpwBZPw6v2jCZnML91 FY5BgNdkMuxW6OkfZ3XVobywTaWLr0gDdmuYgJhIEnND9RyPryLodvYFUnwUFF3R 0o08PZJDdqEWtL3L0+KMlmC37wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcoqXUW XC+2WOFC9AzYd7VxcjoxMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9EFRArRdQpban1tCAGnzfieI6TAkYnMxhy5CZGisCOMyg5VCSIgMs Yg8aFVC+N1IuCc5hQ/2ei2EcWouLUwtaNt+I2qA3EJh8oh5NujIfMSGQ2kMjXDjA XLgTf8Vh9jHDap2XJO9T4bkPP9yEJVK1tS4CXzMeEqBOLBLcO8VV/Fseqq5YseG6 d9XO6VhnOVI0jp1wJjurZtFpuZvAEjlukwgyRBHuPgG+HQ9FOKpZ6Qyl3zu+s22I +/m37s2hSdZYlnUdvaPv5fcaHcbx6UeCmtIbd1f8Jc6xMWLp635xtGCKHdETVPXz nwDlcKwaeUlsFwZ7HaZ0Kyxyw3pFR0ur -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:38 2025 by rpki-client