$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: SD57gT7Keas38YnY24jayafQymD5fsdj79p+zbrr8Ug= Subject key identifier: A7:BF:96:24:E2:CA:FA:B9:2B:0C:5B:38:DF:25:B9:E7:1D:A3:8E:63 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E29 Signing time: Sat 06 Sep 2025 15:31:05 +0000 Manifest this update: Sat 06 Sep 2025 15:31:05 +0000 Manifest next update: Sat 13 Sep 2025 15:31:05 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: +bGnfeKPerWFIzIE8NnLE7Qh18Be+6ZdvPZV6b7hs9Q=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11830 (0x2e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Sep 6 15:31:05 2025 GMT Not After : Sep 13 15:31:05 2025 GMT Subject: CN=68bc53b9-07aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:3f:c4:99:65:c6:48:f0:0c:cf:60:6a:7b: 7a:ae:28:a3:49:09:76:dd:a0:0a:0c:c5:4b:a7:e1: 03:7f:9f:2c:83:d1:0d:06:6f:03:d8:29:39:ad:5b: 38:c2:f5:b9:3c:e8:5d:e3:ba:8a:8e:c8:1d:37:32: cf:18:fd:52:29:bc:1b:a2:6a:73:5a:ee:31:c2:11: db:6a:e1:2f:d7:34:fc:5a:46:48:b7:7b:54:d6:3b: b4:6b:83:0d:0c:f1:9b:55:1e:6c:10:62:b3:f9:fc: 8c:fc:7f:0d:be:31:96:69:5f:92:37:52:47:ec:d1: c2:cc:b2:fc:1b:03:e8:52:70:a5:f9:e4:18:b2:b0: e9:96:e0:f7:f0:4c:75:b6:e4:d4:a7:b2:95:0b:d4: f6:66:d3:22:f1:24:31:dd:57:4b:07:f8:14:3d:21: eb:a1:88:ca:f0:2f:ea:bb:7c:07:c8:a8:e7:b3:9e: 85:ed:54:f2:11:16:b7:a7:84:84:b1:81:5a:d1:ae: 83:d2:95:37:31:de:83:1f:6d:df:07:aa:25:a1:76: f0:b3:57:23:86:51:ad:0e:69:60:83:4d:94:d1:61: a7:97:45:2f:d0:85:06:26:0a:55:3c:a2:1f:e5:7b: 74:b8:be:28:cd:0a:29:57:5e:80:ba:b8:59:16:f7: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BF:96:24:E2:CA:FA:B9:2B:0C:5B:38:DF:25:B9:E7:1D:A3:8E:63 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7e:96:66:00:80:11:74:df:df:2c:c9:b5:22:a7:a3:f0:67: 4d:aa:b5:4a:14:77:c7:da:11:6a:55:85:04:f3:39:e1:af:ef: 56:c9:78:20:cb:13:7c:17:b6:61:86:ea:ba:81:82:bd:31:7f: 9b:48:66:9d:99:f9:32:be:41:d1:5c:04:dc:39:b2:f6:1c:4b: 3b:ae:28:53:43:5e:c9:ab:52:49:d2:2d:62:4b:8a:ef:07:07: c6:1d:fe:59:4a:19:6c:1e:69:92:a4:03:48:8f:bf:f2:f0:c8: e5:3b:54:09:3a:b1:d7:08:77:6d:0c:19:91:e2:f7:58:20:96: fd:c7:38:5b:0e:73:c1:a7:4d:59:13:5c:5b:5a:0a:e3:96:52: 19:0b:f7:c3:21:7c:f5:ae:98:80:34:38:e3:65:7a:99:c3:fe: 39:66:f9:17:51:57:7f:29:1b:2a:d8:97:26:16:eb:10:0b:92: 2e:75:d8:a9:8f:24:1b:c9:d3:91:15:ad:74:12:ef:39:6b:19: c0:3e:cc:0d:0b:04:31:b8:80:b4:09:7b:e5:45:16:28:81:c7: 82:e8:cf:b9:c5:2d:90:90:6d:54:e2:ce:09:41:3a:9f:3b:f7: 89:6d:6e:38:38:a8:80:a7:3c:94:c4:39:e6:b6:2d:60:14:16: b8:b2:90:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUwOTA2MTUzMTA1WhcNMjUwOTEzMTUzMTA1WjAYMRYwFAYD VQQDEw02OGJjNTNiOS0wN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYc/xJllxkjwDM9gant6riijSQl23aAKDMVLp+EDf58sg9ENBm8D2Ck5rVs4 wvW5POhd47qKjsgdNzLPGP1SKbwbompzWu4xwhHbauEv1zT8WkZIt3tU1ju0a4MN DPGbVR5sEGKz+fyM/H8NvjGWaV+SN1JH7NHCzLL8GwPoUnCl+eQYsrDpluD38Ex1 tuTUp7KVC9T2ZtMi8SQx3VdLB/gUPSHroYjK8C/qu3wHyKjns56F7VTyERa3p4SE sYFa0a6D0pU3Md6DH23fB6oloXbws1cjhlGtDmlgg02U0WGnl0Uv0IUGJgpVPKIf 5Xt0uL4ozQopV16AurhZFvfa6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe/liTi yvq5KwxbON8luecdo45jMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAofpZmAIARdN/fLMm1Iqej8GdNqrVKFHfH2hFqVYUE8znhr+9WyXgg yxN8F7Zhhuq6gYK9MX+bSGadmfkyvkHRXATcObL2HEs7rihTQ17Jq1JJ0i1iS4rv BwfGHf5ZShlsHmmSpANIj7/y8MjlO1QJOrHXCHdtDBmR4vdYIJb9xzhbDnPBp01Z E1xbWgrjllIZC/fDIXz1rpiANDjjZXqZw/45ZvkXUVd/KRsq2JcmFusQC5Iuddip jyQbydORFa10Eu85axnAPswNCwQxuIC0CXvlRRYogceC6M+5xS2QkG1U4s4JQTqf O/eJbW44OKiApzyUxDnmti1gFBa4spBK -----END CERTIFICATE-----Generated at Sun Sep 7 15:23:01 2025 by rpki-client