$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json) Hash identifier: 8dM2LtSVuQvSXoWTOq+vcAtR5VywtXxfxvnqE+I7gJ4= Subject key identifier: 4A:13:C6:55:49:0A:BA:CF:93:53:16:B0:FF:DD:5C:B6:40:C3:47:7C Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft Manifest number: E8 Signing time: Sat 19 Jul 2025 05:43:36 +0000 Manifest this update: Sat 19 Jul 2025 05:43:35 +0000 Manifest next update: Sat 26 Jul 2025 05:43:35 +0000 Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: 86l9hXKqT5cVMnQ0DpPTg+mhXQ3KH3VAjau7KWzVFRo=) 2: 4FEDDA6831C511F0996C265EC4F9AE02.roa (hash: G8CAzDlv561lCTXBbNuUwLBStLkoC94IOzFjIj5uYjk=) 3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 32ChZuN5aLmUO2MNOxKOn9C6wDIBYJGI4WGeVTj7tjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Jul 19 05:43:35 2025 GMT Not After : Jul 26 05:43:35 2025 GMT Subject: CN=687b3088-409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:62:6c:59:da:5b:d3:bc:0e:d3:26:5d:56: 7b:55:ce:a4:b7:7b:51:60:39:fe:f4:f6:06:b6:50: f7:dd:68:32:0a:53:2c:aa:16:cd:34:43:9f:71:34: 8d:5b:b0:28:29:2c:69:9c:ca:94:8c:5f:ac:17:cc: 30:52:5f:c7:f6:7e:15:fa:24:a3:4b:29:b2:c1:6e: 3d:a5:a6:36:6b:37:d9:bb:a9:92:54:cd:fa:93:62: e4:ba:dc:c7:71:59:4d:5e:4c:67:b7:e5:1e:27:e4: 6e:97:0f:d5:cf:db:24:e0:bb:a4:b0:9b:fc:d4:7d: 1a:bc:f1:1e:ff:32:2d:ba:35:96:ca:4b:80:34:db: 08:2c:c0:c7:cd:07:50:22:04:24:de:f4:ab:ea:99: 65:65:b7:05:e5:1a:26:da:4a:65:83:49:9f:9a:c4: 53:80:d3:44:55:68:52:03:90:2f:d9:41:f3:d6:61: 85:12:83:7d:a5:7f:ce:f1:d1:57:20:fa:31:09:2f: 3d:1c:f4:19:ee:94:ae:c9:60:dc:30:91:dd:47:43: 82:60:9c:86:03:92:b8:37:5b:e8:76:af:54:d2:fa: 3f:2f:d9:ce:8b:78:24:91:e1:23:b4:3d:0b:89:86: bf:aa:ea:b8:c3:0e:94:54:bb:a7:13:a5:4e:c5:ad: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:13:C6:55:49:0A:BA:CF:93:53:16:B0:FF:DD:5C:B6:40:C3:47:7C X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:06:5e:ba:73:d6:e4:b2:58:12:b4:5e:ff:9b:78:5a:fd:b8: 43:9a:1d:d4:a8:d9:77:19:d1:50:19:e3:03:c1:56:da:c6:ba: 88:c5:97:f3:4f:b6:82:8c:19:2f:e3:77:2c:d1:ac:b3:90:b3: fa:a3:9c:c5:4e:10:bd:f4:f2:19:0f:86:e3:3e:71:0b:0c:52: 16:ff:b4:1a:8e:37:64:53:e5:05:48:64:50:8d:2b:0c:a2:5b: 6d:39:53:ee:64:81:3f:82:99:e8:e8:c1:7a:06:cd:bb:dd:3b: 5d:4e:e7:19:78:e2:d2:ae:5b:e8:d8:24:0e:dd:d6:2d:64:32: 4f:6e:dd:9b:b0:45:64:4e:39:2c:c3:e2:d5:69:1c:e2:8e:1a: bc:46:01:68:54:8b:c5:f8:4a:ba:d9:b9:67:57:a2:71:fc:23: 01:8c:b8:cd:75:73:22:5b:b5:53:af:da:12:73:8d:a3:b4:d9: ca:7f:7a:f5:c4:2f:43:be:7b:1f:82:a5:55:0a:55:82:ac:6c: 82:57:6c:c9:b5:68:f3:8f:54:7c:d5:6c:a4:b3:d6:f7:1a:95: 60:07:d7:d3:41:1b:0e:95:8f:74:a1:9c:b9:ac:1e:c9:6c:f5: 1e:95:9e:82:08:e9:e3:60:e2:1e:63:27:f5:a0:c4:c7:9b:b6: b6:9e:09:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4 RjU4QTc3RTUwHhcNMjUwNzE5MDU0MzM1WhcNMjUwNzI2MDU0MzM1WjAYMRYwFAYD VQQDEw02ODdiMzA4OC00MDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sdibFnaW9O8DtMmXVZ7Vc6kt3tRYDn+9PYGtlD33WgyClMsqhbNNEOfcTSN W7AoKSxpnMqUjF+sF8wwUl/H9n4V+iSjSymywW49paY2azfZu6mSVM36k2LkutzH cVlNXkxnt+UeJ+Rulw/Vz9sk4LuksJv81H0avPEe/zItujWWykuANNsILMDHzQdQ IgQk3vSr6pllZbcF5Rom2kplg0mfmsRTgNNEVWhSA5Av2UHz1mGFEoN9pX/O8dFX IPoxCS89HPQZ7pSuyWDcMJHdR0OCYJyGA5K4N1vodq9U0vo/L9nOi3gkkeEjtD0L iYa/quq4ww6UVLunE6VOxa0SCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoTxlVJ CrrPk1MWsP/dXLZAw0d8MB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEBl66c9bkslgStF7/m3ha/bhDmh3UqNl3GdFQGeMDwVbaxrqIxZfz T7aCjBkv43cs0ayzkLP6o5zFThC99PIZD4bjPnELDFIW/7QajjdkU+UFSGRQjSsM olttOVPuZIE/gpno6MF6Bs273TtdTucZeOLSrlvo2CQO3dYtZDJPbt2bsEVkTjks w+LVaRzijhq8RgFoVIvF+Eq62blnV6Jx/CMBjLjNdXMiW7VTr9oSc42jtNnKf3r1 xC9DvnsfgqVVClWCrGyCV2zJtWjzj1R81Wyks9b3GpVgB9fTQRsOlY90oZy5rB7J bPUelZ6CCOnjYOIeYyf1oMTHm7a2nglH -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:45 2025 by rpki-client