$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: J2e7GTnNxAr0D5G/CB7/Xyv3P4r8ugtqwrQ/B6FW7tg= Subject key identifier: F8:22:1D:7E:D7:F9:61:60:C2:1D:1B:8C:7A:9C:0F:87:3C:9F:CA:D3 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 0291 Signing time: Thu 21 Aug 2025 01:48:06 +0000 Manifest this update: Thu 21 Aug 2025 01:48:06 +0000 Manifest next update: Thu 28 Aug 2025 01:48:06 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: Ba3FRnrfLwk2dEh+Li0VkOarQK20Cew8Ag4y9GGe9IY=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Aug 21 01:48:06 2025 GMT Not After : Aug 28 01:48:06 2025 GMT Subject: CN=68a67ad6-7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:12:4d:96:37:03:01:ab:91:d5:75:14:6f: 79:71:20:1c:53:dc:59:d2:b6:2d:fa:71:1e:9e:c7: bd:1d:62:8d:9c:40:48:85:17:56:86:b1:f1:b9:0c: 7b:db:09:21:75:4d:8c:6e:2c:51:52:04:3c:e0:ff: db:57:a3:bf:fd:11:2c:2c:bf:28:4a:24:ba:26:64: c1:c3:bb:4a:d4:23:41:97:4a:8c:36:75:fc:5d:06: ec:e7:5d:d9:05:2f:bf:e4:45:a7:e2:33:bb:46:df: 3d:12:ec:f7:82:98:d3:da:37:39:52:de:97:84:ed: 75:e3:56:3d:6e:db:07:57:c9:6a:ad:f8:54:f7:88: 43:65:69:76:d5:43:4f:15:b8:31:91:50:63:3f:36: d5:4d:79:48:ef:1a:2e:22:ce:7b:fc:85:43:dc:60: 2d:0c:f0:7f:9e:d0:7f:f8:00:e9:47:a9:01:31:13: d4:0d:cd:2d:49:5b:09:11:f1:89:fd:6e:b3:c9:95: 6a:6e:15:bd:8e:18:65:a6:e1:fd:36:54:2e:c8:3d: b0:7d:d6:8d:5a:0c:84:fd:35:bf:1c:65:90:1b:10: 21:48:60:a8:43:f9:29:ef:e0:11:b8:a5:9f:59:76: a9:b2:10:bb:5c:9f:e0:90:9c:af:a2:05:4f:45:11: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:1D:7E:D7:F9:61:60:C2:1D:1B:8C:7A:9C:0F:87:3C:9F:CA:D3 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:7a:63:96:5a:c5:b4:3c:50:e6:b6:fa:8b:14:a9:7c:b7:42: 3f:44:ea:54:be:ed:9c:5d:7b:c0:12:30:e2:f5:17:2d:b2:2a: 7f:f9:a2:62:df:06:45:75:bb:63:2c:8a:3b:9c:74:f9:17:6c: 70:13:d7:ef:e3:d1:ec:eb:86:2f:67:75:c3:99:f1:fe:3d:89: 21:90:5c:3c:96:02:09:53:7d:75:a1:f6:0d:31:0c:72:1e:6c: d7:44:f0:89:b1:64:b2:c7:d1:01:b8:9c:0a:e1:77:47:9a:d6: 34:4d:08:9c:22:9d:ca:5c:3b:2f:f9:14:11:f3:c6:0e:28:bd: 90:e4:49:a4:52:88:7d:af:0f:17:f8:74:6a:48:64:70:ef:c9: 42:d8:78:fe:6a:8f:e5:a7:83:12:67:0e:91:79:09:11:ff:4b: ae:9a:57:29:d8:ee:f3:c1:c7:5f:21:c2:1d:06:70:b0:e6:c6: cb:5c:6b:be:be:5c:c9:e0:1a:12:71:f8:6a:89:87:54:01:8d: b1:b1:45:4f:33:e0:52:d2:06:50:33:aa:a1:32:e9:4b:c5:ef: eb:48:2a:72:80:43:23:40:ed:ba:f2:ff:f3:67:e7:17:0b:d5: 58:51:7f:a3:95:de:a2:82:a6:b3:f8:78:fe:7b:c8:45:41:f7: f7:67:55:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUwODIxMDE0ODA2WhcNMjUwODI4MDE0ODA2WjAYMRYwFAYD VQQDEw02OGE2N2FkNi03YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjoSTZY3AwGrkdV1FG95cSAcU9xZ0rYt+nEense9HWKNnEBIhRdWhrHxuQx7 2wkhdU2MbixRUgQ84P/bV6O//REsLL8oSiS6JmTBw7tK1CNBl0qMNnX8XQbs513Z BS+/5EWn4jO7Rt89Euz3gpjT2jc5Ut6XhO1141Y9btsHV8lqrfhU94hDZWl21UNP FbgxkVBjPzbVTXlI7xouIs57/IVD3GAtDPB/ntB/+ADpR6kBMRPUDc0tSVsJEfGJ /W6zyZVqbhW9jhhlpuH9NlQuyD2wfdaNWgyE/TW/HGWQGxAhSGCoQ/kp7+ARuKWf WXapshC7XJ/gkJyvogVPRRFadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgiHX7X +WFgwh0bjHqcD4c8n8rTMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9emOWWsW0PFDmtvqLFKl8t0I/ROpUvu2cXXvAEjDi9Rctsip/+aJi 3wZFdbtjLIo7nHT5F2xwE9fv49Hs64YvZ3XDmfH+PYkhkFw8lgIJU311ofYNMQxy HmzXRPCJsWSyx9EBuJwK4XdHmtY0TQicIp3KXDsv+RQR88YOKL2Q5EmkUoh9rw8X +HRqSGRw78lC2Hj+ao/lp4MSZw6ReQkR/0uumlcp2O7zwcdfIcIdBnCw5sbLXGu+ vlzJ4BoScfhqiYdUAY2xsUVPM+BS0gZQM6qhMulLxe/rSCpygEMjQO268v/zZ+cX C9VYUX+jld6igqaz+Hj+e8hFQff3Z1Xt -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:14 2025 by rpki-client