$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: e4ucnZoCcF746dfOiemAffcjXWMUhTE5tvb+DwXRVtI= Subject key identifier: C6:F3:39:8F:07:6D:2B:54:8B:3B:87:4D:DD:C0:81:82:40:DB:EF:EC Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 186A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 185F Signing time: Sun 24 Aug 2025 16:29:29 +0000 Manifest this update: Sun 24 Aug 2025 16:29:28 +0000 Manifest next update: Sun 31 Aug 2025 16:29:28 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: TgRT8hzxmoZdyvw14dhf9cIYOXNkRZVMb00dis2w1jM=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: WFmZvmOIKNk0az+zKPBYrOXakumFbE34A1nRoyLlGgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6250 (0x186a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Aug 24 16:29:28 2025 GMT Not After : Aug 31 16:29:28 2025 GMT Subject: CN=68ab3de9-9340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:36:24:4e:eb:e8:fb:24:d4:0a:b3:42:e4: 5f:52:32:8b:51:af:d4:5e:99:c3:cc:dd:42:55:52: 5d:8e:ba:8f:8c:b1:6d:70:88:4b:7a:d0:3e:c9:84: 75:5a:d0:6d:54:85:8f:95:4c:44:54:80:57:18:3a: de:9b:e3:f0:98:ec:c3:6f:4c:93:dc:04:62:9e:b4: 32:3b:ad:f6:2d:1b:c6:32:79:f0:da:f6:4c:45:e7: e8:70:42:6d:c3:d4:a2:1c:9e:a6:b2:0e:e0:6a:64: 5b:96:76:fb:38:29:e9:15:0d:c1:61:1f:d0:1c:66: 0e:84:c4:09:63:0c:ca:5c:48:c1:5e:34:8e:e4:69: d6:df:54:5e:d3:2c:35:bf:78:e5:80:f0:1a:23:84: 77:df:03:40:29:18:03:c1:56:4a:91:c0:59:32:ba: 14:e3:c1:e9:98:41:a8:32:da:e2:ba:db:63:20:7a: 0b:e0:9e:49:eb:5a:1e:1f:90:53:40:88:f9:85:b4: 67:13:4a:3f:a3:8d:38:b8:1c:65:0b:89:f4:58:d5: 51:83:18:de:27:0c:9b:b4:61:74:c8:4f:0c:3d:47: 76:28:62:06:14:c0:f6:f3:d0:65:79:5f:e7:f3:95: 49:73:32:54:6a:dd:ed:08:84:a5:1b:9d:6f:2a:8c: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F3:39:8F:07:6D:2B:54:8B:3B:87:4D:DD:C0:81:82:40:DB:EF:EC X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:34:96:dd:f1:63:c3:6f:03:d3:45:46:ba:12:f9:31:f8:85: 55:73:b9:62:67:61:f2:0c:93:56:20:0c:60:58:4d:c5:ca:c8: 6f:64:8c:c6:2a:5b:08:e6:da:03:16:8c:7a:37:2c:24:f3:9f: ee:49:4a:e2:0b:51:c9:a1:7a:09:ca:ff:53:2d:36:24:ec:d7: 6a:60:36:43:01:a8:5c:5a:0b:33:dc:c4:68:1b:4c:be:9a:50: 30:2e:27:0d:72:c6:f9:70:3f:f2:c8:08:8b:bd:dd:d2:48:4f: e0:b1:0a:89:5c:24:17:38:30:11:80:48:b1:1e:4f:d6:69:8d: 41:b5:0c:e0:f6:07:4b:82:04:ae:54:bc:10:8f:2f:39:fd:8d: 89:9d:b1:f0:13:30:42:9b:86:d8:22:73:ed:cc:21:67:f7:60: 80:9a:ce:22:13:c5:f9:94:3f:dd:95:79:88:67:19:59:5e:28: 63:9a:f2:f1:13:09:38:c6:ac:49:00:8d:05:a7:13:48:ff:92: fc:91:e4:fc:d5:82:a5:0f:97:70:4e:11:f9:f1:86:33:66:31: 91:72:e7:e9:29:c4:22:07:02:c4:f9:10:ee:02:ad:e0:a3:69: fd:11:c5:da:45:15:be:55:57:8c:ba:c4:6a:34:98:07:dc:cb: 64:76:32:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUwODI0MTYyOTI4WhcNMjUwODMxMTYyOTI4WjAYMRYwFAYD VQQDEw02OGFiM2RlOS05MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1342JE7r6Psk1AqzQuRfUjKLUa/UXpnDzN1CVVJdjrqPjLFtcIhLetA+yYR1 WtBtVIWPlUxEVIBXGDrem+PwmOzDb0yT3ARinrQyO632LRvGMnnw2vZMRefocEJt w9SiHJ6msg7gamRblnb7OCnpFQ3BYR/QHGYOhMQJYwzKXEjBXjSO5GnW31Re0yw1 v3jlgPAaI4R33wNAKRgDwVZKkcBZMroU48HpmEGoMtriuttjIHoL4J5J61oeH5BT QIj5hbRnE0o/o404uBxlC4n0WNVRgxjeJwybtGF0yE8MPUd2KGIGFMD289BleV/n 85VJczJUat3tCISlG51vKowZ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbzOY8H bStUizuHTd3AgYJA2+/sMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMNJbd8WPDbwPTRUa6Evkx+IVVc7liZ2HyDJNWIAxgWE3FyshvZIzG KlsI5toDFox6Nywk85/uSUriC1HJoXoJyv9TLTYk7NdqYDZDAahcWgsz3MRoG0y+ mlAwLicNcsb5cD/yyAiLvd3SSE/gsQqJXCQXODARgEixHk/WaY1BtQzg9gdLggSu VLwQjy85/Y2JnbHwEzBCm4bYInPtzCFn92CAms4iE8X5lD/dlXmIZxlZXihjmvLx Ewk4xqxJAI0FpxNI/5L8keT81YKlD5dwThH58YYzZjGRcufpKcQiBwLE+RDuAq3g o2n9EcXaRRW+VVeMusRqNJgH3MtkdjLK -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:17 2025 by rpki-client