$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json) Hash identifier: 5Rm0ldFOm4wdO24aiojctsojZyaygsNnsUJXotNCXyY= Subject key identifier: 09:15:50:D0:2A:EE:45:44:69:CA:90:C6:A6:D3:D0:7F:B9:F9:6F:62 Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft Manifest number: E6 Signing time: Fri 25 Jul 2025 05:44:38 +0000 Manifest this update: Fri 25 Jul 2025 05:44:38 +0000 Manifest next update: Fri 01 Aug 2025 05:44:37 +0000 Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: gG9yf5uyJrvRr/fcEsIc4MyOls4MhjpYbrSGY0tpxU0=) 2: F5AF6608370411F0B2A2B987C4F9AE02.roa (hash: sKL7GxR/Osz7bpKAC1OAVJi+UAvdGvi+MQo+/LHB5R8=) 3: D5A80432370411F0A5919873C4F9AE02.roa (hash: jhleaFnetRilP8PuvxdvCqw9xChQP0YqjbFI4VC52yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 05:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Validity Not Before: Jul 25 05:44:38 2025 GMT Not After : Aug 1 05:44:37 2025 GMT Subject: CN=688319c6-d7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:a9:9d:b0:33:23:57:7f:c6:47:af:0b:8f: 1e:39:aa:f7:e6:62:57:57:e3:1a:f7:7c:d0:22:6a: 7e:26:8c:4e:46:8e:05:e6:84:58:e4:5e:b9:86:f6: 6e:d1:94:ae:b7:3b:be:e1:b9:8a:0d:d6:ca:5e:1c: 65:9d:b7:a2:30:db:94:4c:d9:82:ce:f3:87:9e:6e: e0:16:13:ed:ca:19:93:d7:81:b8:3d:d0:4e:de:d2: a1:e5:57:19:ef:e3:9c:83:c5:5a:27:9f:80:07:09: 9e:79:b1:49:3e:f0:16:76:2f:27:58:65:a2:bf:1f: b7:d7:11:35:90:27:e2:ed:de:8b:e1:19:d9:11:a6: c4:d0:48:01:47:6d:9f:56:3e:6b:27:95:4f:e1:de: e4:fa:59:d2:e7:d3:1c:0a:3d:57:4b:db:15:8b:12: be:21:9c:2f:5d:f5:25:26:1e:43:b9:c9:0f:7a:35: b8:90:4d:ab:23:ef:95:9d:33:3c:1a:57:42:bd:90: 2e:8d:42:03:1f:f0:6e:cb:63:90:c3:16:ae:f0:53: eb:23:8d:7b:11:60:73:31:33:a9:87:d7:fa:a1:36: 2b:6b:9c:3d:ad:99:33:2c:e3:0a:a0:40:30:c7:9e: 88:6d:4a:8d:29:37:99:0f:1c:d8:a4:97:f5:97:36: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:50:D0:2A:EE:45:44:69:CA:90:C6:A6:D3:D0:7F:B9:F9:6F:62 X509v3 Authority Key Identifier: keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fe:d8:e4:ae:c2:57:6f:cf:ac:58:76:f3:ca:98:34:bd:e5: 48:35:b1:a2:71:b7:bb:f3:0c:75:b2:6c:d5:5e:4b:92:0f:db: 74:fd:62:47:5b:0d:ac:48:da:1f:b5:7d:d6:f9:8a:9c:1b:ce: a9:da:43:8a:13:2f:6a:6a:e7:f2:68:0a:ed:89:ee:11:c5:f5: 9a:55:ed:ab:d6:6d:2b:91:2d:ad:ec:05:ff:12:92:76:d1:51: 24:06:54:71:61:43:60:aa:de:08:3e:60:39:4c:d3:17:5b:88: 4f:fb:62:9d:ed:a6:6b:c6:ea:38:5f:09:84:f5:94:7c:f1:39: 0f:a7:85:7a:be:22:c1:5f:d7:f7:a7:bc:95:81:d6:17:fe:1e: aa:84:1e:64:19:56:a8:f3:7b:d6:6c:3b:62:a4:83:8a:fb:ad: 14:fb:31:4f:58:f8:47:c2:80:b2:d0:53:df:22:96:aa:ea:4a: fa:20:30:7a:5c:2b:ba:fb:c4:3b:05:7c:38:74:99:59:92:64: 16:ba:28:07:82:e7:78:7f:92:28:a7:31:73:43:d0:56:c8:f9: 69:97:fb:4e:04:69:1d:00:59:b3:54:57:cb:eb:f4:ce:a1:8d: 9b:82:95:0d:ed:cb:17:7e:a9:02:9c:6f:d2:67:16:73:3d:15: bf:9b:bf:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKDQwQjU1QzFBQzc0MDRDQzA1RjE3NzYzQTk5QkJCMjM4 OUJEMkVBQkUwHhcNMjUwNzI1MDU0NDM4WhcNMjUwODAxMDU0NDM3WjAYMRYwFAYD VQQDEw02ODgzMTljNi1kN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G2pnbAzI1d/xkevC48eOar35mJXV+Ma93zQImp+JoxORo4F5oRY5F65hvZu 0ZSutzu+4bmKDdbKXhxlnbeiMNuUTNmCzvOHnm7gFhPtyhmT14G4PdBO3tKh5VcZ 7+Ocg8VaJ5+ABwmeebFJPvAWdi8nWGWivx+31xE1kCfi7d6L4RnZEabE0EgBR22f Vj5rJ5VP4d7k+lnS59McCj1XS9sVixK+IZwvXfUlJh5DuckPejW4kE2rI++VnTM8 GldCvZAujUIDH/Buy2OQwxau8FPrI417EWBzMTOph9f6oTYra5w9rZkzLOMKoEAw x56IbUqNKTeZDxzYpJf1lzbp8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkVUNAq 7kVEacqQxqbT0H+5+W9iMB8GA1UdIwQYMBaAFEC1XBrHQEzAXxd2Opm7sjib0uq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC81ODQwQTA3QzEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRNQmZGM1k2bWJ1eU9KdlM2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMVmNHc2RBVE1CZkYzWTZtYnV5T0p2UzZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC81ODQwQTA3QzEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRN QmZGM1k2bWJ1eU9KdlM2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp/tjkrsJXb8+sWHbzypg0veVINbGicbe78wx1smzVXkuSD9t0/WJH Ww2sSNoftX3W+YqcG86p2kOKEy9qaufyaArtie4RxfWaVe2r1m0rkS2t7AX/EpJ2 0VEkBlRxYUNgqt4IPmA5TNMXW4hP+2Kd7aZrxuo4XwmE9ZR88TkPp4V6viLBX9f3 p7yVgdYX/h6qhB5kGVao83vWbDtipIOK+60U+zFPWPhHwoCy0FPfIpaq6kr6IDB6 XCu6+8Q7BXw4dJlZkmQWuigHgud4f5IopzFzQ9BWyPlpl/tOBGkdAFmzVFfL6/TO oY2bgpUN7csXfqkCnG/SZxZzPRW/m7/9 -----END CERTIFICATE-----Generated at Sat Jul 26 20:40:59 2025 by rpki-client