$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: zAjUrMOA//wQHzem/EfEMaqcRVxoTtJXa1okCR+oWAs= Subject key identifier: C9:47:69:9A:0B:FD:92:79:39:63:63:51:0D:F8:26:D7:D5:02:5B:D7 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03F0 Signing time: Tue 09 Sep 2025 00:34:28 +0000 Manifest this update: Tue 09 Sep 2025 00:34:27 +0000 Manifest next update: Tue 16 Sep 2025 00:34:27 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: gwUw7E5H2Bz4Ut6vG7WxBOHCT5nqzxzfOQQOvbp709A=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Sep 9 00:34:27 2025 GMT Not After : Sep 16 00:34:27 2025 GMT Subject: CN=68bf7613-8a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:eb:84:3b:ad:8e:83:1a:7d:c0:69:dc:84: 55:de:9d:44:cc:4c:64:3c:5c:04:1e:50:20:24:57: f7:ae:7f:51:40:d1:0a:22:0a:b8:f7:48:79:7e:41: de:8a:c5:98:0b:10:26:35:5e:bb:4c:d8:50:80:ed: 01:d5:ee:df:e7:e4:c7:18:27:66:5e:d7:42:f3:f6: cc:8f:84:3f:59:73:ec:bc:8b:9e:f6:8e:3e:68:cc: 5e:84:62:47:1a:59:82:13:5b:cd:b3:7f:40:45:20: c4:c8:ee:b0:9c:c8:5b:cc:ba:45:73:af:78:72:be: 4c:52:02:a8:80:93:2e:f5:ff:66:95:fa:15:87:cd: bb:99:53:9d:cf:f7:64:aa:47:37:3d:fa:55:10:8f: b5:91:b9:f2:d1:d3:b4:bf:50:1a:1b:c9:7a:c1:af: 99:68:c3:35:4b:bd:fe:1f:bd:54:7d:c9:86:44:5e: 1d:87:35:4e:a4:d7:5e:a1:41:bd:00:25:4c:8e:bc: c4:66:4d:48:bf:3c:93:22:81:8a:ae:aa:4f:92:ce: 97:e1:8e:e5:ce:4c:65:fc:68:0b:7d:f3:50:e1:51: e9:28:53:68:70:20:ca:a6:51:de:81:31:3e:bc:1e: 71:70:e7:0a:f7:28:33:00:91:83:52:97:72:06:8e: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:47:69:9A:0B:FD:92:79:39:63:63:51:0D:F8:26:D7:D5:02:5B:D7 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:d7:d3:af:7b:e3:12:d2:c1:8a:62:77:7f:5d:fe:f1:be:c7: 98:c8:b3:01:f5:1e:f3:d7:f6:0d:c2:dd:89:db:cc:20:9d:b7: 48:78:b1:07:6a:c0:8a:87:7e:e5:58:16:a4:9f:7a:2a:2b:11: b9:ca:17:90:77:74:42:5b:0c:56:a5:6d:78:4a:d1:99:1b:8a: f6:6d:58:a7:f6:d6:30:1c:24:1e:d1:1e:d7:54:ae:29:f5:4e: 35:2e:64:8d:f9:cf:de:40:37:db:fb:33:7f:95:f4:3a:c3:1f: d7:d6:d6:24:35:90:11:02:ba:9d:dc:00:83:41:19:25:be:fd: 47:69:71:2e:8d:15:df:0a:e8:eb:f3:43:a8:10:c6:00:88:f2: 39:a4:61:58:39:59:f6:9d:2b:c6:b3:b7:2a:82:1a:13:cf:47: ef:9a:f6:fc:3e:3e:26:f2:5d:d2:16:77:8b:cc:42:56:b2:8b: 33:a6:a5:e6:3c:e2:1e:71:3d:43:39:6d:23:51:19:68:55:3d: 30:fc:39:65:82:12:44:47:d8:2d:47:72:c3:0a:96:ab:36:fb: 6a:1a:70:65:f5:1e:bf:a2:ea:f9:25:12:89:e5:0b:dd:c3:7c: 2e:29:fe:7d:03:4f:c4:23:08:af:b8:7d:a6:8b:be:03:3c:ab: b9:36:f0:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwOTA5MDAzNDI3WhcNMjUwOTE2MDAzNDI3WjAYMRYwFAYD VQQDEw02OGJmNzYxMy04YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV7rhDutjoMafcBp3IRV3p1EzExkPFwEHlAgJFf3rn9RQNEKIgq490h5fkHe isWYCxAmNV67TNhQgO0B1e7f5+THGCdmXtdC8/bMj4Q/WXPsvIue9o4+aMxehGJH GlmCE1vNs39ARSDEyO6wnMhbzLpFc694cr5MUgKogJMu9f9mlfoVh827mVOdz/dk qkc3PfpVEI+1kbny0dO0v1AaG8l6wa+ZaMM1S73+H71UfcmGRF4dhzVOpNdeoUG9 ACVMjrzEZk1IvzyTIoGKrqpPks6X4Y7lzkxl/GgLffNQ4VHpKFNocCDKplHegTE+ vB5xcOcK9ygzAJGDUpdyBo4c5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlHaZoL /ZJ5OWNjUQ34JtfVAlvXMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDs19Ove+MS0sGKYnd/Xf7xvseYyLMB9R7z1/YNwt2J28wgnbdIeLEH asCKh37lWBakn3oqKxG5yheQd3RCWwxWpW14StGZG4r2bVin9tYwHCQe0R7XVK4p 9U41LmSN+c/eQDfb+zN/lfQ6wx/X1tYkNZARArqd3ACDQRklvv1HaXEujRXfCujr 80OoEMYAiPI5pGFYOVn2nSvGs7cqghoTz0fvmvb8Pj4m8l3SFneLzEJWsoszpqXm POIecT1DOW0jURloVT0w/DllghJER9gtR3LDCparNvtqGnBl9R6/our5JRKJ5Qvd w3wuKf59A0/EIwivuH2mi74DPKu5NvCM -----END CERTIFICATE-----Generated at Tue Sep 9 17:33:58 2025 by rpki-client