$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: IarW1QeArGbxNvgXzdzGX2qVZE0batbjm76sCm8TIlM= Subject key identifier: CA:88:D6:62:D6:D8:CF:86:FA:14:51:AD:DA:83:7A:29:96:66:E3:27 Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: 9A Signing time: Sat 09 Aug 2025 06:47:00 +0000 Manifest this update: Sat 09 Aug 2025 06:47:00 +0000 Manifest next update: Sat 16 Aug 2025 06:47:00 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: j4eC1i3zh/SksGMKz+nW1RXrxL4sYd8/QMY5Jg4U/us=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Aug 9 06:47:00 2025 GMT Not After : Aug 16 06:47:00 2025 GMT Subject: CN=6896eee4-2947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:6b:d7:ac:94:e2:94:52:14:42:ab:aa:94: fb:a8:71:ca:4c:5c:fa:3d:db:c6:4d:7c:30:20:13: 3c:ff:ba:ac:4d:f2:b9:89:47:49:1b:29:03:b7:cf: 8a:cb:95:22:a2:18:82:75:53:c7:46:cf:26:3f:f0: bc:35:0e:75:7f:23:02:a8:db:b2:be:a8:7f:c2:3b: 4e:8b:fa:b7:a4:00:b7:31:91:2b:44:e5:83:2d:a7: 2c:fb:13:3c:d9:de:a4:b0:89:f3:a3:05:93:58:94: c3:7f:f2:d8:1a:8f:b3:00:45:48:b9:3a:a2:12:66: a7:ba:63:df:b3:50:05:da:53:6f:cf:3b:b2:bf:e9: 6f:92:d5:56:d2:0b:ca:2e:82:a7:32:94:94:e8:81: 5b:6f:80:e4:9a:94:d6:91:d5:d8:6b:49:9d:bd:a0: 74:92:39:90:6c:55:ea:d3:e6:7c:33:09:f2:9e:1b: 50:3e:86:52:29:a9:6e:82:f8:e6:dc:4f:e5:7d:de: 0c:a7:45:5f:5c:24:e1:e3:fb:d8:a2:a4:a1:f6:05: 42:9b:f5:aa:d9:f1:19:58:54:eb:90:1a:b2:c6:cb: 30:e7:cb:2d:be:c4:26:8a:12:47:a4:0d:31:94:31: b9:15:93:79:e5:ec:0b:39:8f:2f:42:21:db:91:05: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:88:D6:62:D6:D8:CF:86:FA:14:51:AD:DA:83:7A:29:96:66:E3:27 X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:dc:7a:15:a3:0b:7f:91:af:1d:10:d7:ec:cf:37:cf:08:1a: e0:e2:a0:9f:96:2f:38:45:07:68:ca:b1:cf:32:25:80:e4:3d: 8c:65:b3:b0:b4:d9:e6:a3:9e:4e:63:f0:00:15:19:ed:d5:c8: b9:31:e7:7b:70:8d:a8:a9:50:97:80:5a:a4:98:05:a5:57:1e: a8:2d:fe:7e:ae:7a:f4:d7:cf:fb:24:2c:47:50:6d:58:a0:10: 80:0f:8a:84:07:0f:2a:53:ed:93:9c:cf:16:48:3a:78:56:6d: dd:3d:64:24:8f:c5:0c:b1:28:9c:67:e0:14:18:53:41:1f:79: 18:f2:71:63:95:ae:70:22:f9:7d:bf:b2:22:07:5d:38:9c:87: e5:88:fc:2b:1e:fb:75:80:fd:94:cb:02:5c:d0:87:e9:cf:fc: 01:ee:d5:20:99:d9:72:1b:a6:e6:70:92:92:ad:31:ab:12:bf: 0b:f7:0a:6e:36:35:37:8f:d3:61:ba:ae:a9:36:05:b0:af:ae: 87:c4:1f:3f:6f:1f:d5:ea:a6:21:8e:92:67:9c:36:a3:f9:08: 60:74:6a:70:88:a7:38:9f:03:2c:31:57:38:95:d1:aa:2f:7b: a3:62:0e:75:86:9e:b8:53:af:5e:24:26:8b:9f:f7:8c:bf:fb: 16:f5:51:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDQwRERFRUYwMThFQURDREU0RDFCRjc4RDE1NDg1MUY4 RDhCQzI2QTUwHhcNMjUwODA5MDY0NzAwWhcNMjUwODE2MDY0NzAwWjAYMRYwFAYD VQQDEw02ODk2ZWVlNC0yOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/9r16yU4pRSFEKrqpT7qHHKTFz6PdvGTXwwIBM8/7qsTfK5iUdJGykDt8+K y5UiohiCdVPHRs8mP/C8NQ51fyMCqNuyvqh/wjtOi/q3pAC3MZErROWDLacs+xM8 2d6ksInzowWTWJTDf/LYGo+zAEVIuTqiEmanumPfs1AF2lNvzzuyv+lvktVW0gvK LoKnMpSU6IFbb4DkmpTWkdXYa0mdvaB0kjmQbFXq0+Z8MwnynhtQPoZSKalugvjm 3E/lfd4Mp0VfXCTh4/vYoqSh9gVCm/Wq2fEZWFTrkBqyxssw58stvsQmihJHpA0x lDG5FZN55ewLOY8vQiHbkQXkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqI1mLW 2M+G+hRRrdqDeimWZuMnMB8GA1UdIwQYMBaAFEDd7vAY6tzeTRv3jRVIUfjYvCal MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GMEI2NkNGODhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNONU5HX2VORlVoUi1OaThK cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GMEI2NkNGODhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNO NU5HX2VORlVoUi1OaThKcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm3HoVowt/ka8dENfszzfPCBrg4qCfli84RQdoyrHPMiWA5D2MZbOw tNnmo55OY/AAFRnt1ci5Med7cI2oqVCXgFqkmAWlVx6oLf5+rnr018/7JCxHUG1Y oBCAD4qEBw8qU+2TnM8WSDp4Vm3dPWQkj8UMsSicZ+AUGFNBH3kY8nFjla5wIvl9 v7IiB104nIfliPwrHvt1gP2UywJc0Ifpz/wB7tUgmdlyG6bmcJKSrTGrEr8L9wpu NjU3j9Nhuq6pNgWwr66HxB8/bx/V6qYhjpJnnDaj+QhgdGpwiKc4nwMsMVc4ldGq L3ujYg51hp64U69eJCaLn/eMv/sW9VHC -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:16 2025 by rpki-client