$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft File: qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json) Hash identifier: 8zv1a5YrKjKM9Z/BIxOr2TsJ1vjrUN90FjaVbbhvlok= Subject key identifier: CF:1D:5F:52:D9:D7:67:1A:BB:EB:22:72:9C:83:FD:FC:FA:1A:99:34 Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9 Certificate issuer: /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft Manifest number: 29 Signing time: Sat 09 Aug 2025 08:15:00 +0000 Manifest this update: Sat 09 Aug 2025 08:14:59 +0000 Manifest next update: Sat 16 Aug 2025 08:14:59 +0000 Files and hashes: 1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: gNorT+ztTcWU3P+ISQ9X0J+2HiwLXl/3YAJl5kpTSFY=) 2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: ICDTjfptMFLAWgu+lY50xT8rCv9IQat8S3hCjv+v8vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9 Validity Not Before: Aug 9 08:14:59 2025 GMT Not After : Aug 16 08:14:59 2025 GMT Subject: CN=68970383-7297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:c0:28:f5:06:ae:cf:2f:ee:3f:63:46:35: b0:15:af:64:97:ce:b9:21:45:e9:31:8a:b0:45:c6: 7d:b7:d8:73:c8:15:bf:56:e1:8a:d8:b1:c0:5f:e6: 9d:46:c3:30:e4:2f:d9:ca:f1:99:fa:cc:49:eb:27: 25:3a:52:cd:be:b7:b0:26:e5:36:95:18:b3:df:ab: 0c:ac:01:fb:7a:e6:2d:f5:92:88:bb:df:ba:a4:9b: a1:83:da:fe:09:9d:15:79:b2:35:a9:6e:3c:ba:8a: 7b:40:57:5e:b5:53:d4:57:27:d5:f6:4b:43:5d:82: af:96:f1:50:59:50:5f:e3:37:3b:30:19:ee:81:f0: 2f:52:de:5d:55:18:47:be:82:ec:6a:12:83:23:ef: 4e:3d:23:41:78:66:4b:b8:ec:fc:4a:b5:7a:24:99: 7b:4d:14:af:0f:44:c3:28:d5:84:02:26:09:e5:d7: a6:b5:65:1b:95:89:c4:77:b9:4e:2c:88:64:67:33: e5:47:69:e3:8d:86:b7:d2:48:18:60:86:3d:b9:85: 41:6d:a3:91:b9:60:73:09:1e:63:f1:87:1b:9b:71: 86:f3:e7:a2:67:69:c2:0d:94:83:a6:ff:54:93:62: 38:b1:61:9f:ac:7d:b9:dd:9d:51:5e:34:9b:6b:1a: 0c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1D:5F:52:D9:D7:67:1A:BB:EB:22:72:9C:83:FD:FC:FA:1A:99:34 X509v3 Authority Key Identifier: keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:44:ce:59:8f:ab:61:a6:99:f1:a2:5c:73:cf:f2:99:7e:a1: 5a:3b:15:c5:d3:73:04:49:a5:3e:c6:eb:dd:39:45:65:37:52: 9c:0a:ef:a2:fb:36:70:bd:9e:8a:7b:2a:20:c5:e7:ce:2e:b2: 8b:44:4d:81:a0:90:88:98:97:68:8c:0e:10:5f:ae:46:c4:73: 97:24:60:32:9d:b8:59:45:7f:19:18:3b:e6:3a:8e:0f:22:1c: 38:41:ec:79:09:31:22:92:ca:b4:00:bf:75:e5:68:f9:3d:07: cb:98:59:ab:88:12:7c:d9:a2:c0:04:51:fa:fc:75:91:51:ef: 78:45:c8:89:aa:bd:ee:e7:e5:9b:32:06:c1:33:a6:2e:50:7b: 51:72:69:97:99:5e:35:3a:ec:60:96:56:c5:8a:ce:88:a6:fd: 74:5a:36:ca:6f:81:de:c0:3c:9f:2d:f6:70:5a:b7:40:98:ba: b1:bb:a6:c7:fd:a9:85:08:d7:c6:19:c6:2b:2d:f0:62:2e:00: 06:c6:ae:12:dd:32:eb:11:94:4e:87:b3:45:05:5f:fa:cf:7b: c5:87:a7:18:66:92:ab:8d:5d:6e:7d:43:d4:f9:11:bf:7e:47: 0c:2a:a1:a4:6d:51:ba:d1:5a:47:4c:19:ad:00:8f:89:70:40: 4e:47:81:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDgzMjExMC8GA1UEBRMoQTkzOEVGRkI5NjNBRTJBRUI2RjBCMjY2NTk2QjhBNDEy Mzc3QzlEOTAeFw0yNTA4MDkwODE0NTlaFw0yNTA4MTYwODE0NTlaMBgxFjAUBgNV BAMTDTY4OTcwMzgzLTcyOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbkcAo9Qauzy/uP2NGNbAVr2SXzrkhRekxirBFxn232HPIFb9W4YrYscBf5p1G wzDkL9nK8Zn6zEnrJyU6Us2+t7Am5TaVGLPfqwysAft65i31koi737qkm6GD2v4J nRV5sjWpbjy6intAV161U9RXJ9X2S0Ndgq+W8VBZUF/jNzswGe6B8C9S3l1VGEe+ guxqEoMj7049I0F4Zku47PxKtXokmXtNFK8PRMMo1YQCJgnl16a1ZRuVicR3uU4s iGRnM+VHaeONhrfSSBhghj25hUFto5G5YHMJHmPxhxubcYbz56JnacINlIOm/1ST YjixYZ+sfbndnVFeNJtrGgwHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzx1fUtnX Zxq76yJynIP9/PoamTQwHwYDVR0jBBgwFoAUqTjv+5Y64q628LJmWWuKQSN3ydkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwODMyL0MyNTlGNkIyMzYy NjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2MjhMSm1XV3VLUVNOM3lk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVRqdi01WTY0cTYyOExKbVdXdUtRU04zeWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw ODMyL0MyNTlGNkIyMzYyNjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2 MjhMSm1XV3VLUVNOM3lkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKFEzlmPq2GmmfGiXHPP8pl+oVo7FcXTcwRJpT7G6905RWU3UpwK76L7 NnC9nop7KiDF584usotETYGgkIiYl2iMDhBfrkbEc5ckYDKduFlFfxkYO+Y6jg8i HDhB7HkJMSKSyrQAv3XlaPk9B8uYWauIEnzZosAEUfr8dZFR73hFyImqve7n5Zsy BsEzpi5Qe1FyaZeZXjU67GCWVsWKzoim/XRaNspvgd7APJ8t9nBat0CYurG7psf9 qYUI18YZxist8GIuAAbGrhLdMusRlE6Hs0UFX/rPe8WHpxhmkquNXW59Q9T5Eb9+ RwwqoaRtUbrRWkdMGa0Aj4lwQE5HgQg= -----END CERTIFICATE-----Generated at Sun Aug 10 13:56:21 2025 by rpki-client