$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: X01zS8wwxMfKcKzElYQ8i8xV02kmtpeHSErp7XWWPS0= Subject key identifier: C8:D1:72:60:61:EC:75:63:AF:0E:FF:A5:28:52:F3:3B:C2:50:20:92 Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 0254 Signing time: Sat 09 Aug 2025 02:21:48 +0000 Manifest this update: Sat 09 Aug 2025 02:21:48 +0000 Manifest next update: Sat 16 Aug 2025 02:21:48 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: t6dbjYxA1FPwpABpv/1D3bhW5bOSLs+IgOvX9jWTnvQ=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: jWdCBukfmwdIx7AmCNNn8IWevCXBAGWSyySXEJZ9MpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: Aug 9 02:21:48 2025 GMT Not After : Aug 16 02:21:48 2025 GMT Subject: CN=6896b0bc-9033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:39:99:4f:60:c7:17:04:a5:23:e8:ac:b8: 85:25:90:96:70:82:d6:6f:84:34:90:65:22:26:ca: a6:05:4f:30:f8:45:dd:fe:1e:b4:e8:16:88:38:85: 01:53:62:e1:2b:43:e2:dd:0e:08:83:70:66:43:40: ec:8c:cd:90:a4:7e:e5:98:e7:ba:62:f8:b2:c6:1e: 8d:47:d6:9b:23:a7:e8:3c:70:da:d5:3a:fc:42:90: 81:9c:16:6d:1f:d2:ed:9d:72:75:52:97:e6:43:9d: a4:cb:95:93:d8:3e:b3:5b:74:76:70:32:8e:d7:bd: fb:51:fd:6f:a7:ea:bb:06:ab:cf:13:af:f7:8c:28: 1a:4d:44:72:0c:7e:15:0d:c2:3c:13:ed:f4:67:27: 4f:b3:54:97:8a:b2:99:89:68:7e:00:9a:10:84:ad: 5e:95:0c:e5:41:e7:1b:38:96:9e:c5:58:44:42:22: 1f:e5:89:c2:24:b9:e0:b0:4b:e9:c0:6f:d4:a0:39: 6c:52:15:7a:e4:e8:c7:32:d8:55:ef:90:4b:b7:e2: 99:b2:6a:af:e2:b2:3c:63:58:bb:da:32:1b:bf:c1: b8:ee:2c:42:3c:16:97:a5:94:65:1d:36:02:b7:d4: 72:b5:f6:a2:b4:5d:5e:eb:57:46:1c:ac:03:3a:42: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D1:72:60:61:EC:75:63:AF:0E:FF:A5:28:52:F3:3B:C2:50:20:92 X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:ff:d5:9d:a9:38:b8:e9:87:df:ba:a0:f3:45:db:5b:5c: 14:ac:b1:b3:b5:4d:3f:5a:42:1e:41:f7:12:b1:24:fa:74:c3: ab:b1:f1:c6:83:70:b7:cf:cb:f2:e4:e8:21:00:17:a8:51:20: 5b:58:c1:b5:18:93:3c:ba:ae:eb:2a:5a:f6:19:62:90:5c:8b: 19:b3:3a:dc:6e:b0:d9:d2:70:18:42:c1:3f:18:6c:92:b7:e9: d6:03:35:29:48:e4:3a:ad:b1:d9:18:dc:2e:f6:a7:0e:35:b5: a5:66:0f:c7:1a:19:c1:f7:ac:7c:44:c6:7b:ef:24:3e:f7:ab: 09:bf:94:9f:84:18:5f:96:b9:f1:95:33:56:9d:12:d1:b1:51: e9:a3:84:e3:4b:bc:d7:fb:01:58:b6:af:7b:e3:37:7b:2f:ec: 23:0b:ac:9f:c8:c9:63:df:80:d7:bd:c4:00:e5:68:91:dd:46: 62:2e:84:36:07:a6:51:ff:68:16:65:c6:5c:19:6d:6e:a3:a9: c1:c6:7a:72:5e:aa:86:0d:84:bc:0d:10:80:ab:52:07:80:51: bc:9c:cf:03:c3:1a:1f:3f:cb:1f:17:fc:9c:23:ca:4a:78:0e: 36:af:c4:9b:a8:89:08:b4:59:e5:dc:d9:e6:f6:53:8b:bc:75: f3:16:65:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjUwODA5MDIyMTQ4WhcNMjUwODE2MDIyMTQ4WjAYMRYwFAYD VQQDEw02ODk2YjBiYy05MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFc5mU9gxxcEpSPorLiFJZCWcILWb4Q0kGUiJsqmBU8w+EXd/h606BaIOIUB U2LhK0Pi3Q4Ig3BmQ0DsjM2QpH7lmOe6Yviyxh6NR9abI6foPHDa1Tr8QpCBnBZt H9LtnXJ1UpfmQ52ky5WT2D6zW3R2cDKO1737Uf1vp+q7BqvPE6/3jCgaTURyDH4V DcI8E+30ZydPs1SXirKZiWh+AJoQhK1elQzlQecbOJaexVhEQiIf5YnCJLngsEvp wG/UoDlsUhV65OjHMthV75BLt+KZsmqv4rI8Y1i72jIbv8G47ixCPBaXpZRlHTYC t9RytfaitF1e61dGHKwDOkLtTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjRcmBh 7HVjrw7/pShS8zvCUCCSMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAip//Vnak4uOmH37qg80XbW1wUrLGztU0/WkIeQfcSsST6dMOrsfHG g3C3z8vy5OghABeoUSBbWMG1GJM8uq7rKlr2GWKQXIsZszrcbrDZ0nAYQsE/GGyS t+nWAzUpSOQ6rbHZGNwu9qcONbWlZg/HGhnB96x8RMZ77yQ+96sJv5SfhBhflrnx lTNWnRLRsVHpo4TjS7zX+wFYtq974zd7L+wjC6yfyMlj34DXvcQA5WiR3UZiLoQ2 B6ZR/2gWZcZcGW1uo6nBxnpyXqqGDYS8DRCAq1IHgFG8nM8DwxofP8sfF/ycI8pK eA42r8SbqIkItFnl3Nnm9lOLvHXzFmVU -----END CERTIFICATE-----Generated at Sun Aug 10 18:22:47 2025 by rpki-client