$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json) Hash identifier: TH+5vOBUjVb1YZ+g9jYfy+k5Dapt82sygpPN07nU+Tg= Subject key identifier: C7:67:15:D6:A7:D3:5C:DB:06:9E:D3:7E:5F:EB:5C:1A:9A:AA:0B:30 Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft Manifest number: 0AF2 Signing time: Wed 06 Aug 2025 19:38:42 +0000 Manifest this update: Wed 06 Aug 2025 19:38:42 +0000 Manifest next update: Wed 13 Aug 2025 19:38:42 +0000 Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: E4zi33K5QAe5+wDwfh2wTmXKabkDc21gUL73jI47ABQ=) 2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: AtiHUqqiSc5seLUNoB/SjIutv6okcY16FsBOaprHkwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Validity Not Before: Aug 6 19:38:42 2025 GMT Not After : Aug 13 19:38:42 2025 GMT Subject: CN=6893af42-6dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:e0:7e:d4:94:1b:28:75:3b:c9:8c:98:68: 31:20:a7:c6:86:21:1d:77:cc:2f:eb:f3:16:1a:4c: b2:80:55:4a:21:5f:ef:b5:18:ea:50:dd:53:5b:d2: bd:a3:e0:1c:6e:e6:0b:d9:5b:4e:bd:c0:13:4d:fc: f6:09:ef:4c:15:90:33:a0:92:01:15:36:d5:71:1f: 33:06:43:28:06:0a:d6:15:97:42:f9:df:f2:19:61: 8e:f2:6f:66:25:76:92:0d:9e:50:aa:c4:d7:31:73: 79:2a:44:90:1c:4d:c0:10:43:47:07:c4:e7:0f:1a: a2:67:62:3c:7a:da:3d:d8:d2:c3:bd:21:82:80:3f: ae:bd:26:86:fc:1b:7a:c2:2a:0d:bd:a7:f6:7f:8c: 1e:9a:3e:e7:07:43:74:19:e5:dd:c3:d2:88:46:ef: dc:32:f4:54:85:da:46:79:ab:ff:62:00:38:bc:4b: 31:4f:e1:a9:03:0b:a5:15:97:47:20:69:7d:9c:4d: e1:59:9a:41:55:2f:8e:17:d5:66:a8:20:b8:09:ca: 4c:75:b9:40:7f:22:80:2a:30:9f:19:34:af:70:1b: 29:9c:cc:ec:ef:15:8b:af:47:51:c4:55:15:7e:02: 4a:44:ad:e4:ea:c7:fe:7e:6f:ed:43:d0:1c:cb:d6: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:67:15:D6:A7:D3:5C:DB:06:9E:D3:7E:5F:EB:5C:1A:9A:AA:0B:30 X509v3 Authority Key Identifier: keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ba:93:dc:a4:f8:63:bf:0e:ca:6b:59:99:4b:ef:80:57:ba: 14:f2:30:c0:1d:06:ff:36:09:c2:29:79:88:af:00:57:d6:f6: 60:df:13:35:3f:e9:ed:a8:24:85:58:88:16:61:a4:3e:de:30: 98:e9:07:d3:8b:62:88:44:16:c8:27:a3:48:a4:1a:8c:2b:80: 14:1a:07:3f:4f:0e:f4:27:31:2f:67:10:c5:31:8c:54:a8:d9: 56:45:ab:b5:80:2d:1e:e5:f2:23:6f:7c:3b:7a:98:4c:08:91: ae:1b:2c:37:59:4b:a8:37:08:2b:82:24:21:3e:b9:25:89:e4: 40:e9:da:d0:4b:f2:4e:bc:e1:90:23:06:89:79:af:9e:86:25: cd:ae:d3:ae:03:4c:c3:cc:17:93:11:8c:28:e0:f7:dc:b5:f5: 88:77:76:f0:67:e9:f0:19:5c:2c:60:7b:72:a7:fb:0b:b4:5b: 2f:48:a4:70:c6:3f:31:e3:9f:28:53:7c:e5:fd:5b:63:99:6c: 60:eb:88:3b:7f:6f:4e:50:91:f3:ec:66:8b:55:b2:ad:6a:ff: 61:a8:41:e6:b3:b5:62:38:74:e4:09:d3:e1:cb:17:ae:19:fb: 0c:65:f9:4a:d8:d6:34:f3:75:20:fe:2a:5b:07:7f:b7:30:b1: 0f:c1:88:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4 MTU3OEVDQjUwHhcNMjUwODA2MTkzODQyWhcNMjUwODEzMTkzODQyWjAYMRYwFAYD VQQDEw02ODkzYWY0Mi02ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63XgftSUGyh1O8mMmGgxIKfGhiEdd8wv6/MWGkyygFVKIV/vtRjqUN1TW9K9 o+AcbuYL2VtOvcATTfz2Ce9MFZAzoJIBFTbVcR8zBkMoBgrWFZdC+d/yGWGO8m9m JXaSDZ5QqsTXMXN5KkSQHE3AEENHB8TnDxqiZ2I8eto92NLDvSGCgD+uvSaG/Bt6 wioNvaf2f4wemj7nB0N0GeXdw9KIRu/cMvRUhdpGeav/YgA4vEsxT+GpAwulFZdH IGl9nE3hWZpBVS+OF9VmqCC4CcpMdblAfyKAKjCfGTSvcBspnMzs7xWLr0dRxFUV fgJKRK3k6sf+fm/tQ9Acy9YiBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdnFdan 01zbBp7Tfl/rXBqaqgswMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3upPcpPhjvw7Ka1mZS++AV7oU8jDAHQb/NgnCKXmIrwBX1vZg3xM1 P+ntqCSFWIgWYaQ+3jCY6QfTi2KIRBbIJ6NIpBqMK4AUGgc/Tw70JzEvZxDFMYxU qNlWRau1gC0e5fIjb3w7ephMCJGuGyw3WUuoNwgrgiQhPrklieRA6drQS/JOvOGQ IwaJea+ehiXNrtOuA0zDzBeTEYwo4PfctfWId3bwZ+nwGVwsYHtyp/sLtFsvSKRw xj8x458oU3zl/VtjmWxg64g7f29OUJHz7GaLVbKtav9hqEHms7ViOHTkCdPhyxeu GfsMZflK2NY083Ug/ipbB3+3MLEPwYgw -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:11 2025 by rpki-client