$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft File: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft (raw, json) Hash identifier: LsXEGzwOm/pUQIAvFJX5rgrI+2rQpum96Ze/tzofpIE= Subject key identifier: 28:C9:D6:94:D9:4D:69:95:5F:BC:F3:E7:EE:3C:2E:DD:9F:A2:CF:91 Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4 Certificate issuer: /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft Manifest number: 0F Signing time: Sat 09 Aug 2025 08:36:29 +0000 Manifest this update: Sat 09 Aug 2025 08:36:29 +0000 Manifest next update: Sat 16 Aug 2025 08:36:29 +0000 Files and hashes: 1: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl (hash: X9pwtoI2yqw+Mhx0tzLc8xljV/aqTvTBTrakMAEMTC8=) 2: AE811872614711F0B811645EC4F9AE02.roa (hash: n6Y55/ceR16qJJFVpXKIJxFXBfe/NuJGfnCy2fEW8mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4 Validity Not Before: Aug 9 08:36:29 2025 GMT Not After : Aug 16 08:36:29 2025 GMT Subject: CN=6897088d-69ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:09:17:ec:04:ce:d7:91:0c:eb:70:6e:8b: 2e:5e:0d:4e:84:a8:69:8c:54:d6:1e:b7:63:9f:2f: a0:0c:84:e2:cd:32:5e:c5:8a:dc:69:d8:07:95:5b: 85:02:1f:56:bd:b8:2e:62:69:82:53:de:b5:71:f1: 47:34:75:bd:eb:8e:f2:75:3d:f0:91:59:3b:72:de: b4:60:86:d8:e1:65:db:cd:af:42:20:d8:dc:8d:3c: dc:d7:f6:f3:a4:8d:bb:0a:e8:8a:f4:06:80:2c:aa: 81:c6:98:93:1c:04:94:dc:d5:36:19:7f:34:1e:85: 4e:f6:b3:bb:1d:a7:3b:47:f5:e8:e5:3e:81:65:bc: 71:23:df:4f:2e:c8:20:e0:cd:56:6d:7a:9e:55:f4: 5b:2a:79:c6:01:78:50:9f:f5:69:17:85:08:4a:1f: 9d:86:08:88:4f:9e:40:fa:4e:c0:3d:e8:1c:38:92: b0:28:03:c6:2a:ca:e3:50:eb:7c:84:8b:d1:21:e4: 97:51:ed:ae:47:39:56:af:30:68:f0:79:8e:93:eb: 2a:73:2a:14:54:c4:55:92:37:5a:c8:01:1d:78:75: dd:56:2e:87:b8:4c:70:47:b0:96:40:ff:c6:3a:7c: 52:8a:0d:30:92:08:df:e3:71:46:c8:ec:4f:ff:bc: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C9:D6:94:D9:4D:69:95:5F:BC:F3:E7:EE:3C:2E:DD:9F:A2:CF:91 X509v3 Authority Key Identifier: keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:6e:31:d5:7c:32:7c:03:51:75:51:f1:cb:43:43:4d:f0:b1: 30:23:3c:32:3c:cd:b1:b4:c5:10:fc:81:7f:e0:62:9f:95:61: 5c:b4:b8:35:62:e6:fc:73:bd:44:03:65:22:b6:dd:99:c8:6d: 1c:3f:be:eb:83:3d:85:07:62:b7:46:77:14:77:6a:ab:91:1d: 5c:cc:7e:22:e2:b5:49:da:5d:f4:e0:34:39:ed:64:b5:6d:ea: e8:b0:9b:18:1f:0b:6c:c2:c6:71:07:ab:29:c0:eb:f1:f3:ba: 2e:4e:80:7d:4f:98:92:16:b1:a2:a1:bb:b2:7a:99:ae:90:9a: 57:86:ac:43:75:d8:e6:ad:e1:fb:a2:69:47:2b:62:02:31:6f: b9:77:70:a5:7c:fd:d5:71:aa:a6:25:70:2b:c0:5f:d9:9d:9b: df:c4:9c:a6:9d:50:d0:99:a1:7f:a5:0e:77:e2:cc:69:1a:7d: 98:45:e7:23:ba:51:7a:2d:4e:30:e5:b6:92:06:fb:95:bd:15: 14:6e:3a:79:8f:ef:67:4a:4a:8b:ea:99:4b:5d:eb:ce:62:d4: 26:63:bb:be:f0:b7:2b:50:6f:de:eb:9f:28:47:b4:03:36:a3: 10:ca:51:04:55:0c:e3:71:d5:25:32:cf:5e:77:08:a5:19:1f: d8:91:58:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDg5QjExMC8GA1UEBRMoNDAzRjJFN0U0REFCMTNDNDE5QzY4NjkwQzk0OTk1NDdG MkM1OEZDNDAeFw0yNTA4MDkwODM2MjlaFw0yNTA4MTYwODM2MjlaMBgxFjAUBgNV BAMTDTY4OTcwODhkLTY5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBFwkX7ATO15EM63Buiy5eDU6EqGmMVNYet2OfL6AMhOLNMl7Fitxp2AeVW4UC H1a9uC5iaYJT3rVx8Uc0db3rjvJ1PfCRWTty3rRghtjhZdvNr0Ig2NyNPNzX9vOk jbsK6Ir0BoAsqoHGmJMcBJTc1TYZfzQehU72s7sdpztH9ejlPoFlvHEj308uyCDg zVZtep5V9FsqecYBeFCf9WkXhQhKH52GCIhPnkD6TsA96Bw4krAoA8YqyuNQ63yE i9Eh5JdR7a5HOVavMGjweY6T6ypzKhRUxFWSN1rIAR14dd1WLoe4THBHsJZA/8Y6 fFKKDTCSCN/jcUbI7E//vD0HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKMnWlNlN aZVfvPPn7jwu3Z+iz5EwHwYDVR0jBBgwFoAUQD8ufk2rE8QZxoaQyUmVR/LFj8Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwODlCLzU0NEMyMDUwNjE0 NjExRjBCNDg2NEU1QUM0RjlBRTAyL1FEOHVmazJyRThRWnhvYVF5VW1WUl9MRmo4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUQ4dWZrMnJFOFFaeG9hUXlVbVZSX0xGajhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw ODlCLzU0NEMyMDUwNjE0NjExRjBCNDg2NEU1QUM0RjlBRTAyL1FEOHVmazJyRThR WnhvYVF5VW1WUl9MRmo4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALVuMdV8MnwDUXVR8ctDQ03wsTAjPDI8zbG0xRD8gX/gYp+VYVy0uDVi 5vxzvUQDZSK23ZnIbRw/vuuDPYUHYrdGdxR3aquRHVzMfiLitUnaXfTgNDntZLVt 6uiwmxgfC2zCxnEHqynA6/Hzui5OgH1PmJIWsaKhu7J6ma6QmleGrEN12Oat4fui aUcrYgIxb7l3cKV8/dVxqqYlcCvAX9mdm9/EnKadUNCZoX+lDnfizGkafZhF5yO6 UXotTjDltpIG+5W9FRRuOnmP72dKSovqmUtd685i1CZju77wtytQb97rnyhHtAM2 oxDKUQRVDONx1SUyz153CKUZH9iRWN0= -----END CERTIFICATE-----Generated at Mon Aug 11 07:41:25 2025 by rpki-client