$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: s43AbhIF7b9k1xuHFw42i7yHAY8RB2sPOqYDeFbd3Dw= Subject key identifier: F9:39:8E:47:94:26:FC:B3:02:1F:F3:34:66:A3:3B:B9:CE:55:70:D9 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 05AB Signing time: Wed 06 Aug 2025 23:34:14 +0000 Manifest this update: Wed 06 Aug 2025 23:34:14 +0000 Manifest next update: Wed 13 Aug 2025 23:34:14 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: gs1omFFovXKVPSgXNpqtogwxDmKITyzc7F5Nl0jdMYw=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Aug 6 23:34:14 2025 GMT Not After : Aug 13 23:34:14 2025 GMT Subject: CN=6893e676-044e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:f9:b6:95:81:49:2c:6a:c4:65:9d:03:56: 54:fd:bf:3b:a9:a0:68:a8:dc:16:fc:be:e1:48:90: 71:ec:e7:09:62:a1:48:f4:0a:6b:3f:79:ea:d4:4a: 16:7c:10:b1:15:0b:95:57:2a:4b:bd:3f:36:bb:2b: 5b:fb:36:a5:aa:d8:c3:bb:86:9d:4b:0b:1d:b8:e5: 9b:67:26:d8:20:3d:d3:3f:86:a0:d0:a0:74:0a:62: 4c:8c:b3:35:00:3f:3f:f2:99:72:f6:1c:22:9e:e9: 98:16:9a:01:b0:da:d1:76:84:84:2c:30:c0:cb:48: f6:2c:fd:4c:a1:9c:79:d3:a9:8d:3b:4d:5d:3d:d4: 16:8c:7e:e0:e9:7b:1b:89:13:d5:57:07:40:a4:1f: a0:1c:dc:0a:5d:ae:43:b6:65:09:57:0e:8b:0f:46: a3:be:01:c0:ad:34:63:0f:61:3e:3e:62:27:69:c6: fb:4a:48:d1:9e:b6:34:fd:2d:1d:87:30:6f:fe:b0: fa:99:09:f4:ac:9e:df:33:02:be:e2:bf:3d:81:77: 5a:9d:df:9a:29:86:be:26:e6:8a:4c:60:bc:74:a6: aa:9a:71:88:42:55:86:18:c3:42:ae:87:66:3b:22: a7:fd:59:60:59:08:75:92:ff:87:cd:3f:df:03:c6: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:8E:47:94:26:FC:B3:02:1F:F3:34:66:A3:3B:B9:CE:55:70:D9 X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:4d:a4:b3:5d:c9:2e:07:bc:68:df:90:a2:f3:e7:9d:ce:c0: e7:30:a3:42:7c:e6:83:ba:95:a2:98:89:3c:d4:a6:be:2d:5a: 2a:d4:37:11:64:05:af:fd:ac:a8:27:ff:b1:79:a8:d1:0b:03: 9e:72:2b:be:36:e5:c5:a2:cc:8c:d6:67:21:65:ae:e7:fb:eb: e7:ff:a7:8c:23:f9:2b:e6:37:b9:36:b2:e5:47:41:47:71:1c: 71:b0:71:b3:36:ef:1c:0e:4f:bb:25:ed:82:7d:9e:20:c0:21: c8:f0:d4:16:cb:68:63:27:6f:60:ba:42:f8:5e:1d:1c:73:7a: 48:79:a3:b0:95:ac:04:a8:75:0f:1a:86:f0:5d:e5:97:df:5e: 19:24:29:49:67:86:13:d0:b9:44:f2:ff:ae:13:cb:f2:e5:ba: ca:68:2b:88:13:99:03:6f:8d:1b:c3:d2:30:21:54:34:cf:00: 1a:6d:8b:cc:d1:84:5d:54:e2:a7:d6:52:25:4a:bc:de:10:bf: 6a:08:0b:67:a6:b9:7b:60:78:0d:9a:fc:74:97:b3:e4:a6:bb: 37:4b:c5:f4:27:fd:23:2b:01:8d:84:10:ec:84:c5:eb:9f:3a: b3:0d:10:dc:32:96:eb:6d:e6:7a:70:02:67:73:b2:3f:ff:8b: f5:c2:e3:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjUwODA2MjMzNDE0WhcNMjUwODEzMjMzNDE0WjAYMRYwFAYD VQQDEw02ODkzZTY3Ni0wNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0P5tpWBSSxqxGWdA1ZU/b87qaBoqNwW/L7hSJBx7OcJYqFI9AprP3nq1EoW fBCxFQuVVypLvT82uytb+zalqtjDu4adSwsduOWbZybYID3TP4ag0KB0CmJMjLM1 AD8/8ply9hwinumYFpoBsNrRdoSELDDAy0j2LP1MoZx506mNO01dPdQWjH7g6Xsb iRPVVwdApB+gHNwKXa5DtmUJVw6LD0ajvgHArTRjD2E+PmInacb7SkjRnrY0/S0d hzBv/rD6mQn0rJ7fMwK+4r89gXdand+aKYa+JuaKTGC8dKaqmnGIQlWGGMNCrodm OyKn/VlgWQh1kv+HzT/fA8a85QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk5jkeU JvyzAh/zNGajO7nOVXDZMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+TaSzXckuB7xo35Ci8+edzsDnMKNCfOaDupWimIk81Ka+LVoq1DcR ZAWv/ayoJ/+xeajRCwOeciu+NuXFosyM1mchZa7n++vn/6eMI/kr5je5NrLlR0FH cRxxsHGzNu8cDk+7Je2CfZ4gwCHI8NQWy2hjJ29gukL4Xh0cc3pIeaOwlawEqHUP GobwXeWX314ZJClJZ4YT0LlE8v+uE8vy5brKaCuIE5kDb40bw9IwIVQ0zwAabYvM 0YRdVOKn1lIlSrzeEL9qCAtnprl7YHgNmvx0l7Pkprs3S8X0J/0jKwGNhBDshMXr nzqzDRDcMpbrbeZ6cAJnc7I//4v1wuMu -----END CERTIFICATE-----Generated at Fri Aug 8 00:01:00 2025 by rpki-client