$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: F38yT8ehoMt7qhzUkBKFL2F+kmq7UgeWdlIVJ1Dch9Q= Subject key identifier: F5:26:57:C6:B2:C8:29:59:64:8C:4A:3E:08:23:0C:6E:1E:94:F8:4F Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11B9 Signing time: Wed 06 Aug 2025 17:18:30 +0000 Manifest this update: Wed 06 Aug 2025 17:18:30 +0000 Manifest next update: Wed 13 Aug 2025 17:18:30 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: MbNhiBu8O9RdwZ9TCIw31CzEdCZhurrL0NLojkbzaC8=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4544 (0x11c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Aug 6 17:18:30 2025 GMT Not After : Aug 13 17:18:30 2025 GMT Subject: CN=68938e66-4d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:c6:a5:8e:f8:71:4e:50:1b:6a:1e:14:8c: 3f:1c:5a:49:51:07:6a:17:91:ce:75:65:cf:1a:e7: 6d:cb:16:23:a9:e4:5a:c1:b6:20:07:14:4d:8e:97: 69:fd:29:3a:d7:72:33:7f:f2:b2:ca:88:c3:af:05: ec:0b:e5:84:8e:24:8a:f4:63:cc:f6:46:b3:c7:15: f1:83:6a:99:17:57:e2:73:1a:67:72:7f:82:66:24: ab:af:e7:51:8d:75:79:46:09:47:8a:5b:07:66:d2: 0b:c6:7f:e1:9b:b8:51:53:c5:90:30:1e:4b:09:fa: 14:84:34:97:bd:83:26:8b:04:be:1d:ac:54:3d:c4: 19:35:7b:de:16:88:83:be:68:39:e7:22:65:e9:42: c7:0b:37:9d:2e:5e:bc:8d:f6:9c:86:0f:67:a5:5b: cb:39:3a:d7:70:48:c4:82:78:4f:84:61:dd:50:ca: 08:f6:11:74:27:3b:fa:ee:8b:3c:65:b6:aa:35:bd: 0e:e8:93:6d:44:fd:e9:37:80:0e:51:c8:16:a8:ee: f1:0f:ab:42:49:81:fc:0f:58:b6:c8:32:82:0d:12: 8b:93:1b:a3:64:97:fc:81:c1:14:c2:a0:ec:46:a1: 46:6f:e5:cb:cf:3c:1d:a0:cf:71:0f:86:2e:77:f5: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:57:C6:B2:C8:29:59:64:8C:4A:3E:08:23:0C:6E:1E:94:F8:4F X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6f:a5:8a:11:71:aa:a9:27:b7:b5:70:b6:b9:16:f1:28:cb: 60:ba:6d:31:88:41:d7:4b:c2:dd:44:34:07:08:f2:3f:36:b9: 7c:10:76:5f:a4:d3:c1:d7:ff:9b:c9:58:03:cd:23:c6:83:77: 00:79:7c:75:b2:b2:6e:77:ab:ec:9f:26:cd:12:d2:a6:96:dc: f4:f4:5d:dd:86:bc:c7:20:16:b0:4b:95:cc:59:48:5f:d8:3d: 4d:19:28:f9:57:dd:a1:1a:35:0c:1a:d3:c6:d7:f6:16:02:c0: 3c:a2:48:6a:19:ba:8b:da:18:b5:05:c2:d0:ed:99:f3:cf:f0: 1c:9f:88:39:9b:9f:77:83:6b:97:12:15:e0:08:d9:9b:b1:1b: 90:65:a2:88:76:ec:1a:47:e4:db:9e:64:38:46:fe:4e:9e:06: 72:e1:fd:29:09:dc:92:98:6e:e9:f0:01:19:f6:61:02:bb:2e: e4:2b:44:23:6b:a2:49:21:5b:a9:e7:a8:84:78:3e:00:7a:ca: 59:e5:f5:8a:ab:9d:3d:fa:68:4b:e5:65:eb:2b:2d:e6:56:7f: a5:64:bd:5d:62:92:0a:91:75:c7:1d:69:f7:17:0e:f9:92:e2: 3a:12:cf:93:16:f8:5b:53:fb:df:c8:07:50:c9:8f:e7:6b:99: a6:a6:ed:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwODA2MTcxODMwWhcNMjUwODEzMTcxODMwWjAYMRYwFAYD VQQDEw02ODkzOGU2Ni00ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz/GpY74cU5QG2oeFIw/HFpJUQdqF5HOdWXPGudtyxYjqeRawbYgBxRNjpdp /Sk613Izf/KyyojDrwXsC+WEjiSK9GPM9kazxxXxg2qZF1ficxpncn+CZiSrr+dR jXV5RglHilsHZtILxn/hm7hRU8WQMB5LCfoUhDSXvYMmiwS+HaxUPcQZNXveFoiD vmg55yJl6ULHCzedLl68jfachg9npVvLOTrXcEjEgnhPhGHdUMoI9hF0Jzv67os8 ZbaqNb0O6JNtRP3pN4AOUcgWqO7xD6tCSYH8D1i2yDKCDRKLkxujZJf8gcEUwqDs RqFGb+XLzzwdoM9xD4Yud/UK/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUmV8ay yClZZIxKPggjDG4elPhPMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAub6WKEXGqqSe3tXC2uRbxKMtgum0xiEHXS8LdRDQHCPI/Nrl8EHZf pNPB1/+byVgDzSPGg3cAeXx1srJud6vsnybNEtKmltz09F3dhrzHIBawS5XMWUhf 2D1NGSj5V92hGjUMGtPG1/YWAsA8okhqGbqL2hi1BcLQ7Znzz/Acn4g5m593g2uX EhXgCNmbsRuQZaKIduwaR+TbnmQ4Rv5OngZy4f0pCdySmG7p8AEZ9mECuy7kK0Qj a6JJIVup56iEeD4AespZ5fWKq509+mhL5WXrKy3mVn+lZL1dYpIKkXXHHWn3Fw75 kuI6Es+TFvhbU/vfyAdQyY/na5mmpu11 -----END CERTIFICATE-----Generated at Fri Aug 8 00:48:32 2025 by rpki-client