$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: NjwZOxA7FRbnqJY9VOu2G+jhPT0L17Nzz9lZ4ua+EWY= Subject key identifier: 81:33:54:83:28:BC:67:B6:2C:97:6F:55:C2:FF:F6:FD:2A:E2:EA:F8 Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 05DE Signing time: Sun 10 Aug 2025 23:06:37 +0000 Manifest this update: Sun 10 Aug 2025 23:06:37 +0000 Manifest next update: Sun 17 Aug 2025 23:06:37 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: Jpq98DkkrlZnlbwSv0F15pq5EaLOqSfYbElYAHujwLw=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: +2Hbaxr801NyDnPE1ldFyqXo4OeCNMmMLf3UKaT2zEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Aug 10 23:06:37 2025 GMT Not After : Aug 17 23:06:37 2025 GMT Subject: CN=689925fd-bbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:95:1b:b6:43:a2:44:cd:5d:2f:f2:aa:a7: 62:c0:ca:97:18:53:98:02:0a:3a:3c:ed:b7:d0:dc: 69:6c:4d:fa:b9:d6:3a:4c:4c:4a:88:f2:c4:42:78: 00:1a:39:9b:c3:11:4f:d8:ca:a3:75:5b:b4:61:c9: 0c:4c:06:c1:2b:76:cb:70:1c:0e:37:48:19:ea:a0: 4e:d9:12:c4:f8:7c:a7:c2:30:91:d5:88:ad:21:02: 72:12:85:7f:77:9f:09:77:07:a9:60:da:4f:32:50: 21:90:33:6c:49:e7:f9:2d:7e:b2:8d:25:dc:26:c8: b1:5f:22:32:b9:f3:cb:cc:f6:b4:a7:d7:53:26:e4: 47:8d:10:6e:70:78:b6:b9:80:4c:e0:ed:4a:bb:d9: c8:f4:5c:bc:dc:02:67:67:64:6c:fe:d6:cb:8f:cb: f6:35:4e:1a:bc:df:30:51:72:7a:46:39:15:79:2a: 82:26:ce:d1:ad:12:d6:1c:d7:e7:48:f8:64:22:88: bd:69:ef:10:4f:33:27:bf:8a:3a:c5:91:37:ca:44: ca:e6:04:0a:5b:9e:76:91:9d:64:fa:b7:4f:89:36: f8:0a:21:f9:20:6d:06:df:d0:62:39:48:ea:73:5f: 24:46:9d:5e:91:13:a1:dd:a2:4e:34:c3:a5:9b:63: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:33:54:83:28:BC:67:B6:2C:97:6F:55:C2:FF:F6:FD:2A:E2:EA:F8 X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:25:ad:57:3e:79:5c:83:97:ff:86:28:cf:d3:98:7b:1e:d6: be:87:5d:28:56:78:44:01:37:e9:5d:5c:f4:a1:b9:b5:f5:f5: df:12:b5:d0:8b:0a:a9:b2:10:97:14:8b:ed:2f:42:53:f3:13: 32:ca:f4:d8:3c:92:2c:65:7d:ef:90:12:e6:10:d1:2a:86:5f: 11:11:44:d5:0b:c0:df:b2:a8:52:11:fc:22:f2:74:38:33:dc: 5f:95:2b:68:44:c1:6e:58:5d:74:c1:b6:83:1c:27:15:57:04: 15:9b:1a:bc:d8:e0:88:c9:f4:e6:0a:79:ca:0a:f2:76:51:6d: f8:33:f8:a5:ef:2b:3e:7d:dd:d1:91:5a:3f:04:2d:6c:87:00: a9:a6:1b:17:61:5b:18:7c:0d:0b:c8:3f:0b:54:5e:60:9c:3a: 4f:3d:5f:b1:fa:7a:09:1d:32:44:9c:8f:06:91:93:af:be:bd: 6a:9f:49:36:6e:b4:a5:bb:da:69:d9:47:26:78:90:35:c1:57: f0:02:9b:f6:75:79:f4:b0:fa:31:bc:d2:65:dd:c1:8e:e6:03: a2:dd:b6:92:61:31:e2:2f:56:ce:17:f0:35:94:c9:83:bf:74: 0f:74:a3:4a:db:8c:0c:d5:a0:b3:66:78:6a:9c:9c:12:27:d1: 6e:d0:4d:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUwODEwMjMwNjM3WhcNMjUwODE3MjMwNjM3WjAYMRYwFAYD VQQDEw02ODk5MjVmZC1iYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl2VG7ZDokTNXS/yqqdiwMqXGFOYAgo6PO230NxpbE36udY6TExKiPLEQngA GjmbwxFP2MqjdVu0YckMTAbBK3bLcBwON0gZ6qBO2RLE+HynwjCR1YitIQJyEoV/ d58JdwepYNpPMlAhkDNsSef5LX6yjSXcJsixXyIyufPLzPa0p9dTJuRHjRBucHi2 uYBM4O1Ku9nI9Fy83AJnZ2Rs/tbLj8v2NU4avN8wUXJ6RjkVeSqCJs7RrRLWHNfn SPhkIoi9ae8QTzMnv4o6xZE3ykTK5gQKW552kZ1k+rdPiTb4CiH5IG0G39BiOUjq c18kRp1ekROh3aJONMOlm2PtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEzVIMo vGe2LJdvVcL/9v0q4ur4MB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJa1XPnlcg5f/hijP05h7Hta+h10oVnhEATfpXVz0obm19fXfErXQ iwqpshCXFIvtL0JT8xMyyvTYPJIsZX3vkBLmENEqhl8REUTVC8DfsqhSEfwi8nQ4 M9xflStoRMFuWF10wbaDHCcVVwQVmxq82OCIyfTmCnnKCvJ2UW34M/il7ys+fd3R kVo/BC1shwCpphsXYVsYfA0LyD8LVF5gnDpPPV+x+noJHTJEnI8GkZOvvr1qn0k2 brSlu9pp2UcmeJA1wVfwApv2dXn0sPoxvNJl3cGO5gOi3baSYTHiL1bOF/A1lMmD v3QPdKNK24wM1aCzZnhqnJwSJ9Fu0E1y -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:52 2025 by rpki-client