$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: cSkAD3w3U8hu0z7j6sg1qRIZ2Einbd8Awa8k56jOKKg= Subject key identifier: 9F:61:BD:63:05:01:F1:D5:78:04:4A:C9:12:65:A3:B5:8E:D1:DD:BC Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 04A0 Signing time: Sat 09 Aug 2025 00:29:35 +0000 Manifest this update: Sat 09 Aug 2025 00:29:35 +0000 Manifest next update: Sat 16 Aug 2025 00:29:35 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: 8AZHNwzoFOuBEjPpsVxlGE4008HrRNRKINEsdqzqgAo=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: Aug 9 00:29:35 2025 GMT Not After : Aug 16 00:29:35 2025 GMT Subject: CN=6896966f-be53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:1b:c7:0e:2f:20:45:2e:6b:91:08:8d:ff: 8a:58:c3:81:6c:b8:89:0c:05:e5:c8:71:e2:b0:b1: 25:ea:3d:95:5a:ec:9d:a3:fd:d7:b9:2c:81:65:21: 40:98:44:26:66:26:44:bd:f1:95:df:af:33:ad:ba: e4:01:b0:aa:ab:a0:28:8d:c0:6b:c2:31:ce:e3:88: 1d:72:f4:48:e0:aa:9a:8b:9d:be:18:b5:9a:ef:e4: 4a:c9:29:cd:26:6e:d1:32:04:8d:c6:b3:ab:9e:64: 9a:1e:ac:84:2b:5c:b4:52:b6:bc:d1:aa:e2:9e:10: 32:c9:f9:42:d5:0d:00:4d:8c:a0:eb:4c:9b:da:91: 42:ba:96:ab:7f:0c:16:c2:9e:64:d1:e1:a8:e0:b4: 68:2d:ce:d9:cb:35:96:59:70:89:90:aa:29:87:7b: 65:28:bc:3c:4b:76:e9:5a:9a:3e:4e:7a:07:16:ae: 86:88:d7:da:26:c4:53:6f:4e:81:79:71:de:0e:56: d6:82:ab:1a:72:d0:46:9c:cc:b8:2a:8c:e3:9a:27: cb:91:5e:70:cb:da:24:d7:c3:fe:b5:bf:05:57:68: ca:b3:f2:ac:32:55:5c:58:6c:99:78:2a:fe:1d:7e: 4f:b0:50:55:b7:1f:fb:d5:6a:ec:57:0c:ea:47:b3: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:61:BD:63:05:01:F1:D5:78:04:4A:C9:12:65:A3:B5:8E:D1:DD:BC X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:cb:2a:96:4e:32:29:ac:50:79:63:73:73:9e:0c:d8:6f:8c: 06:6b:d8:67:2d:9d:25:56:37:3b:51:94:f0:57:cd:75:8d:dc: 6a:7d:91:be:a2:1d:f4:d1:8a:6a:90:39:21:0c:8b:5c:91:4a: 25:88:57:58:f5:59:04:05:0d:6e:53:5c:53:3c:94:1c:e0:5b: f6:9e:f2:bd:d7:6c:99:6d:0e:b1:f9:79:e4:e5:a6:31:db:59: 13:d7:13:fc:9c:59:24:30:7f:72:10:05:45:9f:f5:22:1e:f2: a4:e2:f0:27:dd:0d:f0:19:ba:39:c6:ba:4b:bb:e5:0e:0b:52: ac:5e:a9:ac:7e:37:e6:db:af:ed:63:b8:98:42:5b:71:90:1c: bc:15:fe:4d:73:76:a4:a2:93:6f:53:a1:26:7f:a4:0f:ea:5c: 91:61:40:b7:c3:96:c3:13:0e:9c:d8:c1:d7:fe:f1:13:08:a4: 5c:c1:2a:01:8c:bc:63:ec:d4:de:24:ca:fe:7f:46:c9:f6:86: b5:ce:32:5f:a0:e9:34:57:42:8d:40:dc:f5:4e:ef:73:d1:da: 15:87:0b:84:db:26:5c:fd:f8:47:56:45:1e:78:3a:8e:a4:c5: 02:22:83:a5:e8:24:bc:a8:d1:2f:e2:71:da:be:2a:f0:5c:06: 2c:c3:83:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUwODA5MDAyOTM1WhcNMjUwODE2MDAyOTM1WjAYMRYwFAYD VQQDEw02ODk2OTY2Zi1iZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d8bxw4vIEUua5EIjf+KWMOBbLiJDAXlyHHisLEl6j2VWuydo/3XuSyBZSFA mEQmZiZEvfGV368zrbrkAbCqq6AojcBrwjHO44gdcvRI4Kqai52+GLWa7+RKySnN Jm7RMgSNxrOrnmSaHqyEK1y0Ura80arinhAyyflC1Q0ATYyg60yb2pFCuparfwwW wp5k0eGo4LRoLc7ZyzWWWXCJkKoph3tlKLw8S3bpWpo+TnoHFq6GiNfaJsRTb06B eXHeDlbWgqsactBGnMy4KozjmifLkV5wy9ok18P+tb8FV2jKs/KsMlVcWGyZeCr+ HX5PsFBVtx/71WrsVwzqR7P4JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9hvWMF AfHVeARKyRJlo7WO0d28MB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhyyqWTjIprFB5Y3NzngzYb4wGa9hnLZ0lVjc7UZTwV811jdxqfZG+ oh300YpqkDkhDItckUoliFdY9VkEBQ1uU1xTPJQc4Fv2nvK912yZbQ6x+Xnk5aYx 21kT1xP8nFkkMH9yEAVFn/UiHvKk4vAn3Q3wGbo5xrpLu+UOC1KsXqmsfjfm26/t Y7iYQltxkBy8Ff5Nc3akopNvU6Emf6QP6lyRYUC3w5bDEw6c2MHX/vETCKRcwSoB jLxj7NTeJMr+f0bJ9oa1zjJfoOk0V0KNQNz1Tu9z0doVhwuE2yZc/fhHVkUeeDqO pMUCIoOl6CS8qNEv4nHavirwXAYsw4P3 -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:14 2025 by rpki-client