$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: 7OUeHYHheWvbzq4xOWLtyR8/dMT6UA0kohFArErfhX0= Subject key identifier: 94:31:7A:46:E3:80:EB:B8:E5:44:00:0F:23:94:45:A7:C4:69:97:F7 Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: AA Signing time: Sat 09 Aug 2025 06:37:00 +0000 Manifest this update: Sat 09 Aug 2025 06:37:00 +0000 Manifest next update: Sat 16 Aug 2025 06:37:00 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: Wv3R/26dCZvFxsUyyrNfmh3ifSGt8Ux9X0omXMPaAeo=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Aug 9 06:37:00 2025 GMT Not After : Aug 16 06:37:00 2025 GMT Subject: CN=6896ec8c-4400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:43:0f:fd:79:96:77:ee:39:f5:25:21:8d: fb:8b:b9:b8:9a:2c:d5:a4:7c:06:5a:82:95:f5:1d: 75:19:ea:b3:45:00:ec:55:ad:9f:e5:26:fb:9f:3f: cb:c4:b7:50:84:45:0f:80:29:c9:33:9a:2c:28:7a: 9a:e2:5e:08:ce:44:a9:04:37:65:52:47:28:16:8a: fe:6b:a8:b5:08:21:aa:ca:b2:1a:42:29:85:98:e2: d4:ba:9b:0f:56:d5:99:b8:74:82:ee:43:61:fb:d2: da:98:b2:37:2a:bd:11:2d:a0:06:3a:6d:c9:db:e4: 7e:7a:a2:b7:df:c2:2e:74:16:8a:76:45:9d:3b:6a: de:73:78:d5:90:fc:27:35:1c:61:8b:6d:ac:f6:ef: a8:17:9b:52:75:35:65:5c:d6:70:c3:52:91:57:a3: 2c:1b:89:14:fb:be:eb:64:f4:6b:9f:f9:6a:b3:8e: 90:19:39:46:2f:1e:61:5a:ec:f9:0a:bc:7b:92:d2: c0:37:4c:00:9d:ef:79:ce:48:59:2a:ed:20:3f:8e: cd:94:9f:90:da:17:22:81:8d:0d:e8:8d:fc:60:16: 6a:5e:62:d4:c9:9e:a6:40:71:cf:2c:68:e1:d2:a9: af:cb:4d:7a:26:77:88:87:b0:85:8f:01:c4:58:db: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:31:7A:46:E3:80:EB:B8:E5:44:00:0F:23:94:45:A7:C4:69:97:F7 X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a6:8e:68:0a:0a:44:98:55:64:57:74:92:8c:65:ad:c4:c7: 25:70:38:e8:d5:75:84:60:54:51:ea:e8:8c:79:23:f9:8e:23: 92:1c:e1:25:40:78:86:3b:a1:1b:e4:4e:f2:a9:15:ed:b4:8a: f3:45:53:d0:25:8b:b9:82:45:4d:c2:ff:f5:ce:1a:43:9a:0b: e7:41:03:fc:19:12:9d:d4:1c:55:c9:30:94:f2:e1:c1:b6:0d: 14:5a:37:ba:01:38:ef:17:5a:ae:7e:30:f7:a4:0c:ed:59:f2: a5:a7:bb:4b:56:84:aa:3f:d8:7f:f4:81:0d:c9:5e:53:41:7c: 53:d0:42:d6:b9:01:e1:9c:7b:32:2d:9f:cf:72:89:57:c8:5c: e3:b9:fb:fe:68:d4:d5:2a:3d:90:79:a3:cc:be:0d:a3:c5:fb: da:d7:eb:9c:32:00:6d:a7:10:dd:77:98:84:32:21:f4:64:05: 40:5b:6c:65:81:3e:a1:d6:89:c0:ea:cf:13:c9:bb:f1:79:68: a7:2d:d6:23:89:77:71:40:00:28:17:ab:61:58:db:0d:0e:38: 65:17:c4:c3:64:13:8a:22:29:8f:67:45:8b:75:68:cb:d0:fa: b1:83:9b:9a:a5:63:ae:aa:a7:e9:0c:80:18:8f:0e:ce:c3:1e: 78:e1:ec:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUwODA5MDYzNzAwWhcNMjUwODE2MDYzNzAwWjAYMRYwFAYD VQQDEw02ODk2ZWM4Yy00NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6olDD/15lnfuOfUlIY37i7m4mizVpHwGWoKV9R11GeqzRQDsVa2f5Sb7nz/L xLdQhEUPgCnJM5osKHqa4l4IzkSpBDdlUkcoFor+a6i1CCGqyrIaQimFmOLUupsP VtWZuHSC7kNh+9LamLI3Kr0RLaAGOm3J2+R+eqK338IudBaKdkWdO2rec3jVkPwn NRxhi22s9u+oF5tSdTVlXNZww1KRV6MsG4kU+77rZPRrn/lqs46QGTlGLx5hWuz5 Crx7ktLAN0wAne95zkhZKu0gP47NlJ+Q2hcigY0N6I38YBZqXmLUyZ6mQHHPLGjh 0qmvy016JneIh7CFjwHEWNtQiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQxekbj gOu45UQADyOURafEaZf3MB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARpo5oCgpEmFVkV3SSjGWtxMclcDjo1XWEYFRR6uiMeSP5jiOSHOEl QHiGO6Eb5E7yqRXttIrzRVPQJYu5gkVNwv/1zhpDmgvnQQP8GRKd1BxVyTCU8uHB tg0UWje6ATjvF1qufjD3pAztWfKlp7tLVoSqP9h/9IENyV5TQXxT0ELWuQHhnHsy LZ/PcolXyFzjufv+aNTVKj2QeaPMvg2jxfva1+ucMgBtpxDdd5iEMiH0ZAVAW2xl gT6h1onA6s8TybvxeWinLdYjiXdxQAAoF6thWNsNDjhlF8TDZBOKIimPZ0WLdWjL 0Pqxg5uapWOuqqfpDIAYjw7Owx544ex1 -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:37 2025 by rpki-client