$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: ZL0yXTmuGdq9CH8Ff300hVhJKml+Zgy8m4XfjgX6lPA= Subject key identifier: 8F:C2:48:58:39:42:9F:AC:B4:B8:20:1B:30:8E:95:17:F0:4F:04:B1 Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0AE8 Signing time: Fri 08 Aug 2025 19:45:08 +0000 Manifest this update: Fri 08 Aug 2025 19:45:07 +0000 Manifest next update: Fri 15 Aug 2025 19:45:07 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: glBXQ0HnjV+5ZlDcLO1hsxsIclMgeWShmxLDyaK9OlE=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: XMZdqD9gB3JqFRbYSCLRYPYkSAmXVoSI5VBqXbHS+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: Aug 8 19:45:07 2025 GMT Not After : Aug 15 19:45:07 2025 GMT Subject: CN=689653c3-a7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c2:46:bf:70:ae:be:65:6d:ce:39:60:f0:73: 18:82:b1:d2:f2:13:93:72:03:7c:8d:36:b0:04:98: a5:32:fd:4b:f9:21:2f:8f:84:32:52:ab:6d:3e:57: 3a:fb:91:e3:66:3d:df:5f:f2:7f:ac:9c:12:ab:73: 7f:4e:38:df:a9:11:d6:b9:ff:1f:b8:42:4f:03:49: 79:72:d4:78:19:99:b0:46:12:5b:38:2c:98:0f:4d: c4:af:9f:a5:75:88:75:3e:c2:4c:51:dd:3b:e7:58: f3:05:84:02:37:99:27:38:b4:0a:27:36:ec:df:3c: 1f:b9:cd:42:de:83:dc:a4:07:fd:ee:ff:a5:f4:4c: f7:ea:83:59:2d:05:f5:0b:4b:57:05:73:f2:12:22: cb:b3:6d:5d:27:f8:5f:e5:f5:fd:d9:f0:f9:5c:de: d2:68:a6:1c:f0:50:8c:91:92:98:00:ce:66:7b:1c: 7b:46:69:d4:c0:75:01:74:f4:95:79:33:c8:d1:4c: 34:75:f3:0e:47:d5:61:1d:7f:f6:5c:b8:b6:38:13: ab:95:35:e0:d7:e3:e8:11:c4:1c:ee:18:0c:58:7c: 44:54:ff:b5:26:65:42:10:25:88:b7:94:91:6e:49: 35:82:0a:4f:55:b5:1c:55:6c:84:6b:2b:31:85:7f: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C2:48:58:39:42:9F:AC:B4:B8:20:1B:30:8E:95:17:F0:4F:04:B1 X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:c6:3f:14:d1:02:fc:3c:10:e7:dd:5d:f5:14:25:88:f7: 73:c5:97:65:a2:c6:e0:dc:38:55:ae:85:48:0a:5f:6f:51:93: 45:1c:74:04:6f:5c:e4:b1:c4:97:0c:e3:09:9c:d3:f8:d1:e9: 67:7a:ee:b5:5c:25:71:d3:05:f2:84:0a:08:fb:85:e9:18:d4: ed:34:85:80:be:14:2a:f8:98:95:aa:4a:97:65:4a:9a:53:5b: dd:c4:3a:0a:51:b1:b9:cd:54:bb:17:34:93:74:4b:45:8f:8e: 88:44:5c:d1:84:f7:de:a1:7e:67:78:a4:9b:41:d4:d6:b7:0a: 86:c1:a0:7c:06:bf:3d:4a:01:c9:38:79:59:f8:2a:d7:58:3f: 16:a6:83:a6:30:6c:8d:68:ee:18:ef:d5:fd:1e:cb:7f:bd:f2: e2:26:ce:29:b0:ca:ce:8d:82:1c:76:cb:50:f4:49:5c:dc:87: cc:9c:bf:ae:f0:81:d4:b4:12:e8:bd:44:71:d2:ce:77:02:8b: f1:72:93:ed:af:43:3a:41:c7:dd:cb:68:cb:37:83:f1:d1:d8: 74:55:14:e3:6d:fd:21:15:8c:d2:e5:82:f6:28:af:ab:65:2a: 72:f7:a9:03:17:9b:51:4e:2b:2d:4f:96:3a:8c:cb:f9:e9:9e: bf:a4:62:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjUwODA4MTk0NTA3WhcNMjUwODE1MTk0NTA3WjAYMRYwFAYD VQQDEw02ODk2NTNjMy1hN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MJGv3CuvmVtzjlg8HMYgrHS8hOTcgN8jTawBJilMv1L+SEvj4QyUqttPlc6 +5HjZj3fX/J/rJwSq3N/TjjfqRHWuf8fuEJPA0l5ctR4GZmwRhJbOCyYD03Er5+l dYh1PsJMUd0751jzBYQCN5knOLQKJzbs3zwfuc1C3oPcpAf97v+l9Ez36oNZLQX1 C0tXBXPyEiLLs21dJ/hf5fX92fD5XN7SaKYc8FCMkZKYAM5mexx7RmnUwHUBdPSV eTPI0Uw0dfMOR9VhHX/2XLi2OBOrlTXg1+PoEcQc7hgMWHxEVP+1JmVCECWIt5SR bkk1ggpPVbUcVWyEaysxhX9xMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/CSFg5 Qp+stLggGzCOlRfwTwSxMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkf8Y/FNEC/DwQ591d9RQliPdzxZdlosbg3DhVroVICl9vUZNFHHQE b1zkscSXDOMJnNP40elneu61XCVx0wXyhAoI+4XpGNTtNIWAvhQq+JiVqkqXZUqa U1vdxDoKUbG5zVS7FzSTdEtFj46IRFzRhPfeoX5neKSbQdTWtwqGwaB8Br89SgHJ OHlZ+CrXWD8WpoOmMGyNaO4Y79X9Hst/vfLiJs4psMrOjYIcdstQ9Elc3IfMnL+u 8IHUtBLovURx0s53AovxcpPtr0M6Qcfdy2jLN4Px0dh0VRTjbf0hFYzS5YL2KK+r ZSpy96kDF5tRTistT5Y6jMv56Z6/pGL3 -----END CERTIFICATE-----Generated at Sat Aug 9 02:54:08 2025 by rpki-client