$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: mFKGxi7MrPpCiDDKeiR6P8IbQZGKoVloTR+gNcvkVeo= Subject key identifier: C4:F5:C5:62:2A:EF:7B:61:6F:9A:A9:78:26:22:7A:F2:11:D0:AA:1D Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: F3 Signing time: Thu 07 Aug 2025 05:47:16 +0000 Manifest this update: Thu 07 Aug 2025 05:47:15 +0000 Manifest next update: Thu 14 Aug 2025 05:47:15 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: cQBBL2bPTCE/4qH3F08hdU0WelXrYIqxxYpvwOvlCdk=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: OrAHJTjZ/RqHAwIjIMccBjE+JqFUpBNrVGrdl3fQy10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Aug 7 05:47:15 2025 GMT Not After : Aug 14 05:47:15 2025 GMT Subject: CN=68943de3-4b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:c7:4c:33:85:76:f4:14:58:b1:45:52:92: ce:eb:7b:ee:06:99:3d:9b:50:1e:c0:65:c0:06:2a: f0:9f:b3:d0:42:bf:18:13:3b:6a:a3:54:a9:f1:2d: f2:0d:26:a2:68:fa:2d:7a:82:94:04:34:a5:6c:12: 0d:cc:07:e6:1b:3c:fb:f4:e0:24:49:d0:67:7d:df: 29:43:88:3d:ff:33:ea:ef:f4:88:46:bf:26:bc:72: 1c:0b:52:d8:32:7c:a1:b6:1e:b1:a4:ed:b8:f4:35: d0:14:95:5e:d0:e3:55:f6:84:a6:0c:03:7f:9e:fb: 11:1b:74:05:d5:0f:72:15:97:54:f9:5d:77:9f:06: a1:ed:8b:da:88:66:43:f6:e4:ff:42:ec:c3:4a:bc: 8f:65:14:dd:0a:c9:50:fc:75:d5:25:90:c3:1b:28: 35:9d:96:94:01:54:8a:23:dd:7a:e1:1f:27:6e:4a: 18:7b:26:81:ec:be:8c:47:9a:76:df:38:00:8d:c8: 28:24:d1:47:58:84:ed:f7:2d:d7:41:66:12:14:0c: b1:8d:56:2d:4d:49:bb:1d:d9:bb:5a:68:e3:e2:31: d9:31:01:72:cf:26:f6:35:90:02:93:ca:ad:20:8b: 68:75:69:ca:2f:a1:72:02:76:32:09:19:90:bc:9c: ce:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F5:C5:62:2A:EF:7B:61:6F:9A:A9:78:26:22:7A:F2:11:D0:AA:1D X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e7:ab:fa:8a:5a:24:82:06:8c:b6:0e:3d:e9:f8:12:33:40: f2:bc:ef:fc:5d:77:8e:63:33:71:3e:a7:47:b9:7c:53:04:20: 2d:46:2e:66:8c:f7:f1:bf:23:e7:21:6f:8b:17:a2:47:0a:9b: 2e:23:44:69:37:7b:be:e0:74:e5:d4:ab:13:46:c4:5c:88:eb: 77:77:d3:8c:79:3f:3d:63:0e:fa:b7:58:93:39:5d:70:c1:ba: d0:23:af:6e:1b:31:0d:85:a0:5d:d8:42:58:82:f8:44:78:be: d8:4a:c4:94:7d:79:50:a2:96:98:83:e7:d0:a7:fc:83:75:8d: 31:47:af:01:83:d7:1c:52:5f:84:bd:6b:44:2b:a6:4b:bf:c5: bc:8c:fd:16:33:ac:8d:66:14:41:91:be:e0:64:14:de:b0:5e: 2d:3b:71:0e:55:be:4c:97:b2:90:93:ae:dd:aa:03:ae:11:e4: dc:9f:ce:f0:0b:a0:75:05:55:f2:d9:5d:b0:2f:f9:68:b7:3b: e8:81:d2:20:28:e0:76:1f:80:9d:1f:d1:44:58:0f:62:66:42: fc:3e:7e:93:36:73:8f:05:5e:c5:61:5b:82:ad:96:7d:1f:ad: 81:1f:c9:cb:4c:44:62:09:70:23:38:d2:0d:43:42:4f:e4:48: 54:db:89:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUwODA3MDU0NzE1WhcNMjUwODE0MDU0NzE1WjAYMRYwFAYD VQQDEw02ODk0M2RlMy00YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gPHTDOFdvQUWLFFUpLO63vuBpk9m1AewGXABirwn7PQQr8YEztqo1Sp8S3y DSaiaPoteoKUBDSlbBINzAfmGzz79OAkSdBnfd8pQ4g9/zPq7/SIRr8mvHIcC1LY Mnyhth6xpO249DXQFJVe0ONV9oSmDAN/nvsRG3QF1Q9yFZdU+V13nwah7YvaiGZD 9uT/QuzDSryPZRTdCslQ/HXVJZDDGyg1nZaUAVSKI9164R8nbkoYeyaB7L6MR5p2 3zgAjcgoJNFHWITt9y3XQWYSFAyxjVYtTUm7Hdm7Wmjj4jHZMQFyzyb2NZACk8qt IItodWnKL6FyAnYyCRmQvJzOBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT1xWIq 73thb5qpeCYievIR0KodMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa56v6ilokggaMtg496fgSM0DyvO/8XXeOYzNxPqdHuXxTBCAtRi5m jPfxvyPnIW+LF6JHCpsuI0RpN3u+4HTl1KsTRsRciOt3d9OMeT89Yw76t1iTOV1w wbrQI69uGzENhaBd2EJYgvhEeL7YSsSUfXlQopaYg+fQp/yDdY0xR68Bg9ccUl+E vWtEK6ZLv8W8jP0WM6yNZhRBkb7gZBTesF4tO3EOVb5Ml7KQk67dqgOuEeTcn87w C6B1BVXy2V2wL/lotzvogdIgKOB2H4CdH9FEWA9iZkL8Pn6TNnOPBV7FYVuCrZZ9 H62BH8nLTERiCXAjONINQ0JP5EhU24kN -----END CERTIFICATE-----Generated at Fri Aug 8 00:48:02 2025 by rpki-client