$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: lP7cYJgH1iIY3VnOjG1JVvOkvDtxGldG2u1mwM4qPFE= Subject key identifier: B3:8A:91:46:00:D8:D8:15:E0:C9:00:F1:CD:C9:89:94:14:DD:54:46 Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 021F Signing time: Sat 09 Aug 2025 02:30:51 +0000 Manifest this update: Sat 09 Aug 2025 02:30:50 +0000 Manifest next update: Sat 16 Aug 2025 02:30:50 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: NGPB+oorWJEvcEuWSH5fFxuVZFRdKEmPueI+ECckkS0=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: H0AJqEiGAywgjMNh/B1Rg0QqAknxodzCmkcexEm/7aU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Aug 9 02:30:50 2025 GMT Not After : Aug 16 02:30:50 2025 GMT Subject: CN=6896b2da-e74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:d7:c2:bd:88:5f:92:91:59:91:b7:19:1c: 1d:db:d0:de:c1:39:52:ef:bd:be:fd:a1:ae:10:29: fd:19:19:19:2a:e8:b6:01:86:e5:fd:5d:2a:94:4f: 27:db:f7:df:da:56:0b:35:68:43:73:7b:5c:5c:7c: 32:2c:f3:a4:e8:c0:14:87:42:d1:55:22:e0:bc:f4: e6:73:67:47:c7:25:07:21:44:ab:2f:52:50:d8:92: c1:1d:c4:c1:0c:cc:47:14:32:db:f9:15:9d:34:21: cc:b8:cc:93:d3:8a:65:dc:e7:22:7d:c5:a8:a3:86: 4c:00:3a:1d:39:50:53:02:43:bc:8b:2f:da:82:60: f7:d9:1f:64:4e:23:8e:b6:cc:8b:73:09:20:d4:4f: 85:1b:6d:4f:58:d7:f8:83:28:d5:ac:8d:b4:e5:a5: 43:e4:88:8f:cc:65:f7:94:eb:3e:78:67:35:5a:9c: 17:10:e6:40:1d:e6:20:31:a2:81:a2:79:f2:4f:79: 02:67:8a:26:9c:f6:76:e6:b7:9a:47:d2:cd:ad:97: 11:59:a9:34:35:ab:01:62:96:ee:93:ac:07:60:9a: 10:b8:e7:4a:b1:cd:21:40:54:07:f2:68:ae:7c:3c: 6d:f2:c3:d4:81:4a:c3:71:de:58:ba:ee:0e:70:21: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:91:46:00:D8:D8:15:E0:C9:00:F1:CD:C9:89:94:14:DD:54:46 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:13:4f:75:9e:0b:7a:8b:bb:a0:57:8f:c5:4b:05:2c:78:70: 78:ce:01:f9:9f:3f:3b:9c:86:a9:da:3f:d0:80:24:4a:f9:9f: 5f:32:50:ad:e5:9a:ea:59:39:ec:da:e2:21:da:45:7b:22:41: dd:e6:d5:47:81:b9:6c:5a:b1:c7:fd:d0:ee:a1:43:20:7f:17: 78:3b:94:eb:dc:81:73:42:79:f7:64:b0:2c:3a:45:c6:c0:eb: 34:52:cf:1f:3a:56:f6:5f:4d:fa:bc:4d:70:b3:cc:88:59:68: 91:78:22:23:d9:18:a4:ff:c7:6b:63:07:a3:28:87:ba:ae:f5: 99:6f:fa:8c:1d:c3:0e:77:bf:32:62:9a:cd:33:b6:80:ba:f6: dd:09:19:14:21:83:bf:f1:49:0f:30:e3:5c:d0:4c:b5:2b:1b: 14:cb:69:62:47:21:68:c2:8b:01:5a:4f:27:83:cd:00:21:9f: c4:b2:39:e9:cc:f8:4c:49:1d:c5:a0:1b:84:7b:ea:98:12:a8: f7:1b:5f:b5:24:65:de:5f:2a:04:a8:23:2a:2c:98:b6:97:dc: 7e:be:7a:98:49:10:1d:0f:00:4c:7a:e2:dd:e5:4d:8d:e4:13: 15:23:7d:93:b3:ef:b4:02:7f:af:3b:51:81:c3:4c:4b:5e:92: 0e:18:0c:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUwODA5MDIzMDUwWhcNMjUwODE2MDIzMDUwWjAYMRYwFAYD VQQDEw02ODk2YjJkYS1lNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe7Xwr2IX5KRWZG3GRwd29DewTlS772+/aGuECn9GRkZKui2AYbl/V0qlE8n 2/ff2lYLNWhDc3tcXHwyLPOk6MAUh0LRVSLgvPTmc2dHxyUHIUSrL1JQ2JLBHcTB DMxHFDLb+RWdNCHMuMyT04pl3OcifcWoo4ZMADodOVBTAkO8iy/agmD32R9kTiOO tsyLcwkg1E+FG21PWNf4gyjVrI205aVD5IiPzGX3lOs+eGc1WpwXEOZAHeYgMaKB onnyT3kCZ4omnPZ25reaR9LNrZcRWak0NasBYpbuk6wHYJoQuOdKsc0hQFQH8miu fDxt8sPUgUrDcd5Yuu4OcCEE4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOKkUYA 2NgV4MkA8c3JiZQU3VRGMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtE091ngt6i7ugV4/FSwUseHB4zgH5nz87nIap2j/QgCRK+Z9fMlCt 5ZrqWTns2uIh2kV7IkHd5tVHgblsWrHH/dDuoUMgfxd4O5Tr3IFzQnn3ZLAsOkXG wOs0Us8fOlb2X036vE1ws8yIWWiReCIj2Rik/8drYwejKIe6rvWZb/qMHcMOd78y YprNM7aAuvbdCRkUIYO/8UkPMONc0Ey1KxsUy2liRyFowosBWk8ng80AIZ/Esjnp zPhMSR3FoBuEe+qYEqj3G1+1JGXeXyoEqCMqLJi2l9x+vnqYSRAdDwBMeuLd5U2N 5BMVI32Ts++0An+vO1GBw0xLXpIOGAzj -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:03 2025 by rpki-client