$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft File: qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json) Hash identifier: 92x9Aqyu/olpPa60k3/Zn62eThMcbmsNp1P/7X2rEws= Subject key identifier: E9:C0:35:67:FB:3B:5E:63:9C:6F:8E:2A:E1:D2:CC:8F:AB:AC:E9:D0 Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95 Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft Manifest number: 01B1 Signing time: Sat 09 Aug 2025 03:47:33 +0000 Manifest this update: Sat 09 Aug 2025 03:47:32 +0000 Manifest next update: Sat 16 Aug 2025 03:47:32 +0000 Files and hashes: 1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: MpwEOJxmX8zt9NHoaAndyfmzeX6OWv3BouDiw5PoM54=) 2: 92A66D260C6D11EFBF1F4756C4F9AE02.roa (hash: v6bUH5gUXHcbmbYeCisrmgZnqrIm3B73ZbS6V+sJrrI=) 3: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: r7MoQr3dXrf0T5yV0rt7SwJ3dYQT9NnjnIFvWPF1B7o=) 4: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: 3+A/zZ2nI6uBIIm2F4XRnIuGc+RZ2gQ3mx4iS5OMfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895 Validity Not Before: Aug 9 03:47:32 2025 GMT Not After : Aug 16 03:47:32 2025 GMT Subject: CN=6896c4d5-dbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:c9:c0:0f:11:7a:07:be:20:96:c5:77:9f: 7c:4d:fc:7b:fe:7e:1f:58:6a:d9:89:c9:61:89:42: 95:45:28:51:1a:70:c2:6a:74:99:d8:68:2f:5e:ef: cf:1a:c0:74:c1:ed:c5:6f:01:18:89:93:f5:e4:60: 60:2b:fa:35:4e:ff:84:9e:c0:6d:e4:7f:f6:0b:06: b2:3a:de:a0:57:ce:64:3e:e7:25:b1:12:2c:25:fc: 71:34:db:72:4f:9e:ea:7a:ff:16:58:d6:f6:86:a9: a0:5c:9e:70:ce:6b:3c:3f:70:f6:59:7c:66:63:01: eb:f5:f2:2f:3d:e2:0a:c6:15:fe:83:b9:f6:4a:6d: 81:51:8c:5b:17:57:c3:b4:7d:c9:b3:94:db:25:8a: b5:c6:76:d8:80:12:be:96:25:88:34:31:f6:90:58: 51:fc:b0:1f:2f:bd:4c:25:6b:df:ee:9e:22:14:f3: 22:d6:45:44:cf:68:18:d2:ec:c3:11:bd:63:b7:f4: 06:cc:b5:c5:b5:b9:28:8c:32:60:6d:41:22:a0:3b: 31:40:80:7d:29:6a:8c:d5:ec:9d:42:56:d7:6a:11: a5:1d:ab:44:4a:f9:1f:d2:96:f7:17:00:29:4a:8c: a3:e9:3e:e7:f3:4a:61:8e:39:b8:11:eb:91:84:30: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:35:67:FB:3B:5E:63:9C:6F:8E:2A:E1:D2:CC:8F:AB:AC:E9:D0 X509v3 Authority Key Identifier: keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b5:9e:b8:8f:69:08:f9:5b:9e:11:41:24:90:40:a8:db:45: 4e:ec:08:6b:73:eb:c4:7e:65:ba:b0:91:9f:f3:85:99:95:04: 05:dd:db:f0:4f:ec:ac:72:e4:cf:a2:bc:c7:d4:ea:f8:bb:35: 80:5e:59:e9:b6:7f:44:e1:d8:1e:af:39:bf:30:90:ff:59:98: 4d:a5:1f:39:4b:3e:c0:ec:bd:1d:45:e6:20:54:53:23:69:58: 21:8e:1d:e0:6c:11:24:05:a6:65:3b:ae:f2:ef:23:13:f4:b1: 28:d7:0d:88:db:5c:89:c0:28:62:3a:3a:50:4f:cd:9c:34:29: c0:e1:64:a3:b2:2c:19:9f:3b:99:85:11:3d:1d:7b:3a:dd:c9: d9:df:a9:b1:63:c1:ec:e0:8b:ef:3d:6d:71:a1:b4:a8:35:f0: 3c:7e:3d:78:04:ae:3e:aa:ef:35:b4:dd:ac:4e:35:38:a4:90: 80:61:02:bd:c7:4a:39:78:de:48:ac:5a:26:7a:4b:dc:cb:54: e8:fb:c3:03:ae:16:07:dc:70:16:fc:0a:69:00:7b:18:cd:4e: 4b:bd:67:a9:70:ed:24:cb:b5:ce:fb:79:ba:3e:54:1c:45:3c: 01:2a:c2:08:a1:db:b9:9a:df:c3:40:db:f7:94:31:f0:dd:37: 7a:8e:44:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4 QzRGRjk4OTUwHhcNMjUwODA5MDM0NzMyWhcNMjUwODE2MDM0NzMyWjAYMRYwFAYD VQQDEw02ODk2YzRkNS1kYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3TJwA8Rege+IJbFd598Tfx7/n4fWGrZiclhiUKVRShRGnDCanSZ2GgvXu/P GsB0we3FbwEYiZP15GBgK/o1Tv+EnsBt5H/2CwayOt6gV85kPuclsRIsJfxxNNty T57qev8WWNb2hqmgXJ5wzms8P3D2WXxmYwHr9fIvPeIKxhX+g7n2Sm2BUYxbF1fD tH3Js5TbJYq1xnbYgBK+liWINDH2kFhR/LAfL71MJWvf7p4iFPMi1kVEz2gY0uzD Eb1jt/QGzLXFtbkojDJgbUEioDsxQIB9KWqM1eydQlbXahGlHatESvkf0pb3FwAp Soyj6T7n80phjjm4EeuRhDAPeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnANWf7 O15jnG+OKuHSzI+rrOnQMB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTEyRi8wQTA2NzkwODBBNTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5 U2RwLUl3ZmpHU3FNVF9tSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdtZ64j2kI+VueEUEkkECo20VO7Ahrc+vEfmW6sJGf84WZlQQF3dvw T+yscuTPorzH1Or4uzWAXlnptn9E4dgerzm/MJD/WZhNpR85Sz7A7L0dReYgVFMj aVghjh3gbBEkBaZlO67y7yMT9LEo1w2I21yJwChiOjpQT82cNCnA4WSjsiwZnzuZ hRE9HXs63cnZ36mxY8Hs4IvvPW1xobSoNfA8fj14BK4+qu81tN2sTjU4pJCAYQK9 x0o5eN5IrFomekvcy1To+8MDrhYH3HAW/AppAHsYzU5LvWepcO0ky7XO+3m6PlQc RTwBKsIIodu5mt/DQNv3lDHw3Td6jkQ8 -----END CERTIFICATE-----Generated at Sun Aug 10 16:07:50 2025 by rpki-client