$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: hFIEIpsuwgtpIDgZSbAvSIwWJTXqt2uqnFQ7HjjN1vM= Subject key identifier: 86:C8:23:E9:D4:35:BE:04:DB:1C:7F:4B:6F:34:F4:92:2D:B3:B9:A4 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1287 Signing time: Mon 04 Aug 2025 19:53:34 +0000 Manifest this update: Mon 04 Aug 2025 19:53:34 +0000 Manifest next update: Mon 11 Aug 2025 19:53:34 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: 3F9/47hXEqKzSuMhDGa3V29rzIbt0gfSqM26KkfeHUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Aug 4 19:53:34 2025 GMT Not After : Aug 11 19:53:34 2025 GMT Subject: CN=68910fbe-f999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:2d:2e:18:54:ed:0d:37:e4:ae:7f:2a:5b: fd:ea:59:58:7c:ca:aa:7e:54:d2:f1:29:1b:23:1d: 7c:5a:8e:93:2a:85:e1:48:fe:cf:c8:6e:20:81:c9: 5b:22:04:b2:66:fd:03:73:5b:8a:b8:7b:79:ce:d1: e1:0f:44:54:55:7a:b6:ea:06:27:88:37:9c:de:69: 04:c6:69:51:5d:05:c0:6e:62:97:3f:50:5e:c2:3e: 41:66:0e:b9:d0:91:19:4e:6d:fa:65:fc:bb:90:27: 54:b1:14:73:88:06:a0:37:a1:ec:65:33:e1:60:05: ec:82:e7:ea:29:34:78:5c:b1:09:e8:55:e4:d7:e0: 34:76:a3:75:30:21:62:cf:8e:55:03:6b:d7:1c:0e: fa:85:ea:89:30:a2:33:1d:20:ec:d9:0c:5c:bb:ca: bf:5b:bf:1e:ac:c6:cb:9b:a9:ae:ba:21:e1:85:f4: b6:21:9e:5e:c6:0b:ac:78:14:49:97:fa:f8:a4:93: de:ce:30:1c:b5:2f:b7:9b:be:4e:e2:55:64:85:c4: b0:33:ef:5f:c5:1a:8a:d7:5a:b2:f5:df:1f:43:8f: 62:de:03:3f:2a:e7:d4:f6:d5:dc:b9:09:46:30:2d: 2d:8d:4e:9e:76:e9:7e:bf:cc:64:52:d0:32:b9:2e: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:23:E9:D4:35:BE:04:DB:1C:7F:4B:6F:34:F4:92:2D:B3:B9:A4 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ff:87:d0:12:31:d5:59:d9:ad:b5:1f:31:a3:a4:01:ba:b6: f7:20:89:cc:1a:72:c0:7f:ed:18:db:44:56:f3:80:f1:68:62: fd:64:72:bf:3c:f1:10:d4:40:39:22:b7:70:d0:ab:88:85:dc: 62:cd:8d:e4:68:df:d8:67:03:f5:fd:29:a1:59:d8:bc:d9:14: 5e:fa:7b:5b:57:45:f1:c1:34:41:c3:a2:eb:3b:3f:27:35:12: f5:03:9e:8b:3a:bf:aa:1c:f5:76:00:1b:3f:5d:fc:25:e4:15: 06:6c:1d:da:4d:4e:9e:72:ed:b6:0e:ee:59:91:13:96:16:4c: 7d:f9:0e:02:a4:7b:4d:6a:6f:45:3c:50:ee:90:72:61:0d:f5: d4:77:e7:fe:35:a2:3f:47:bc:b5:0b:9d:55:17:ae:8b:9f:ff: 71:bf:3c:ea:d0:7b:d1:31:d7:8d:13:75:c4:5c:fc:0a:7b:63: 7c:18:75:6e:25:8f:c8:fc:e7:98:2f:c5:a8:d8:03:85:3b:08: 28:3a:60:9c:7d:3e:32:cd:50:21:77:8c:a4:78:0c:4b:a5:68: 9b:9e:45:ff:6d:ff:b0:8b:5a:86:55:94:18:16:04:c9:f2:73: 31:0c:48:03:b4:ea:72:76:2e:8c:8e:f6:bd:ab:22:84:5a:4d: 96:0d:7a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwODA0MTk1MzM0WhcNMjUwODExMTk1MzM0WjAYMRYwFAYD VQQDEw02ODkxMGZiZS1mOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQctLhhU7Q035K5/Klv96llYfMqqflTS8SkbIx18Wo6TKoXhSP7PyG4ggclb IgSyZv0Dc1uKuHt5ztHhD0RUVXq26gYniDec3mkExmlRXQXAbmKXP1Bewj5BZg65 0JEZTm36Zfy7kCdUsRRziAagN6HsZTPhYAXsgufqKTR4XLEJ6FXk1+A0dqN1MCFi z45VA2vXHA76heqJMKIzHSDs2Qxcu8q/W78erMbLm6muuiHhhfS2IZ5exguseBRJ l/r4pJPezjActS+3m75O4lVkhcSwM+9fxRqK11qy9d8fQ49i3gM/KufU9tXcuQlG MC0tjU6edul+v8xkUtAyuS5ppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbII+nU Nb4E2xx/S2809JIts7mkMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM/4fQEjHVWdmttR8xo6QBurb3IInMGnLAf+0Y20RW84DxaGL9ZHK/ PPEQ1EA5Irdw0KuIhdxizY3kaN/YZwP1/SmhWdi82RRe+ntbV0XxwTRBw6LrOz8n NRL1A56LOr+qHPV2ABs/Xfwl5BUGbB3aTU6ecu22Du5ZkROWFkx9+Q4CpHtNam9F PFDukHJhDfXUd+f+NaI/R7y1C51VF66Ln/9xvzzq0HvRMdeNE3XEXPwKe2N8GHVu JY/I/OeYL8Wo2AOFOwgoOmCcfT4yzVAhd4ykeAxLpWibnkX/bf+wi1qGVZQYFgTJ 8nMxDEgDtOpydi6Mjva9qyKEWk2WDXoV -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:27 2025 by rpki-client