$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: qcvkaWqwgOCYXLBwHMRx3CK1TNjrwnRTbN3zCsMR5CM= Subject key identifier: 83:B5:E7:65:31:C3:CB:CE:D1:91:DB:38:AB:BD:3F:BC:0A:49:1E:BF Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 43 Signing time: Tue 05 Aug 2025 08:06:39 +0000 Manifest this update: Tue 05 Aug 2025 08:06:39 +0000 Manifest next update: Tue 12 Aug 2025 08:06:39 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: 03ebE7OZN/qo1bBT9mc41EfY4XwvWB3ojWxRZC5LFmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Aug 5 08:06:39 2025 GMT Not After : Aug 12 08:06:39 2025 GMT Subject: CN=6891bb8f-8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:82:4c:26:cc:32:da:bf:66:31:4e:09:ed: ed:dd:3f:a8:53:bc:23:31:bd:eb:ab:95:a2:6a:c2: 25:87:95:fe:47:00:63:0f:9f:14:a3:2a:d6:0b:44: b4:89:02:87:86:16:a7:35:6b:a0:91:4a:29:a2:a5: df:26:53:f1:72:02:c1:97:2b:d4:e7:63:42:c4:e7: f4:46:6e:e7:ce:03:57:b9:11:80:48:b1:b8:63:d0: fe:83:88:91:ce:1c:8c:92:91:d7:b4:63:77:7d:1d: a7:10:23:8e:be:84:2d:a9:0c:2e:41:59:9b:91:70: d5:d8:83:64:b7:83:67:9a:03:cf:46:e1:d6:e9:88: 94:b0:28:98:d9:87:b8:8e:c6:72:69:23:24:cf:05: ac:10:68:64:ea:51:28:ce:92:55:77:08:99:bb:c6: ff:ee:72:ea:75:54:55:cb:e5:b6:45:c9:d7:d4:28: 07:e1:7c:5b:6d:2b:5d:81:16:a9:db:c5:82:ff:d4: d9:09:b3:c9:5f:d4:30:53:2e:67:ec:6f:78:39:cd: e5:23:b3:6e:73:2c:b8:f4:3b:25:f1:3f:04:34:40: b6:48:ca:80:1d:fe:0d:dd:53:40:72:39:52:64:b6: 1d:35:17:a0:a9:d2:cc:84:36:77:be:ab:64:39:d0: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:E7:65:31:C3:CB:CE:D1:91:DB:38:AB:BD:3F:BC:0A:49:1E:BF X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:81:75:c2:c0:8c:bb:02:f4:44:12:6d:41:b7:57:47:2a: 56:c6:1c:35:03:73:73:ba:d8:a1:0d:16:3f:5f:7a:2e:fe:cc: 57:a0:e5:ed:c1:60:84:65:3d:fe:83:4d:4d:67:10:e0:3a:72: 90:02:97:d9:23:65:e3:51:6d:37:b9:78:2e:83:0e:89:ff:8e: a2:b0:d3:40:11:e2:cc:97:76:ea:ad:03:9a:d1:f5:9a:f5:2a: a1:d3:2e:c9:96:a5:f6:6e:b7:25:2e:50:e0:df:36:2e:19:b4: 53:e7:56:fe:02:16:02:fe:34:56:b2:d2:0c:7b:bb:9f:a6:31: 9a:05:93:40:43:c8:cd:d5:a6:08:3a:b8:01:28:6e:27:5f:7d: 99:76:d3:7d:b2:e8:5b:f4:97:6d:10:13:6e:76:ea:d0:c4:4c: a9:a3:32:c0:7d:50:ed:04:c2:6f:20:1a:60:31:3a:5f:a0:1c: 09:3c:4c:44:81:da:b9:20:e1:34:9e:9b:d5:15:8b:d1:1b:72: 61:75:60:b9:e5:be:31:e1:4f:10:d0:93:c9:4d:f8:39:44:38: fb:8f:61:8a:fd:be:28:bb:03:c3:b7:a5:1a:17:3d:33:58:ba: c7:3a:00:ce:53:16:62:d7:d4:06:ac:17:53:70:74:44:fe:33: 5f:60:14:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTA4MDUwODA2MzlaFw0yNTA4MTIwODA2MzlaMBgxFjAUBgNV BAMTDTY4OTFiYjhmLTgzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpSYJMJswy2r9mMU4J7e3dP6hTvCMxveurlaJqwiWHlf5HAGMPnxSjKtYLRLSJ AoeGFqc1a6CRSimipd8mU/FyAsGXK9TnY0LE5/RGbufOA1e5EYBIsbhj0P6DiJHO HIySkde0Y3d9HacQI46+hC2pDC5BWZuRcNXYg2S3g2eaA89G4dbpiJSwKJjZh7iO xnJpIyTPBawQaGTqUSjOklV3CJm7xv/ucup1VFXL5bZFydfUKAfhfFttK12BFqnb xYL/1NkJs8lf1DBTLmfsb3g5zeUjs25zLLj0OyXxPwQ0QLZIyoAd/g3dU0ByOVJk th01F6Cp0syENne+q2Q50GtPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg7XnZTHD y87Rkds4q70/vApJHr8wHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHtgXXCwIy7AvREEm1Bt1dHKlbGHDUDc3O62KENFj9fei7+zFeg5e3B YIRlPf6DTU1nEOA6cpACl9kjZeNRbTe5eC6DDon/jqKw00AR4syXduqtA5rR9Zr1 KqHTLsmWpfZutyUuUODfNi4ZtFPnVv4CFgL+NFay0gx7u5+mMZoFk0BDyM3Vpgg6 uAEobidffZl2032y6Fv0l20QE2526tDETKmjMsB9UO0Ewm8gGmAxOl+gHAk8TESB 2rkg4TSem9UVi9EbcmF1YLnlvjHhTxDQk8lN+DlEOPuPYYr9vii7A8O3pRoXPTNY usc6AM5TFmLX1AasF1NwdET+M19gFPM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:56:57 2025 by rpki-client