$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: 3l7fAEstXDEgR+7A2ZRfC5m96O5nS7gP3sD4cgBsEJw= Subject key identifier: 9D:F2:51:5B:48:3A:A0:20:5A:3D:BF:C7:2E:7A:C2:46:E3:22:12:26 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0C6C Signing time: Fri 08 Aug 2025 18:50:09 +0000 Manifest this update: Fri 08 Aug 2025 18:50:09 +0000 Manifest next update: Fri 15 Aug 2025 18:50:09 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: tXO+2GLkfv5oCWvZeIu3SYsZ2HI9c8g0LCwXmuZOmQY=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: 3Pf+UclR1ixgluEahQ2no6MMrcl7KhpZcpwccqiTviQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Aug 8 18:50:09 2025 GMT Not After : Aug 15 18:50:09 2025 GMT Subject: CN=689646e1-62b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:bd:b4:d0:ad:0c:35:1a:56:77:af:e4:c9: 85:17:c0:f3:c6:85:d9:1b:67:90:11:d1:d6:5f:81: a7:87:79:99:08:28:1c:5a:0e:ef:f3:f9:1a:d8:83: 9c:2b:7c:86:d3:f3:56:ab:dc:ac:15:e1:83:fb:d4: 28:f7:89:41:05:7e:ab:78:c0:1f:af:ed:06:ea:23: 0c:f7:66:7c:0e:dd:6f:3b:31:dc:4a:9e:bc:50:a5: 31:8a:b4:2f:0c:59:53:d7:b3:57:29:56:0d:4c:2c: 75:63:b4:81:62:6b:77:e4:bf:10:c3:69:f6:23:24: cf:32:ca:6c:68:8c:f0:6e:e4:b0:73:a0:70:ed:70: eb:f7:d6:ba:ae:e0:10:48:09:5c:4c:8f:a3:a6:66: 13:1d:aa:df:88:57:ab:f2:15:71:2a:1e:b8:42:f0: d9:4c:5b:92:a9:98:9f:d4:72:0a:b0:ed:7e:3f:57: 4a:25:48:1e:48:69:d6:20:34:d1:c1:f1:75:d5:a4: 58:64:4d:42:52:2e:62:2c:60:26:4b:90:96:eb:a5: 14:6f:ea:36:21:ec:76:30:7f:0d:22:c1:54:ab:7b: 7f:b7:1d:64:8e:8d:ff:98:e8:70:e4:44:e6:c0:f0: 9e:2b:e1:ca:fc:43:60:9a:dd:5a:3e:31:db:68:9e: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:51:5B:48:3A:A0:20:5A:3D:BF:C7:2E:7A:C2:46:E3:22:12:26 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:24:b4:19:a8:26:fb:4d:54:c6:6a:a5:93:3f:e6:6f:4e:5d: 5c:da:21:8f:56:e8:5e:93:c1:1e:56:77:d9:46:39:d2:4c:85: 7a:4a:4a:01:a9:ae:53:3e:91:67:65:82:eb:09:1f:57:ab:63: 84:63:57:3d:f0:da:c0:50:10:23:e6:b6:2c:d1:55:55:a4:e5: 5d:67:7e:c8:72:3e:a2:4f:a7:c8:e5:b5:ab:34:e3:74:01:d2: b0:be:55:a0:d1:96:97:30:e6:3e:3f:cb:5b:78:0b:03:bc:f5: b7:d4:bc:f4:ce:5d:c3:ca:a0:f6:4d:d3:13:ef:bf:e3:d2:87: f0:ab:2c:62:92:32:32:38:51:91:e0:a1:29:df:f9:f6:a5:40: ac:40:6f:30:06:9d:53:22:98:94:08:f1:0a:de:f7:38:15:ed: da:f7:27:bf:21:44:c4:9b:ef:5c:10:25:41:6f:30:76:43:43: 99:e1:55:26:2c:ea:2c:30:47:b6:12:1e:06:99:47:28:7f:4f: 74:dc:6c:c5:6b:68:78:76:d3:af:61:12:c2:1e:30:f2:d0:d3: 66:a6:e4:bc:67:3e:a4:6e:34:f0:84:e1:a0:36:7b:3a:e4:5d: 01:77:d6:ca:63:51:b0:39:98:0f:34:87:fd:c6:32:b7:63:ab: 5a:d7:a6:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUwODA4MTg1MDA5WhcNMjUwODE1MTg1MDA5WjAYMRYwFAYD VQQDEw02ODk2NDZlMS02MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AK9tNCtDDUaVnev5MmFF8DzxoXZG2eQEdHWX4Gnh3mZCCgcWg7v8/ka2IOc K3yG0/NWq9ysFeGD+9Qo94lBBX6reMAfr+0G6iMM92Z8Dt1vOzHcSp68UKUxirQv DFlT17NXKVYNTCx1Y7SBYmt35L8Qw2n2IyTPMspsaIzwbuSwc6Bw7XDr99a6ruAQ SAlcTI+jpmYTHarfiFer8hVxKh64QvDZTFuSqZif1HIKsO1+P1dKJUgeSGnWIDTR wfF11aRYZE1CUi5iLGAmS5CW66UUb+o2Iex2MH8NIsFUq3t/tx1kjo3/mOhw5ETm wPCeK+HK/ENgmt1aPjHbaJ7BrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3yUVtI OqAgWj2/xy56wkbjIhImMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKJLQZqCb7TVTGaqWTP+ZvTl1c2iGPVuhek8EeVnfZRjnSTIV6SkoB qa5TPpFnZYLrCR9Xq2OEY1c98NrAUBAj5rYs0VVVpOVdZ37Icj6iT6fI5bWrNON0 AdKwvlWg0ZaXMOY+P8tbeAsDvPW31Lz0zl3DyqD2TdMT77/j0ofwqyxikjIyOFGR 4KEp3/n2pUCsQG8wBp1TIpiUCPEK3vc4Fe3a9ye/IUTEm+9cECVBbzB2Q0OZ4VUm LOosMEe2Eh4GmUcof0903GzFa2h4dtOvYRLCHjDy0NNmpuS8Zz6kbjTwhOGgNns6 5F0Bd9bKY1GwOZgPNIf9xjK3Y6ta16aD -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:12 2025 by rpki-client