$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json) Hash identifier: 7HLxU6lxfuyhWNML5C27w/7YV0LpJR2655nSwQHwbt4= Subject key identifier: E4:2B:F2:38:C4:C6:B4:DD:B5:E6:8F:E4:B2:65:57:DF:46:26:34:EC Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft Manifest number: 0843 Signing time: Sun 10 Aug 2025 20:44:39 +0000 Manifest this update: Sun 10 Aug 2025 20:44:38 +0000 Manifest next update: Sun 17 Aug 2025 20:44:38 +0000 Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: 4k7AtTeFDeX2PDVjFkWjQTysDdIUjNEd33Nzb+f+kg0=) 2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: l0ICGLwuaPDJO60DuHwg4w9v81ASlnFGPH6s06O+ZdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Validity Not Before: Aug 10 20:44:38 2025 GMT Not After : Aug 17 20:44:38 2025 GMT Subject: CN=689904b6-92bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:e5:4d:e2:d3:1a:ef:5f:88:de:11:66:d8: ea:c8:79:34:13:63:09:35:47:7d:55:50:88:60:e3: 0f:f0:b5:8e:fc:ea:4e:ed:60:92:6e:d9:26:bf:9a: 26:a8:e9:52:c6:d9:61:e4:7e:b9:83:8c:4d:cd:4c: ee:57:c6:79:84:1c:d7:c3:c0:51:a5:8d:b2:f9:8a: 62:9a:4e:dd:b8:ca:93:49:30:42:47:98:31:45:86: 10:c2:b7:b0:36:f8:b4:73:01:c6:41:ef:6a:d0:49: 0e:d7:f4:0c:65:24:1f:a8:1c:e6:81:90:da:bf:55: d1:d3:41:0e:d6:aa:6a:fa:3a:6e:5a:e4:e7:6a:df: c0:f2:23:35:80:3f:34:4e:05:1a:56:8c:65:51:30: 2b:04:42:92:36:1c:44:f1:e1:50:1c:cf:db:11:a9: 44:13:bc:13:cf:97:f0:d9:ac:9b:fb:aa:9f:da:d7: 31:ef:45:56:bb:1f:ce:92:77:dc:fd:69:6a:ae:56: b1:69:f8:77:20:e7:22:b1:8d:a5:51:2b:88:84:3f: 75:28:2a:2e:ef:55:3b:fd:c4:75:6e:05:7d:82:6d: a0:7a:78:f2:22:95:3a:4f:f0:67:77:2b:7c:0d:28: 34:9d:27:3e:d4:0e:04:8a:c9:72:8c:8a:c4:5d:64: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2B:F2:38:C4:C6:B4:DD:B5:E6:8F:E4:B2:65:57:DF:46:26:34:EC X509v3 Authority Key Identifier: keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c2:89:22:b9:aa:35:d4:cf:4e:3f:79:8a:e0:52:23:37:85: 17:5e:e0:ea:d3:2e:04:52:7f:f5:3d:d6:95:f9:d2:32:22:a7: 04:c9:73:14:67:82:62:e1:70:9c:ae:2c:b2:b4:10:47:6e:f6: fd:47:c5:1c:c3:2b:cc:aa:77:3d:8b:a5:30:89:8e:83:56:5d: c9:96:72:22:47:49:a5:d4:68:75:9d:6c:54:cb:cd:78:da:e1: f3:3e:cd:b6:65:74:27:bd:f1:f2:97:38:60:21:f3:71:42:80: 01:43:b4:84:dc:87:1e:6c:83:fe:9d:0c:54:38:3c:6a:29:49: 08:2e:f5:61:73:51:95:9c:92:df:48:0c:a7:e9:0e:17:ac:d5: 8e:23:4d:4f:37:50:b8:2d:58:ab:e2:dc:c4:54:68:25:56:bd: 5a:71:29:b6:64:ef:0d:c0:f4:00:f2:89:df:0a:15:2c:4a:85: 41:b9:2c:8d:4f:e3:b9:03:b6:c9:1f:83:6e:a1:a3:17:b3:6c: 67:d9:ad:13:74:fa:c8:a9:b4:43:22:7a:2f:fc:3d:60:3e:21: eb:13:92:a1:c2:c1:88:2c:d8:90:99:6f:96:75:bb:c7:fd:46: 7e:0f:aa:ea:77:3e:ee:6f:5b:fb:ee:5b:66:9f:25:ac:ac:c7: c0:75:d1:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5 NzNDNEFCQzAwHhcNMjUwODEwMjA0NDM4WhcNMjUwODE3MjA0NDM4WjAYMRYwFAYD VQQDEw02ODk5MDRiNi05MmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NflTeLTGu9fiN4RZtjqyHk0E2MJNUd9VVCIYOMP8LWO/OpO7WCSbtkmv5om qOlSxtlh5H65g4xNzUzuV8Z5hBzXw8BRpY2y+Ypimk7duMqTSTBCR5gxRYYQwrew Nvi0cwHGQe9q0EkO1/QMZSQfqBzmgZDav1XR00EO1qpq+jpuWuTnat/A8iM1gD80 TgUaVoxlUTArBEKSNhxE8eFQHM/bEalEE7wTz5fw2ayb+6qf2tcx70VWux/Oknfc /Wlqrlaxafh3IOcisY2lUSuIhD91KCou71U7/cR1bgV9gm2genjyIpU6T/Bndyt8 DSg0nSc+1A4EislyjIrEXWRLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQr8jjE xrTdteaP5LJlV99GJjTsMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2 NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYwokiuao11M9OP3mK4FIjN4UXXuDq0y4EUn/1PdaV+dIyIqcEyXMU Z4Ji4XCcriyytBBHbvb9R8UcwyvMqnc9i6UwiY6DVl3JlnIiR0ml1Gh1nWxUy814 2uHzPs22ZXQnvfHylzhgIfNxQoABQ7SE3IcebIP+nQxUODxqKUkILvVhc1GVnJLf SAyn6Q4XrNWOI01PN1C4LVir4tzEVGglVr1acSm2ZO8NwPQA8onfChUsSoVBuSyN T+O5A7bJH4NuoaMXs2xn2a0TdPrIqbRDInov/D1gPiHrE5KhwsGILNiQmW+WdbvH /UZ+D6rqdz7ub1v77ltmnyWsrMfAddF2 -----END CERTIFICATE-----Generated at Mon Aug 11 07:32:47 2025 by rpki-client