$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: LGCoXgeKd4UkrNK9M9niKE4ZMHCOsOaUXh+dBeJx/00= Subject key identifier: 2D:3E:67:7F:57:46:15:93:90:AE:23:88:D3:F0:6F:69:3C:B6:B0:2D Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 01E9 Signing time: Mon 11 Aug 2025 02:44:21 +0000 Manifest this update: Mon 11 Aug 2025 02:44:20 +0000 Manifest next update: Mon 18 Aug 2025 02:44:20 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: tEyWMjuIkJPkyFUzB+KF0KC36h8y2K7ynxib5MiTP50=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: L+V30ULZZ1KBiifHC7zDGdNJ17lrpWMv8iHx76Nc92w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Aug 11 02:44:20 2025 GMT Not After : Aug 18 02:44:20 2025 GMT Subject: CN=68995904-162a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c6:4b:c0:ae:59:b4:b4:e3:34:d0:74:b3:9e: d8:02:ea:b4:dd:41:1d:1b:da:9b:81:14:31:8a:f3: 3c:f3:55:54:d8:de:3c:37:5b:0a:94:d1:e2:32:03: 3b:7e:1b:2d:55:1e:be:47:31:65:45:54:a8:ba:81: 23:99:68:e1:80:51:01:9f:7a:c5:ac:42:d1:ce:df: 9f:85:f6:c4:23:ab:b4:53:24:66:e6:86:ba:29:70: 7a:ea:ec:81:76:65:f2:aa:56:21:bb:0f:81:8d:a2: c7:36:25:16:40:11:b7:ca:b7:39:84:bb:f8:95:5a: fe:2e:23:74:0b:aa:b4:f7:a3:7d:3e:78:2c:bf:51: 39:09:eb:aa:1b:13:fe:25:b1:dd:c0:ed:62:e2:af: 81:ab:8a:a4:15:ee:39:ab:9f:52:b2:f5:6e:4e:03: cc:77:be:0e:d7:21:69:a1:57:6a:1c:d1:c0:61:39: d1:35:6a:b2:8d:78:8f:48:bf:08:bf:77:f7:6a:d6: ca:bc:39:c6:f1:d0:5e:4b:3b:b7:6f:f9:5e:ca:79: 40:66:12:f7:d4:d8:e7:5d:3c:e4:ca:6f:c8:c2:76: 09:88:a2:ea:9e:8a:fe:8a:b0:55:6f:ad:44:38:e3: 49:3b:f8:17:b4:b8:d1:59:e3:8f:25:49:08:1b:42: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:67:7F:57:46:15:93:90:AE:23:88:D3:F0:6F:69:3C:B6:B0:2D X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fb:d3:c1:7d:d7:be:38:33:38:3b:4e:e3:48:c3:99:dc:52: 52:f3:29:3d:17:01:2a:2e:7e:8a:9c:9a:51:90:15:c2:e0:a7: 76:72:15:53:e7:d2:02:cf:fc:cb:78:5a:81:03:d1:75:01:42: 25:3d:65:57:2a:7c:b5:ae:59:5d:10:85:7c:43:4c:a7:7d:11: bb:1c:1c:7e:e0:15:1b:dc:66:e8:5d:99:9b:b9:10:4c:32:11: d3:f0:e6:ae:6f:04:b5:27:67:d3:2f:dd:de:b2:69:8f:80:40: 6c:e2:72:9f:50:e9:a0:f4:9c:0b:c0:10:9b:2f:55:b5:e4:e9: 4a:c4:df:04:d3:05:f3:cb:e4:7c:8f:7f:d4:89:a9:99:f8:63: f2:29:14:af:63:51:96:be:d4:ec:08:30:ee:b6:6a:fb:56:c6: 06:22:d7:06:cb:85:9b:86:d8:75:d3:e8:07:9c:dc:85:3a:98: 9a:bc:b3:9d:dd:da:39:0b:55:f3:09:5b:ac:0c:da:36:0b:3e: 77:69:ea:e0:c8:84:bb:3f:5f:19:f7:de:cb:5e:58:e0:0b:0a: b5:63:12:96:b7:1d:16:4e:5a:78:26:fa:09:3c:7f:b3:b9:b8: 39:64:89:e0:87:8c:4d:cc:61:05:b2:7a:aa:13:7a:62:e3:4f: 52:19:2a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjUwODExMDI0NDIwWhcNMjUwODE4MDI0NDIwWjAYMRYwFAYD VQQDEw02ODk5NTkwNC0xNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cZLwK5ZtLTjNNB0s57YAuq03UEdG9qbgRQxivM881VU2N48N1sKlNHiMgM7 fhstVR6+RzFlRVSouoEjmWjhgFEBn3rFrELRzt+fhfbEI6u0UyRm5oa6KXB66uyB dmXyqlYhuw+BjaLHNiUWQBG3yrc5hLv4lVr+LiN0C6q096N9Pngsv1E5CeuqGxP+ JbHdwO1i4q+Bq4qkFe45q59SsvVuTgPMd74O1yFpoVdqHNHAYTnRNWqyjXiPSL8I v3f3atbKvDnG8dBeSzu3b/leynlAZhL31NjnXTzkym/IwnYJiKLqnor+irBVb61E OONJO/gXtLjRWeOPJUkIG0IRMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0+Z39X RhWTkK4jiNPwb2k8trAtMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw+9PBfde+ODM4O07jSMOZ3FJS8yk9FwEqLn6KnJpRkBXC4Kd2chVT 59ICz/zLeFqBA9F1AUIlPWVXKny1rlldEIV8Q0ynfRG7HBx+4BUb3GboXZmbuRBM MhHT8OaubwS1J2fTL93esmmPgEBs4nKfUOmg9JwLwBCbL1W15OlKxN8E0wXzy+R8 j3/UiamZ+GPyKRSvY1GWvtTsCDDutmr7VsYGItcGy4Wbhth10+gHnNyFOpiavLOd 3do5C1XzCVusDNo2Cz53aergyIS7P18Z997LXljgCwq1YxKWtx0WTlp4JvoJPH+z ubg5ZIngh4xNzGEFsnqqE3pi409SGSoE -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:38 2025 by rpki-client