$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft File: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json) Hash identifier: JWIPN48D8HIcHA1Rlp0rdw3WwF43f0GYM9snkg8AJf0= Subject key identifier: DD:6D:D4:D6:70:0E:52:CD:D8:AF:45:58:8F:07:EC:11:CA:E3:A3:0D Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 Certificate issuer: /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft Manifest number: 68 Signing time: Mon 21 Jul 2025 07:08:06 +0000 Manifest this update: Mon 21 Jul 2025 07:08:06 +0000 Manifest next update: Mon 28 Jul 2025 07:08:06 +0000 Files and hashes: 1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: RVlVqhLO+7qBwmOdC8Q75KnSB1bX56Ilr6lhyqa+024=) 2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Validity Not Before: Jul 21 07:08:06 2025 GMT Not After : Jul 28 07:08:06 2025 GMT Subject: CN=687de756-e0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:8b:f9:b7:f6:9b:40:fc:4f:26:a7:d9:75: 05:88:09:91:ae:e5:91:2e:2e:6c:05:38:d3:75:a9: d5:ca:58:34:c0:6c:cd:dc:b0:f8:af:85:50:06:f4: 4d:8d:04:df:f7:4f:57:6c:d4:2f:d1:ef:ad:bb:13: fd:8a:06:20:e8:a1:6b:6f:8a:48:e9:4b:51:36:00: 09:6d:c0:75:e3:f1:f5:e5:50:2d:d0:95:f5:d7:49: a3:ee:07:1e:08:51:81:dd:97:36:dd:0e:12:7e:c7: 01:ec:f7:4c:2e:6e:a1:cf:4b:b1:a9:b8:41:26:8f: d1:ea:33:41:21:65:fb:4d:4d:87:ce:23:64:f8:d6: 6c:74:c1:7f:6c:64:b4:b7:c5:59:b0:22:fa:e8:23: 19:7c:d7:e3:44:5f:ab:76:ec:e4:b7:b1:b1:1d:6d: c9:dc:d4:64:0f:5e:1c:a2:3c:89:7b:6d:4a:46:71: 45:a2:f1:ba:83:1a:f5:83:7e:dd:58:76:27:d2:f8: 94:ce:21:e0:be:46:51:d7:ea:a9:a3:94:f4:d2:63: 69:af:e0:37:92:d3:e5:13:7e:a7:7b:14:63:2a:f7: 85:f8:34:26:ec:47:1e:b4:0e:80:f9:33:48:54:42: cc:33:01:85:ca:69:e0:0d:b9:7f:ce:cb:94:fc:d2: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6D:D4:D6:70:0E:52:CD:D8:AF:45:58:8F:07:EC:11:CA:E3:A3:0D X509v3 Authority Key Identifier: keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:be:96:63:45:89:b5:29:05:eb:8f:25:8b:c5:56:81:30: 9d:5d:aa:9a:1b:1b:ca:cc:37:66:96:ed:00:ab:09:f6:ba:1c: b4:2d:98:12:67:11:0a:87:c0:58:d5:4e:73:39:95:71:96:5e: 6d:36:21:d1:86:61:87:f0:49:8e:09:c8:24:20:8e:35:72:08: fb:cc:2e:ba:2b:16:4e:b9:2a:cf:a9:99:17:01:6f:16:dc:a1: fc:51:e5:12:1e:56:6f:53:05:a0:e3:5f:4e:96:08:cb:ec:77: c1:c3:71:43:2c:87:3a:bf:77:c1:34:3a:8e:21:b7:4b:78:48: 37:d5:1e:ae:02:35:07:0b:4e:2b:b7:f7:6c:d2:9a:bc:ff:a2: 6b:71:a4:88:57:19:9e:36:77:0a:0a:86:0d:7e:83:b4:75:94: 7d:f5:ea:05:3e:59:57:0f:3e:d9:0b:1e:2c:c6:4e:c7:c5:2e: ac:a8:1e:a1:0f:d5:bd:a1:79:99:0a:f8:fb:38:14:97:c4:8b: 51:67:56:a3:a0:a2:12:9c:df:29:88:81:e7:17:18:01:48:8a: 6a:80:a2:11:00:c4:eb:6b:4e:44:0e:92:b8:4d:e6:0a:60:43: 6f:67:88:e2:28:ab:f3:a4:37:67:c6:e8:2b:38:17:84:e6:54: 40:42:8c:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDFBNzVFMDU3RTI1MDU1RjE0QTg5RjUzMEM3OEUyMjNC MUYwRjU5MDAeFw0yNTA3MjEwNzA4MDZaFw0yNTA3MjgwNzA4MDZaMBgxFjAUBgNV BAMTDTY4N2RlNzU2LWUwZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCttov5t/abQPxPJqfZdQWICZGu5ZEuLmwFONN1qdXKWDTAbM3csPivhVAG9E2N BN/3T1ds1C/R7627E/2KBiDooWtvikjpS1E2AAltwHXj8fXlUC3QlfXXSaPuBx4I UYHdlzbdDhJ+xwHs90wubqHPS7GpuEEmj9HqM0EhZftNTYfOI2T41mx0wX9sZLS3 xVmwIvroIxl81+NEX6t27OS3sbEdbcnc1GQPXhyiPIl7bUpGcUWi8bqDGvWDft1Y difS+JTOIeC+RlHX6qmjlPTSY2mv4DeS0+UTfqd7FGMq94X4NCbsRx60DoD5M0hU QswzAYXKaeANuX/Oy5T80lDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3W3U1nAO Us3Yr0VYjwfsEcrjow0wHwYDVR0jBBgwFoAUQadeBX4lBV8UqJ9TDHjiI7Hw9ZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzJFOEE3NTRBQzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4VXFKOVRESGppSTdIdzla QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWFkZUJYNGxCVjhVcUo5VERIamlJN0h3OVpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzJFOEE3NTRBQzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4 VXFKOVRESGppSTdIdzlaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJulvpZjRYm1KQXrjyWLxVaBMJ1dqpobG8rMN2aW7QCrCfa6HLQtmBJn EQqHwFjVTnM5lXGWXm02IdGGYYfwSY4JyCQgjjVyCPvMLrorFk65Ks+pmRcBbxbc ofxR5RIeVm9TBaDjX06WCMvsd8HDcUMshzq/d8E0Oo4ht0t4SDfVHq4CNQcLTiu3 92zSmrz/omtxpIhXGZ42dwoKhg1+g7R1lH316gU+WVcPPtkLHizGTsfFLqyoHqEP 1b2heZkK+Ps4FJfEi1FnVqOgohKc3ymIgecXGAFIimqAohEAxOtrTkQOkrhN5gpg Q29niOIoq/OkN2fG6Cs4F4TmVEBCjDg= -----END CERTIFICATE-----Generated at Mon Jul 21 13:16:15 2025 by rpki-client