$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: ARuynRPEITvUREeD6KqTOo5de/DfvMqAGZJxKAcN0Kc= Subject key identifier: 98:FA:06:A4:78:9E:09:46:B3:ED:7D:63:59:8B:30:CE:8F:FC:72:EC Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0ADE Signing time: Sun 20 Jul 2025 19:34:38 +0000 Manifest this update: Sun 20 Jul 2025 19:34:37 +0000 Manifest next update: Sun 27 Jul 2025 19:34:37 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: BQejZmJ+6fY3JSMpXviAUCAH8OBqOy9M/GV10RKiL14=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: XMZdqD9gB3JqFRbYSCLRYPYkSAmXVoSI5VBqXbHS+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: Jul 20 19:34:37 2025 GMT Not After : Jul 27 19:34:37 2025 GMT Subject: CN=687d44cd-fdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:bf:8d:b6:7b:47:02:3d:f5:07:4c:56:f2: 3f:11:c5:51:1b:20:a6:24:a5:e6:f1:7b:4c:df:26: 0e:14:24:58:8d:3b:af:8a:ff:ff:83:22:ce:64:98: 31:66:ae:c7:3c:cb:e1:03:a4:f2:52:ff:c5:ed:92: 4b:ae:6d:8f:09:9c:fc:68:08:16:58:23:88:6f:f3: bb:1f:1b:1e:77:cc:2e:2c:90:89:24:e0:1a:da:46: b9:90:57:9a:ed:60:2e:98:2f:6a:17:1a:e9:0f:fe: 67:49:88:8a:2c:49:05:c9:7a:37:61:ec:f9:53:d7: 6d:81:40:47:f5:eb:17:73:4e:c4:03:0b:40:95:87: b0:7b:0d:5b:59:20:62:6d:5d:98:ad:44:70:24:42: eb:b3:bd:a4:b5:8a:4e:53:93:93:0e:01:8e:bd:f4: 29:7c:a8:8f:b6:ba:ec:db:3f:4a:d3:81:37:81:45: 58:b3:0e:ef:9b:0b:ba:b8:6e:e5:83:d3:cb:1b:dc: 4a:5a:b4:d3:25:16:72:9b:51:56:65:99:9d:4a:e5: 46:83:02:29:da:68:f5:26:58:d5:a3:85:9e:52:1e: d2:27:26:51:c5:8b:5b:ea:f7:cc:3c:9e:7a:ee:a4: bf:ef:54:5b:60:be:65:65:de:e6:76:32:2d:16:1f: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FA:06:A4:78:9E:09:46:B3:ED:7D:63:59:8B:30:CE:8F:FC:72:EC X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:43:81:3a:95:e1:82:ea:7b:58:1c:00:eb:68:8c:ae:48:d8: d5:b1:e0:6f:bd:3b:94:c8:61:52:13:f4:3d:99:90:11:bb:79: 1b:e3:a5:d4:d4:3e:df:da:69:2c:4e:d6:75:f9:e5:4a:29:e2: f2:e5:18:e4:3f:9e:ae:0f:44:4a:29:87:be:81:87:e5:00:4e: 42:21:4c:e7:46:ab:3a:2d:c9:3a:bd:19:5f:94:fc:b5:23:dd: 68:e4:5d:1b:cf:a2:3f:8a:10:a1:d0:ea:e3:fa:74:91:5e:e2: 31:e6:8f:ae:34:bb:e1:85:4b:9f:98:1b:55:bc:0e:d4:cc:a2: f2:74:f0:4d:5c:92:bc:3c:19:26:b7:0c:56:38:bd:0f:fb:32: 21:75:0c:50:3e:f0:58:8a:8d:3e:f1:97:e5:e1:53:8e:9e:d2: 2f:1c:82:83:10:7c:2f:5a:36:2e:a7:da:5f:9d:45:82:83:da: 8a:93:6f:7a:af:bd:3e:fd:e5:6d:29:53:7a:a6:4a:8a:af:b1: fc:9d:d4:27:bb:e6:e7:cf:62:c0:7c:a4:6e:86:ad:d8:a4:0d: 53:3d:65:f0:87:93:ab:9f:2f:9a:9c:29:0c:11:99:f6:ab:97: ae:3d:39:48:3a:db:41:c5:d4:65:d7:44:d4:34:40:e4:9e:04: e0:c2:7e:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjUwNzIwMTkzNDM3WhcNMjUwNzI3MTkzNDM3WjAYMRYwFAYD VQQDEw02ODdkNDRjZC1mZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArty/jbZ7RwI99QdMVvI/EcVRGyCmJKXm8XtM3yYOFCRYjTuviv//gyLOZJgx Zq7HPMvhA6TyUv/F7ZJLrm2PCZz8aAgWWCOIb/O7Hxsed8wuLJCJJOAa2ka5kFea 7WAumC9qFxrpD/5nSYiKLEkFyXo3Yez5U9dtgUBH9esXc07EAwtAlYewew1bWSBi bV2YrURwJELrs72ktYpOU5OTDgGOvfQpfKiPtrrs2z9K04E3gUVYsw7vmwu6uG7l g9PLG9xKWrTTJRZym1FWZZmdSuVGgwIp2mj1JljVo4WeUh7SJyZRxYtb6vfMPJ56 7qS/71RbYL5lZd7mdjItFh8j/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJj6BqR4 nglGs+19Y1mLMM6P/HLsMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoQ4E6leGC6ntYHADraIyuSNjVseBvvTuUyGFSE/Q9mZARu3kb46XU 1D7f2mksTtZ1+eVKKeLy5RjkP56uD0RKKYe+gYflAE5CIUznRqs6Lck6vRlflPy1 I91o5F0bz6I/ihCh0Orj+nSRXuIx5o+uNLvhhUufmBtVvA7UzKLydPBNXJK8PBkm twxWOL0P+zIhdQxQPvBYio0+8Zfl4VOOntIvHIKDEHwvWjYup9pfnUWCg9qKk296 r70+/eVtKVN6pkqKr7H8ndQnu+bnz2LAfKRuhq3YpA1TPWXwh5Orny+anCkMEZn2 q5euPTlIOttBxdRl10TUNEDkngTgwn5u -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:06 2025 by rpki-client