$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: 0jK2oz5XmYXGwHwWO5psmX8AOVtImT91V3cK34o2wCw= Subject key identifier: F5:73:E3:97:E8:43:41:B4:8E:63:3A:57:A0:D9:33:C4:AF:7F:5B:C4 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3462 Signing time: Sun 20 Jul 2025 15:22:26 +0000 Manifest this update: Sun 20 Jul 2025 15:22:25 +0000 Manifest next update: Sun 27 Jul 2025 15:22:25 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: zC1Z4L5rMyDVeRfIPVz5/VPnWmWnqnWG51q/95I/6NM=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: i7V57Dro1PeoCEaseJh0ivldyfQ81BauNS5GWJcFu1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13412 (0x3464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Jul 20 15:22:25 2025 GMT Not After : Jul 27 15:22:25 2025 GMT Subject: CN=687d09b1-86a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:89:21:97:28:99:fe:87:b2:c8:ed:c4:86: a0:65:39:2f:72:0f:60:d1:a8:92:df:96:28:1d:98: b7:5f:b9:ba:2e:8a:4f:ed:10:5b:6b:7e:9e:87:2d: 2e:27:61:13:75:c9:b6:33:5a:69:37:65:85:19:5d: 5d:58:ab:14:d4:25:fc:1e:2d:2d:4e:80:14:21:f5: d7:38:15:b2:1e:12:73:1d:7b:b3:22:f4:9b:2b:64: 26:ff:1f:1a:5c:6b:64:e0:20:af:2e:b8:7c:6f:ac: fb:02:9e:f9:af:9a:d1:ba:4e:02:8b:2b:8b:e4:c8: 8d:0d:8f:35:63:e2:39:88:7b:39:15:e3:98:92:20: 6d:d8:41:21:c9:cd:47:4e:ce:66:08:2b:bf:0f:c5: b0:f6:70:02:38:f7:8a:40:08:5b:48:c9:fd:d6:5b: ed:bd:c7:d6:5e:a9:64:58:9f:77:00:da:e1:ff:f2: e9:50:d0:33:60:ae:39:ba:4c:18:4e:4d:39:1e:5b: b6:c7:d9:6b:e9:c4:ca:b3:12:53:dd:ce:5e:c4:85: 46:6a:4f:5c:94:c4:4b:1a:d6:a3:ff:d6:ae:f2:0b: f7:86:4d:64:a4:14:1f:5f:f1:3e:49:3d:a8:74:85: 4b:92:c8:c0:ea:77:ec:33:22:35:a2:0e:a9:23:7e: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:73:E3:97:E8:43:41:B4:8E:63:3A:57:A0:D9:33:C4:AF:7F:5B:C4 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:53:88:36:ed:f8:96:96:2e:21:e7:a9:06:79:4c:a8:f9: 7f:e8:c5:d1:35:6f:d3:d4:f5:07:12:7c:cf:68:23:cb:e5:28: 41:33:31:2f:50:fd:7e:7e:00:f4:ec:31:6a:25:10:3e:38:49: f5:44:c9:4c:15:73:3a:9b:d6:fc:9c:4f:28:75:ec:c6:d4:fd: e0:68:a2:c8:c1:8b:ee:e5:80:66:64:56:e2:7f:df:01:78:94: c4:12:b4:5f:70:1d:4a:46:5b:6e:5d:7d:a9:06:66:ba:97:ac: 18:c7:71:a6:cc:27:38:7f:51:a9:4a:f9:db:c2:aa:f9:4f:a8: ea:ef:e4:6f:1f:48:23:8e:99:be:f6:99:7f:72:2b:12:41:09: 05:85:71:48:a3:a6:27:ff:b3:84:f4:27:0c:f4:1d:2b:25:8e: 4e:8a:ff:9a:8a:d0:dd:11:49:63:58:dd:bc:0e:31:f6:d3:76: e0:6a:50:2c:79:2e:a9:da:77:81:79:e9:00:42:3d:1f:03:63: c7:9c:9e:2c:c7:81:65:d8:50:e5:8e:b0:92:a0:ce:37:7a:61: 48:00:5c:b7:a1:4b:a1:27:11:fb:47:f4:f9:ff:9b:81:46:48: a9:d7:44:de:97:62:b0:ff:88:3f:fa:c6:71:0c:5e:00:6d:b5: d1:e4:b4:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjUwNzIwMTUyMjI1WhcNMjUwNzI3MTUyMjI1WjAYMRYwFAYD VQQDEw02ODdkMDliMS04NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMKJIZcomf6HssjtxIagZTkvcg9g0aiS35YoHZi3X7m6LopP7RBba36ehy0u J2ETdcm2M1ppN2WFGV1dWKsU1CX8Hi0tToAUIfXXOBWyHhJzHXuzIvSbK2Qm/x8a XGtk4CCvLrh8b6z7Ap75r5rRuk4CiyuL5MiNDY81Y+I5iHs5FeOYkiBt2EEhyc1H Ts5mCCu/D8Ww9nACOPeKQAhbSMn91lvtvcfWXqlkWJ93ANrh//LpUNAzYK45ukwY Tk05Hlu2x9lr6cTKsxJT3c5exIVGak9clMRLGtaj/9au8gv3hk1kpBQfX/E+ST2o dIVLksjA6nfsMyI1og6pI36X8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVz45fo Q0G0jmM6V6DZM8Svf1vEMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFj1OINu34lpYuIeepBnlMqPl/6MXRNW/T1PUHEnzPaCPL5ShBMzEv UP1+fgD07DFqJRA+OEn1RMlMFXM6m9b8nE8odezG1P3gaKLIwYvu5YBmZFbif98B eJTEErRfcB1KRltuXX2pBma6l6wYx3GmzCc4f1GpSvnbwqr5T6jq7+RvH0gjjpm+ 9pl/cisSQQkFhXFIo6Yn/7OE9CcM9B0rJY5Oiv+aitDdEUljWN28DjH203bgalAs eS6p2neBeekAQj0fA2PHnJ4sx4Fl2FDljrCSoM43emFIAFy3oUuhJxH7R/T5/5uB Rkip10Tel2Kw/4g/+sZxDF4AbbXR5LTG -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:55 2025 by rpki-client