$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json) Hash identifier: ZDO7NmmnzImGxTh1A3RO4ialx8Eo4Wt6KfXyoQR2i08= Subject key identifier: BE:A2:7F:21:F0:16:20:87:CD:2A:43:E6:25:EC:3B:70:88:E8:64:47 Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 322B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft Manifest number: 3222 Signing time: Sun 20 Jul 2025 15:26:34 +0000 Manifest this update: Sun 20 Jul 2025 15:26:34 +0000 Manifest next update: Sun 27 Jul 2025 15:26:34 +0000 Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: GBMlOBMnLXjU6mUU1AjrFkEDAAxaLQ/FJxL7+ebPqvs=) 2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12843 (0x322b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: Jul 20 15:26:34 2025 GMT Not After : Jul 27 15:26:34 2025 GMT Subject: CN=687d0aaa-2573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:62:61:a0:cd:82:06:a7:3a:3b:84:8b:8d: 59:46:5e:a6:0d:cc:5f:7f:83:55:34:de:20:b1:e9: c5:1c:9c:61:83:45:41:26:63:47:6b:fe:43:eb:84: fe:83:9b:c5:a0:3e:0a:4d:0f:ad:86:8e:85:be:e7: be:65:65:a4:69:27:da:9e:e1:c3:64:52:6f:93:d3: 15:0e:aa:3f:c8:e5:f8:3a:66:ef:9c:de:4d:46:f2: 8c:cf:c3:84:5b:cb:12:5f:32:ec:ed:fe:d2:51:74: 2f:fb:6b:05:63:72:b6:43:09:17:65:a6:ce:6d:37: ce:54:bc:70:15:50:ea:d0:a4:4e:d8:2c:81:f3:1f: 3c:f7:b4:cf:89:06:c7:93:92:54:05:7a:5c:64:2f: d8:b0:f3:ae:04:9b:13:aa:f2:5a:eb:a2:fc:dd:c7: a9:7c:56:68:0f:7e:5c:ab:b8:10:17:82:14:1d:88: 0e:3e:4d:cd:e0:89:04:8c:68:ff:01:b6:81:ba:94: f6:c0:7f:fe:25:74:72:0e:9c:49:49:14:c8:6b:24: 4c:c7:4e:42:1e:e0:49:d7:4b:22:82:f9:a6:4e:14: 66:33:24:50:27:f8:c9:da:ec:d9:e5:6b:a4:d4:70: ab:73:41:0c:4c:57:8d:93:79:22:63:d9:cb:df:b5: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:7F:21:F0:16:20:87:CD:2A:43:E6:25:EC:3B:70:88:E8:64:47 X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:82:19:91:98:2d:95:a1:39:b3:e1:52:a8:c7:da:76:cf:4c: 26:7b:e3:21:4e:e6:9c:fd:d7:8d:d9:91:38:11:23:d0:9d:45: 7f:0f:e0:07:ff:bf:3e:99:56:eb:37:ba:1b:c1:35:5e:e1:69: 8d:59:ef:95:9b:1c:35:df:b9:40:1a:f1:84:e9:1a:5e:f5:35: 61:0b:bd:0d:67:ce:90:1d:90:48:a0:80:57:fa:19:ea:56:f7: 43:f2:bb:28:29:92:43:6c:ed:77:14:79:2a:6b:b4:9b:4b:a3: 36:5f:8e:f0:c7:76:9e:d1:2c:94:a2:c8:11:41:e8:43:55:d5: 8e:ec:14:48:98:e2:0f:55:26:ee:5d:28:b7:1b:ab:ca:85:c5: 9e:2e:ba:f8:2d:c2:86:08:3f:1e:a1:44:5f:01:e3:7e:b6:64: 99:d3:74:c7:42:16:90:b4:83:f8:23:6e:3f:ea:78:95:1d:ed: 1e:c8:1b:a2:2c:33:8a:1b:2d:ed:d1:b5:09:49:0c:ad:21:9e: 8e:dc:b2:de:f6:61:42:be:c3:8f:d4:c7:9e:92:8d:a6:df:55: 88:b1:ea:bf:39:91:c0:8d:8b:bb:11:9f:5e:e4:69:f7:4a:80: 07:8e:4d:5c:a5:cb:af:68:86:ac:72:46:27:9d:56:cc:f2:b2: 46:4a:8d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjUwNzIwMTUyNjM0WhcNMjUwNzI3MTUyNjM0WjAYMRYwFAYD VQQDEw02ODdkMGFhYS0yNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA439iYaDNgganOjuEi41ZRl6mDcxff4NVNN4gsenFHJxhg0VBJmNHa/5D64T+ g5vFoD4KTQ+tho6Fvue+ZWWkaSfanuHDZFJvk9MVDqo/yOX4OmbvnN5NRvKMz8OE W8sSXzLs7f7SUXQv+2sFY3K2QwkXZabObTfOVLxwFVDq0KRO2CyB8x8897TPiQbH k5JUBXpcZC/YsPOuBJsTqvJa66L83cepfFZoD35cq7gQF4IUHYgOPk3N4IkEjGj/ AbaBupT2wH/+JXRyDpxJSRTIayRMx05CHuBJ10sigvmmThRmMyRQJ/jJ2uzZ5Wuk 1HCrc0EMTFeNk3kiY9nL37W2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6ifyHw FiCHzSpD5iXsO3CI6GRHMB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANghmRmC2VoTmz4VKox9p2z0wme+MhTuac/deN2ZE4ESPQnUV/D+AH /78+mVbrN7obwTVe4WmNWe+Vmxw137lAGvGE6Rpe9TVhC70NZ86QHZBIoIBX+hnq VvdD8rsoKZJDbO13FHkqa7SbS6M2X47wx3ae0SyUosgRQehDVdWO7BRImOIPVSbu XSi3G6vKhcWeLrr4LcKGCD8eoURfAeN+tmSZ03THQhaQtIP4I24/6niVHe0eyBui LDOKGy3t0bUJSQytIZ6O3LLe9mFCvsOP1Meeko2m31WIseq/OZHAjYu7EZ9e5Gn3 SoAHjk1cpcuvaIasckYnnVbM8rJGSo3u -----END CERTIFICATE-----Generated at Mon Jul 21 13:18:08 2025 by rpki-client