$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: /EEsAHHQ7s4B2BcoeYnXVcP9NKauWcqPiT/MyEmLhuk= Subject key identifier: E0:B7:D9:D5:48:7A:F0:20:C6:48:74:33:A0:72:05:08:22:F5:1A:08 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0C79 Signing time: Sun 20 Jul 2025 18:17:34 +0000 Manifest this update: Sun 20 Jul 2025 18:17:34 +0000 Manifest next update: Sun 27 Jul 2025 18:17:34 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: wcXc/fuomReWFTR+URLlwijbgE59Rlircez+UA2TjQY=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Jul 20 18:17:34 2025 GMT Not After : Jul 27 18:17:34 2025 GMT Subject: CN=687d32be-e82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:eb:25:ef:9b:4c:05:5e:b9:8d:63:e0:09: 45:cd:52:58:d0:87:51:45:7d:2a:c5:47:cb:9a:2c: 88:5e:df:1c:04:e6:a2:65:76:b6:6a:89:50:39:4f: 1a:d1:e3:cb:7d:b0:96:be:78:95:d8:90:f1:2e:c2: 73:40:e7:a8:dd:1d:60:2d:6c:56:0d:1b:1d:ec:f6: 31:c1:9f:5e:54:1a:0c:2c:64:50:83:19:bb:c3:12: a9:1e:bb:04:cd:6e:0a:b1:2b:0b:9a:e7:a4:06:27: db:98:0d:39:ac:a4:1d:d6:fb:fd:88:c7:cb:77:d9: 9d:1a:9d:dc:56:53:c1:5e:ff:f0:96:d2:2b:fe:73: db:36:3d:52:7c:10:28:c2:7c:1d:eb:df:bd:1c:48: 4a:ee:a6:84:ef:ea:6a:c5:e2:d3:ec:90:02:2b:bb: eb:7c:5f:5c:44:aa:da:05:63:cf:83:c8:f1:7c:88: 5a:61:14:36:48:1d:a4:dc:09:ef:db:5f:4b:f2:0d: f0:c5:e4:50:34:4a:14:a8:5d:fa:a0:29:94:94:31: 02:94:11:23:5d:8b:35:6f:c8:1c:4f:32:9f:3b:83: 25:06:b3:11:fe:c7:21:7c:28:b0:ae:09:7f:d0:6b: 3a:d8:48:04:02:9a:86:2e:1b:98:2e:91:b3:36:42: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B7:D9:D5:48:7A:F0:20:C6:48:74:33:A0:72:05:08:22:F5:1A:08 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:90:d3:fd:8e:88:4c:dd:10:b1:54:04:03:2f:33:ee:66:a5: bd:5a:cd:40:0f:c9:ba:a4:df:ec:6e:99:fb:03:f3:ca:d7:b4: cf:07:b6:7f:51:b0:eb:10:1b:bb:f3:9d:d4:b7:23:ea:c8:55: 84:13:ca:f3:7a:46:f5:2c:ec:e0:af:1c:fe:25:2e:19:fd:74: 36:17:cc:ba:20:16:34:33:a8:1b:e1:74:bb:94:a5:3d:c4:41: 99:20:c3:2d:07:b9:23:ff:27:fe:ca:e9:fe:74:2f:41:2a:68: 74:1d:4a:54:4e:06:3e:72:f4:bc:ef:46:01:2f:46:6d:52:42: 95:5d:99:a9:f8:71:cb:0f:38:b9:de:f8:45:5a:93:f5:23:3d: 24:50:39:47:c1:42:e8:b4:0e:89:f6:ca:46:35:b2:25:4b:9d: 0e:51:d8:7e:a8:11:b0:fb:73:4f:af:f0:b8:56:13:e1:ca:d0: 36:32:e3:4b:ee:55:dc:d1:32:48:7c:12:ed:ef:f8:ba:d6:71: 8c:29:14:5c:a4:7c:12:aa:d3:1c:08:bd:b8:f8:e9:ba:6b:61: 3d:ff:f5:18:72:84:54:4d:9b:36:af:99:c9:70:a5:5f:27:a5: a8:96:92:c2:ba:da:7e:c2:68:07:68:2d:15:43:ad:7c:70:e9: 33:53:7c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUwNzIwMTgxNzM0WhcNMjUwNzI3MTgxNzM0WjAYMRYwFAYD VQQDEw02ODdkMzJiZS1lODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdfrJe+bTAVeuY1j4AlFzVJY0IdRRX0qxUfLmiyIXt8cBOaiZXa2aolQOU8a 0ePLfbCWvniV2JDxLsJzQOeo3R1gLWxWDRsd7PYxwZ9eVBoMLGRQgxm7wxKpHrsE zW4KsSsLmuekBifbmA05rKQd1vv9iMfLd9mdGp3cVlPBXv/wltIr/nPbNj1SfBAo wnwd69+9HEhK7qaE7+pqxeLT7JACK7vrfF9cRKraBWPPg8jxfIhaYRQ2SB2k3Anv 219L8g3wxeRQNEoUqF36oCmUlDEClBEjXYs1b8gcTzKfO4MlBrMR/schfCiwrgl/ 0Gs62EgEApqGLhuYLpGzNkKI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC32dVI evAgxkh0M6ByBQgi9RoIMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBskNP9johM3RCxVAQDLzPuZqW9Ws1AD8m6pN/sbpn7A/PK17TPB7Z/ UbDrEBu7853UtyPqyFWEE8rzekb1LOzgrxz+JS4Z/XQ2F8y6IBY0M6gb4XS7lKU9 xEGZIMMtB7kj/yf+yun+dC9BKmh0HUpUTgY+cvS870YBL0ZtUkKVXZmp+HHLDzi5 3vhFWpP1Iz0kUDlHwULotA6J9spGNbIlS50OUdh+qBGw+3NPr/C4VhPhytA2MuNL 7lXc0TJIfBLt7/i61nGMKRRcpHwSqtMcCL24+Om6a2E9//UYcoRUTZs2r5nJcKVf J6WolpLCutp+wmgHaC0VQ618cOkzU3yz -----END CERTIFICATE-----Generated at Mon Jul 21 07:00:30 2025 by rpki-client