$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json) Hash identifier: FUKCtB9wahClbEvq6/32Yx6JdJT7uHxnsY87m1nULHc= Subject key identifier: 42:9A:79:F7:CA:3D:0A:70:B4:84:EA:12:64:E9:47:13:0A:FF:B7:FC Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft Manifest number: 01E0 Signing time: Tue 09 Sep 2025 02:52:07 +0000 Manifest this update: Tue 09 Sep 2025 02:52:07 +0000 Manifest next update: Tue 16 Sep 2025 02:52:07 +0000 Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: V3tIG/GUq4DWbb8Qw750m5fbqHTkBwTwiGc4jq1HSvk=) 2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: yQWifcUacebm0QWmZ7UB602HfF6Yw1unRDBx3kif0PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Validity Not Before: Sep 9 02:52:07 2025 GMT Not After : Sep 16 02:52:07 2025 GMT Subject: CN=68bf9657-bbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:38:b9:04:79:73:62:27:8f:9d:66:39:38: f7:4a:24:fe:f9:10:f7:35:c6:f7:da:27:97:90:cd: 4e:50:75:95:e6:36:b8:94:75:27:81:1c:1b:2b:f7: bb:ff:87:90:c8:b6:15:fc:dc:3e:9f:c4:16:17:c2: 69:33:7b:fd:50:e0:9c:26:e8:dc:6f:8d:72:ec:2c: 77:cd:39:9f:2b:fc:61:b2:41:b5:04:8c:78:7f:fa: 16:ee:60:79:63:8d:f5:2f:f3:64:99:5d:2b:b1:16: 64:ae:b4:4a:79:53:58:6d:01:71:96:3b:c7:e4:90: 2a:71:3a:16:28:c4:25:dc:5f:16:cf:76:7c:e5:83: 68:30:fd:a9:f7:98:3c:58:62:19:01:24:c5:52:df: d1:42:3d:11:4d:67:7f:08:e3:b8:06:c7:1c:8b:ee: ed:c7:30:9b:70:8f:37:a3:a3:fb:e0:8b:b2:50:93: 65:71:b2:b6:1d:9c:fc:5c:7f:24:93:17:67:b6:39: 23:02:57:e9:60:e1:1f:9c:70:de:22:10:52:41:b7: 70:be:33:f4:1b:c5:ac:c2:fd:15:82:a3:10:6f:55: 6a:09:e5:f6:29:92:1e:d6:a6:71:7b:0b:9d:33:8e: 49:28:9a:d4:31:21:8e:c0:37:b1:4c:68:93:a1:33: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9A:79:F7:CA:3D:0A:70:B4:84:EA:12:64:E9:47:13:0A:FF:B7:FC X509v3 Authority Key Identifier: keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:2e:43:9e:e9:8b:62:39:9c:53:c3:ef:a8:94:ea:cc:3d: 8f:d6:29:a1:94:d6:76:d1:87:38:eb:12:ee:e6:61:6d:9e:d8: 87:be:24:f0:26:7e:b2:a6:5c:5d:0c:7e:d7:f3:4e:c6:cd:1f: dd:13:7a:8a:8a:03:b2:98:24:26:91:58:7f:32:e1:60:05:bf: e4:2c:89:a4:b0:05:1e:09:06:6a:33:61:c7:75:1e:24:00:4a: 21:27:80:b0:0e:25:b0:02:0f:01:23:fd:fc:d6:72:cb:e5:00: ac:f9:e6:c3:32:11:f7:5b:be:14:c5:9f:30:cf:93:dd:f0:dc: ea:e4:f8:9e:81:02:96:78:b1:42:e7:1e:39:08:5e:00:5f:ba: dd:fc:4a:8e:53:5d:49:41:6b:69:f8:4f:57:29:88:9e:bc:3d: 22:b6:82:74:2f:b3:e8:4d:18:b9:0f:23:28:2f:07:e6:7e:50: b8:b2:36:16:2c:8c:27:05:2d:ac:bf:5f:56:25:38:e9:50:ba: 77:44:44:26:f4:e2:52:1b:34:af:56:24:fb:83:9e:12:0a:43: db:cc:4b:23:26:78:dc:49:85:af:22:bc:75:52:0e:c0:85:85: a0:bf:0c:a4:f8:9f:fc:5b:f3:45:d5:d2:05:d7:df:ec:e5:45: c1:19:00:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx RUJCRTg3QUEwHhcNMjUwOTA5MDI1MjA3WhcNMjUwOTE2MDI1MjA3WjAYMRYwFAYD VQQDEw02OGJmOTY1Ny1iYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZk4uQR5c2Inj51mOTj3SiT++RD3Ncb32ieXkM1OUHWV5ja4lHUngRwbK/e7 /4eQyLYV/Nw+n8QWF8JpM3v9UOCcJujcb41y7Cx3zTmfK/xhskG1BIx4f/oW7mB5 Y431L/NkmV0rsRZkrrRKeVNYbQFxljvH5JAqcToWKMQl3F8Wz3Z85YNoMP2p95g8 WGIZASTFUt/RQj0RTWd/COO4Bscci+7txzCbcI83o6P74IuyUJNlcbK2HZz8XH8k kxdntjkjAlfpYOEfnHDeIhBSQbdwvjP0G8Wswv0VgqMQb1VqCeX2KZIe1qZxewud M45JKJrUMSGOwDexTGiToTOHkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKaeffK PQpwtITqEmTpRxMK/7f8MB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0 RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD a2pTbDlVeFNPN1FldS1oNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqOS5DnumLYjmcU8PvqJTqzD2P1imhlNZ20Yc46xLu5mFtntiHviTw Jn6yplxdDH7X807GzR/dE3qKigOymCQmkVh/MuFgBb/kLImksAUeCQZqM2HHdR4k AEohJ4CwDiWwAg8BI/381nLL5QCs+ebDMhH3W74UxZ8wz5Pd8Nzq5PiegQKWeLFC 5x45CF4AX7rd/EqOU11JQWtp+E9XKYievD0itoJ0L7PoTRi5DyMoLwfmflC4sjYW LIwnBS2sv19WJTjpULp3REQm9OJSGzSvViT7g54SCkPbzEsjJnjcSYWvIrx1Ug7A hYWgvwyk+J/8W/NF1dIF19/s5UXBGQDT -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:15 2025 by rpki-client