$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: maWpx1+09QscTm+/eBJCB6yRZjk7b1g9Amg9UaWZVaU= Subject key identifier: 5F:39:F1:D8:A9:37:38:40:7B:85:32:F4:DB:AD:5B:71:C1:3F:99:86 Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 073D Signing time: Sat 06 Sep 2025 22:04:31 +0000 Manifest this update: Sat 06 Sep 2025 22:04:31 +0000 Manifest next update: Sat 13 Sep 2025 22:04:30 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: /CVRwkipUx9M0XS0HKR0yJHJYlwjF5C+bIWz4LaGdbw=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: Sep 6 22:04:31 2025 GMT Not After : Sep 13 22:04:30 2025 GMT Subject: CN=68bcafef-8c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:c3:b9:f1:3a:6b:d4:1a:11:0c:0e:4e:85: e6:e3:d9:d6:bd:c4:75:46:37:1d:76:39:a5:6e:8a: f8:45:09:5f:e8:79:90:83:ea:ba:10:fb:5c:30:a1: dc:b3:0d:84:53:32:2d:79:9a:ec:46:97:87:1d:70: 8d:8d:f0:3f:f0:f5:b1:dc:1d:cb:b2:99:19:d6:04: db:d2:90:9f:d4:fc:76:ca:90:f6:77:22:9d:f7:5f: 3a:5c:8f:29:ed:10:20:0e:50:1c:04:1a:4d:99:b3: 44:37:96:5e:4e:3e:2d:74:30:65:c9:c7:b9:1a:f3: ec:02:75:86:40:dc:19:2e:3f:5f:75:66:d8:b4:b2: 8a:28:2e:75:5f:1a:ca:34:b5:1a:45:af:c7:2f:61: 4a:5b:2e:27:71:d1:39:6e:7d:00:83:9b:ec:60:ea: 49:55:bf:6e:a9:dd:e6:e0:ec:82:52:8f:1b:3a:b7: 6f:56:f2:0d:98:84:5d:94:69:c8:62:58:83:c2:e0: c0:7e:d0:06:57:eb:d8:8d:2c:3f:d7:61:4f:ed:b6: 9e:ae:f4:86:71:4e:32:cf:36:00:79:54:52:75:f6: 6e:64:44:f2:9b:ec:d2:94:a2:34:9c:13:3b:8b:cd: 9b:2b:7c:7b:e0:81:74:8a:cf:57:50:4a:62:0b:d1: 33:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:39:F1:D8:A9:37:38:40:7B:85:32:F4:DB:AD:5B:71:C1:3F:99:86 X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:95:ed:50:01:60:6a:50:08:81:7a:c7:43:eb:9e:5a:ea:eb: 7f:08:50:bd:54:27:bf:70:43:02:81:0d:38:a3:82:8c:9b:f0: 2e:15:70:25:91:7a:01:85:7e:ff:7c:5c:d9:40:cf:7d:b0:6b: 60:6e:81:24:66:6b:a5:8c:2d:98:ad:d8:70:ca:da:b5:16:21: e9:9b:9e:37:dc:b1:9b:b0:41:c8:f8:d4:a0:73:e8:41:c5:a0: 32:fd:a1:90:3d:8a:3d:62:62:a2:f9:c7:5e:b1:6c:8c:f8:6d: 69:ca:62:41:43:02:40:7c:ec:51:7b:fa:2b:80:22:bb:34:5d: 05:cb:dc:98:8e:cb:6e:f6:1b:26:ab:6c:66:ed:75:96:83:1f: be:29:bf:7e:0c:75:89:e6:c5:d2:c2:53:69:79:c3:8d:ba:c6: 2e:ce:1b:8c:e1:ab:37:0d:65:93:8b:c1:2a:61:3c:88:77:05: 1d:53:ea:f0:b8:72:33:fb:cd:86:93:44:6b:8c:8b:bd:4d:bb: 4a:ea:c6:3d:79:e2:bb:6d:39:c5:f6:da:78:80:25:1e:80:8a: d9:de:45:35:8b:ef:60:03:2b:14:48:e7:c9:48:b7:17:b2:bf: 5e:db:74:7a:ee:80:81:bf:7d:ed:16:be:59:12:f9:49:1c:f8: f7:89:6a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjUwOTA2MjIwNDMxWhcNMjUwOTEzMjIwNDMwWjAYMRYwFAYD VQQDEw02OGJjYWZlZi04YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznfDufE6a9QaEQwOToXm49nWvcR1Rjcddjmlbor4RQlf6HmQg+q6EPtcMKHc sw2EUzIteZrsRpeHHXCNjfA/8PWx3B3LspkZ1gTb0pCf1Px2ypD2dyKd9186XI8p 7RAgDlAcBBpNmbNEN5ZeTj4tdDBlyce5GvPsAnWGQNwZLj9fdWbYtLKKKC51XxrK NLUaRa/HL2FKWy4ncdE5bn0Ag5vsYOpJVb9uqd3m4OyCUo8bOrdvVvINmIRdlGnI YliDwuDAftAGV+vYjSw/12FP7baervSGcU4yzzYAeVRSdfZuZETym+zSlKI0nBM7 i82bK3x74IF0is9XUEpiC9EzVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF858dip NzhAe4Uy9NutW3HBP5mGMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIle1QAWBqUAiBesdD655a6ut/CFC9VCe/cEMCgQ04o4KMm/AuFXAl kXoBhX7/fFzZQM99sGtgboEkZmuljC2Yrdhwytq1FiHpm5433LGbsEHI+NSgc+hB xaAy/aGQPYo9YmKi+cdesWyM+G1pymJBQwJAfOxRe/orgCK7NF0Fy9yYjstu9hsm q2xm7XWWgx++Kb9+DHWJ5sXSwlNpecONusYuzhuM4as3DWWTi8EqYTyIdwUdU+rw uHIz+82Gk0RrjIu9TbtK6sY9eeK7bTnF9tp4gCUegIrZ3kU1i+9gAysUSOfJSLcX sr9e23R67oCBv33tFr5ZEvlJHPj3iWrD -----END CERTIFICATE-----Generated at Sun Sep 7 03:54:45 2025 by rpki-client