$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: DUa2qMBlpW7jtjIfSpmlWrakMPYOApKQCPdhAONDTR0= Subject key identifier: 90:6C:B1:1A:74:4E:95:B7:28:69:16:C8:A6:FA:33:39:2A:AF:BD:B7 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 0753 Signing time: Thu 04 Sep 2025 19:44:05 +0000 Manifest this update: Thu 04 Sep 2025 19:44:05 +0000 Manifest next update: Thu 11 Sep 2025 19:44:05 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: QQ5vXL9tUHeq5kFbU0j9o/wpGWux0ZY8ht9q6BeboME=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Sep 4 19:44:05 2025 GMT Not After : Sep 11 19:44:05 2025 GMT Subject: CN=68b9ec05-aec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:16:f8:1a:7d:73:78:67:7f:17:1b:a7:50: 95:df:e0:5a:34:a0:7b:ba:7a:95:2b:64:fe:4b:e4: f9:ec:15:bd:01:ca:87:42:f5:84:f3:95:3e:eb:cd: b5:80:12:65:cb:8e:7c:23:ad:02:b3:58:81:6b:a6: 25:59:6e:e9:20:16:10:0e:52:95:45:99:3d:c0:60: 4f:3d:24:1b:d5:b4:3c:fb:5d:29:6e:4b:2e:94:37: 98:a2:58:82:8b:f6:51:96:b2:55:25:b9:e2:54:b9: a7:66:72:a1:93:23:ba:d8:57:04:6c:ad:a2:61:f5: e2:0d:09:1b:a0:97:31:3f:36:6e:e6:39:ba:f9:10: d2:70:c7:e6:86:6c:74:1c:bf:f3:23:50:ed:bd:25: 94:cf:47:82:79:cf:bc:e1:f0:6b:7e:8b:4d:68:26: 32:b1:ea:f0:a6:fc:fb:13:42:ff:ab:ca:0e:ee:14: d8:e0:e9:93:4d:ee:5b:a4:c9:cb:9b:c7:8e:d5:b5: a4:4a:f6:e8:e7:55:31:77:1b:ce:33:1a:99:64:4c: 14:4c:af:9f:54:2d:87:10:01:98:19:a7:2a:e3:97: bd:e3:b6:28:83:7a:22:38:9a:eb:7a:48:4b:25:9a: 8f:75:2a:1c:ff:ba:d9:28:6e:cc:57:ab:4e:1b:65: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6C:B1:1A:74:4E:95:B7:28:69:16:C8:A6:FA:33:39:2A:AF:BD:B7 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:01:02:9b:c4:be:8b:19:3f:21:75:b3:56:e5:f1:63:f8:ce: 99:57:56:b1:65:1e:6c:70:f1:49:de:c9:68:b1:2b:3b:03:71: cf:86:e5:0e:35:93:41:99:15:f6:51:94:14:48:8c:56:38:26: 5f:a8:ff:9a:f3:c4:58:0a:e0:0d:ec:1d:78:dc:52:b4:77:a3: 5d:c0:f2:e6:4f:0d:61:60:9f:d9:3c:fb:2f:ab:01:0b:29:8a: 1b:2c:5e:03:1b:81:69:cc:a6:bd:e7:95:91:9b:0e:35:ab:2c: b3:2f:ee:fd:c6:bc:1f:6c:8b:77:48:96:70:75:d2:ea:e5:58: d4:55:db:e8:d0:ec:62:8e:f2:6a:80:fd:ef:89:84:19:52:bd: 6b:5b:ed:ce:b8:25:57:63:e3:0b:ff:da:dd:a0:95:a7:7b:27: 6f:93:db:15:53:de:72:5b:65:90:0b:f0:a0:76:83:d7:e0:8a: 4f:a6:a0:ab:12:e3:ea:e0:90:29:10:65:d9:46:18:b4:53:b3: ec:79:c4:63:4b:7e:d1:45:28:6d:8d:56:c2:ec:d3:a0:2f:c3: 9f:50:23:f8:25:70:d3:7e:ef:98:cf:27:b4:f3:12:db:79:95: 4d:85:2e:c7:d2:c1:e0:f2:b1:2b:f4:9b:ef:8e:76:51:e0:52: 62:9e:dc:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUwOTA0MTk0NDA1WhcNMjUwOTExMTk0NDA1WjAYMRYwFAYD VQQDEw02OGI5ZWMwNS1hZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYIW+Bp9c3hnfxcbp1CV3+BaNKB7unqVK2T+S+T57BW9AcqHQvWE85U+6821 gBJly458I60Cs1iBa6YlWW7pIBYQDlKVRZk9wGBPPSQb1bQ8+10pbksulDeYoliC i/ZRlrJVJbniVLmnZnKhkyO62FcEbK2iYfXiDQkboJcxPzZu5jm6+RDScMfmhmx0 HL/zI1DtvSWUz0eCec+84fBrfotNaCYyserwpvz7E0L/q8oO7hTY4OmTTe5bpMnL m8eO1bWkSvbo51UxdxvOMxqZZEwUTK+fVC2HEAGYGacq45e947Yog3oiOJrrekhL JZqPdSoc/7rZKG7MV6tOG2XjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBssRp0 TpW3KGkWyKb6Mzkqr723MB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuAQKbxL6LGT8hdbNW5fFj+M6ZV1axZR5scPFJ3slosSs7A3HPhuUO NZNBmRX2UZQUSIxWOCZfqP+a88RYCuAN7B143FK0d6NdwPLmTw1hYJ/ZPPsvqwEL KYobLF4DG4FpzKa955WRmw41qyyzL+79xrwfbIt3SJZwddLq5VjUVdvo0OxijvJq gP3viYQZUr1rW+3OuCVXY+ML/9rdoJWneydvk9sVU95yW2WQC/CgdoPX4IpPpqCr EuPq4JApEGXZRhi0U7PsecRjS37RRShtjVbC7NOgL8OfUCP4JXDTfu+Yzye08xLb eZVNhS7H0sHg8rEr9JvvjnZR4FJinty1 -----END CERTIFICATE-----Generated at Fri Sep 5 10:53:07 2025 by rpki-client