$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: TPdKVyZwtwLeUJkSK9hdxzviokkIYF0EUoGCN7cwb9c= Subject key identifier: 23:66:B0:F8:D4:22:BE:A1:D4:1F:4C:A2:17:C5:E3:33:0F:77:62:D6 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 34C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 34BD Signing time: Sun 24 Aug 2025 14:37:41 +0000 Manifest this update: Sun 24 Aug 2025 14:37:41 +0000 Manifest next update: Sun 31 Aug 2025 14:37:41 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: jqldEgqF8N05Io/TPEdsKrb5e/UU7al7HRwDZa4UpC4=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 1QZz1HDQ1jRfLspLePE9D1zwt8zFnYwF7eP5N5O/9vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Aug 24 14:37:41 2025 GMT Not After : Aug 31 14:37:41 2025 GMT Subject: CN=68ab23b5-78ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:41:30:a0:9c:12:db:d3:25:37:60:5f:77: ba:7a:bf:cc:2f:d0:29:c7:aa:2a:f7:e8:68:bc:c8: 89:e9:df:8a:ef:50:d4:e2:45:ac:bd:8e:83:c3:f0: f6:8f:de:22:41:ca:70:f0:1a:25:97:75:47:92:b5: 8b:20:9f:5c:ce:af:f0:c6:e6:b9:f5:e0:cd:36:b9: 2b:37:e5:d9:c7:14:25:29:57:93:55:73:b7:4b:0d: 6e:22:36:2b:29:c0:f2:3b:d6:ec:b2:ae:f7:c7:ae: 6a:83:3c:b6:de:ae:a1:fe:d0:24:3c:93:c4:1f:85: ef:18:55:7a:c4:42:81:9e:5a:2c:e4:0e:18:57:da: 99:db:c8:c3:90:37:32:9a:a6:e8:9a:c7:0c:eb:45: ab:4d:7d:ae:9f:da:72:e5:43:84:44:66:e4:40:e1: f8:d4:a2:aa:89:fc:5b:27:ea:74:49:7e:cf:c3:0b: 2e:07:69:07:60:da:14:94:92:c4:2e:a5:3c:d6:58: 5d:96:36:52:c2:24:43:65:cc:0b:e3:1c:3f:0e:75: be:6d:b6:36:cc:14:ef:fa:3e:53:8b:79:ae:ec:26: 2b:cb:e4:1a:71:94:87:ed:29:92:63:74:1a:b6:ef: dd:53:5f:84:33:dc:c8:2b:7b:83:81:7a:87:39:e8: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:B0:F8:D4:22:BE:A1:D4:1F:4C:A2:17:C5:E3:33:0F:77:62:D6 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:59:38:d9:f2:b4:00:53:bc:92:b1:5e:84:a8:eb:bb:12:1a: b1:c0:c8:ac:e4:33:dd:4a:07:c5:bc:ae:c9:1e:48:01:11:5b: 36:62:b3:e6:9e:3a:31:91:a1:9e:7f:0a:3e:40:96:52:b9:90: 9c:c9:79:dc:d7:91:3c:40:09:eb:82:51:7f:90:21:ec:52:cd: ca:ba:4b:22:4f:13:bb:2e:34:36:98:a6:82:15:4f:51:77:66: 0b:52:04:09:74:af:4d:50:18:b6:d0:30:e5:b8:fe:60:2b:23: 28:3c:c1:c2:9b:ac:67:0b:3a:6f:4c:d2:f9:f2:d7:e0:86:11: 7a:58:7a:f1:0e:fc:be:59:47:46:32:fa:e9:b5:99:9f:98:73: db:88:89:5c:d6:4a:32:64:f9:91:3c:d2:c1:60:33:17:80:d9: 9f:70:9c:23:ea:ee:e9:14:b6:a1:02:7f:5d:5d:7c:34:15:93: 4f:f6:ff:00:87:8a:36:e9:d7:15:5a:02:41:ea:95:7c:89:f5: d4:ab:43:be:10:02:0b:c1:af:b3:9d:6e:3d:bb:98:8a:d1:db: f3:63:71:0d:f4:ef:6b:c1:e5:eb:d3:dc:f0:3c:98:96:33:a3: e8:fa:a6:98:6e:0e:16:b3:be:cc:ac:cd:32:e9:17:f0:cb:21: eb:80:63:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUwODI0MTQzNzQxWhcNMjUwODMxMTQzNzQxWjAYMRYwFAYD VQQDEw02OGFiMjNiNS03OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqchBMKCcEtvTJTdgX3e6er/ML9Apx6oq9+hovMiJ6d+K71DU4kWsvY6Dw/D2 j94iQcpw8Boll3VHkrWLIJ9czq/wxua59eDNNrkrN+XZxxQlKVeTVXO3Sw1uIjYr KcDyO9bssq73x65qgzy23q6h/tAkPJPEH4XvGFV6xEKBnlos5A4YV9qZ28jDkDcy mqbomscM60WrTX2un9py5UOERGbkQOH41KKqifxbJ+p0SX7PwwsuB2kHYNoUlJLE LqU81lhdljZSwiRDZcwL4xw/DnW+bbY2zBTv+j5Ti3mu7CYry+QacZSH7SmSY3Qa tu/dU1+EM9zIK3uDgXqHOehX+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNmsPjU Ir6h1B9MohfF4zMPd2LWMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWTjZ8rQAU7ySsV6EqOu7EhqxwMis5DPdSgfFvK7JHkgBEVs2YrPm njoxkaGefwo+QJZSuZCcyXnc15E8QAnrglF/kCHsUs3KuksiTxO7LjQ2mKaCFU9R d2YLUgQJdK9NUBi20DDluP5gKyMoPMHCm6xnCzpvTNL58tfghhF6WHrxDvy+WUdG MvrptZmfmHPbiIlc1koyZPmRPNLBYDMXgNmfcJwj6u7pFLahAn9dXXw0FZNP9v8A h4o26dcVWgJB6pV8ifXUq0O+EAILwa+znW49u5iK0dvzY3EN9O9rweXr09zwPJiW M6Po+qaYbg4Ws77MrM0y6RfwyyHrgGNo -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:04 2025 by rpki-client