$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft File: Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json) Hash identifier: appwYQN1CHzpFSpPT/qs321KjDErxEste45dfeBPm7U= Subject key identifier: 1E:A9:60:45:8D:DB:CE:A5:85:54:8D:F2:11:ED:8D:E1:7B:7C:44:E9 Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 Certificate issuer: /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft Manifest number: 3E Signing time: Wed 17 Sep 2025 08:14:28 +0000 Manifest this update: Wed 17 Sep 2025 08:14:28 +0000 Manifest next update: Wed 24 Sep 2025 08:14:28 +0000 Files and hashes: 1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: h9pV96HL+sVyWBnVxBQDJgY8wSmL1cZA0bReeLw5tmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Validity Not Before: Sep 17 08:14:28 2025 GMT Not After : Sep 24 08:14:28 2025 GMT Subject: CN=68ca6de4-9dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:05:44:fc:8b:4c:ab:6d:89:a2:4b:1b:2f: 33:6b:ec:d7:bf:c6:f2:eb:66:db:90:c3:e1:a3:c4: ec:a0:0a:f0:3e:34:0d:8c:b3:82:2a:bd:ed:03:cd: ef:71:bf:94:66:04:b6:c4:bb:2a:80:86:99:0e:84: a7:3a:5b:19:40:1e:90:59:51:84:d7:44:85:c0:8d: 3f:91:89:48:11:cb:4e:d4:5e:fc:2b:17:cd:fe:2e: bd:8c:ad:b0:80:71:df:7b:c8:db:03:d8:c4:5a:1d: 7c:db:73:26:dc:94:3b:bf:ea:84:e6:c5:39:d4:0e: a4:c3:eb:f3:7e:51:66:49:da:98:07:f9:67:eb:0a: 9d:2f:0f:63:21:9e:36:43:14:f2:b9:a6:f5:3c:ec: 7f:ba:e8:d6:aa:12:5d:77:81:83:4a:bd:1a:5a:02: ab:c0:c4:07:7d:ae:a4:1d:4b:ad:ac:1b:6d:ce:b2: fe:26:62:fd:11:8f:2f:db:db:24:ff:8c:82:02:a9: 8d:dc:ac:89:fc:a9:e6:6d:b4:90:eb:bb:50:f5:8a: 34:fc:18:a4:6c:bc:bc:a6:f4:ec:9b:1b:47:11:f7: 2b:0c:33:0c:40:16:91:e1:5f:62:54:c7:b0:d7:c7: bd:65:4c:21:fe:3c:61:4f:6b:02:a8:68:49:33:8a: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:60:45:8D:DB:CE:A5:85:54:8D:F2:11:ED:8D:E1:7B:7C:44:E9 X509v3 Authority Key Identifier: keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:96:94:90:7a:a4:1d:42:f0:3d:73:3d:f9:04:ff:2a:55:7b: 40:af:5c:7c:82:98:94:fe:96:98:2a:49:34:93:53:5d:78:62: 25:da:5d:ed:18:e6:89:92:87:58:60:65:ab:be:8e:a1:fc:61: 30:62:c0:e9:84:ba:19:31:3a:dc:dd:eb:ef:44:b2:f8:ac:b7: f0:a9:cf:20:8d:86:b2:56:e4:e3:3a:38:9d:3d:2f:ac:60:f4: 21:d1:30:d2:22:a6:b4:4f:df:c3:52:e8:c6:d5:4c:67:c3:d4: ec:90:aa:9c:16:2d:87:67:22:ac:cf:0b:51:83:c4:9a:85:27: 62:6d:3f:ae:b0:a3:df:c3:b0:f2:45:3f:f6:b9:12:e5:ba:b5: 4e:21:bf:16:a2:0c:86:d1:ec:a9:85:50:eb:13:7e:43:8f:8e: b8:05:21:93:5b:05:df:8f:eb:b0:89:8c:37:8a:12:21:72:57: 2b:82:ef:2d:e7:5d:ab:f0:6f:d9:8a:71:2b:1a:3e:8f:d0:e1: af:84:b3:f8:86:7e:7c:71:f8:b5:03:a1:ac:8d:e5:a2:47:5a: f0:6c:e9:04:75:b7:34:ea:72:ff:0c:bc:5c:71:a6:ce:69:03: 6b:f3:49:fe:04:01:1c:ea:38:8e:ac:a2:bb:1e:42:50:a8:cb: d8:a5:88:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDcxRDExMC8GA1UEBRMoMzJBNzIxRDMwNUI1MjkzOUIxNkE3MEVFRTM3OUZCOUM4 MjEwOUExMjAeFw0yNTA5MTcwODE0MjhaFw0yNTA5MjQwODE0MjhaMBgxFjAUBgNV BAMTDTY4Y2E2ZGU0LTlkZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkSwVE/ItMq22JoksbLzNr7Ne/xvLrZtuQw+GjxOygCvA+NA2Ms4Iqve0Dze9x v5RmBLbEuyqAhpkOhKc6WxlAHpBZUYTXRIXAjT+RiUgRy07UXvwrF83+Lr2MrbCA cd97yNsD2MRaHXzbcybclDu/6oTmxTnUDqTD6/N+UWZJ2pgH+WfrCp0vD2MhnjZD FPK5pvU87H+66NaqEl13gYNKvRpaAqvAxAd9rqQdS62sG23Osv4mYv0Rjy/b2yT/ jIICqY3crIn8qeZttJDru1D1ijT8GKRsvLym9OybG0cR9ysMMwxAFpHhX2JUx7DX x71lTCH+PGFPawKoaEkziq5DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHqlgRY3b zqWFVI3yEe2N4Xt8ROkwHwYDVR0jBBgwFoAUMqch0wW1KTmxanDu43n7nIIQmhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJENzFELzI2MkM5QjAyMzZD RTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1RteGFuRHU0M243bklJUW1o SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXFjaDB3VzFLVG14YW5EdTQzbjduSUlRbWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE NzFELzI2MkM5QjAyMzZDRTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1Rt eGFuRHU0M243bklJUW1oSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmWlJB6pB1C8D1zPfkE/ypVe0CvXHyCmJT+lpgqSTSTU114YiXaXe0Y 5omSh1hgZau+jqH8YTBiwOmEuhkxOtzd6+9Esvist/CpzyCNhrJW5OM6OJ09L6xg 9CHRMNIiprRP38NS6MbVTGfD1OyQqpwWLYdnIqzPC1GDxJqFJ2JtP66wo9/DsPJF P/a5EuW6tU4hvxaiDIbR7KmFUOsTfkOPjrgFIZNbBd+P67CJjDeKEiFyVyuC7y3n Xavwb9mKcSsaPo/Q4a+Es/iGfnxx+LUDoayN5aJHWvBs6QR1tzTqcv8MvFxxps5p A2vzSf4EARzqOI6sorseQlCoy9iliPc= -----END CERTIFICATE-----Generated at Fri Sep 19 01:31:52 2025 by rpki-client