$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json) Hash identifier: 42Z5pv9o14v/ecM+2eiyc4oAeN00ybbsnTruJ68ycpM= Subject key identifier: 6E:F3:93:49:F1:79:42:DC:8E:FC:96:97:63:B5:A1:57:B3:2F:2E:4D Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft Manifest number: 40 Signing time: Thu 21 Aug 2025 07:41:00 +0000 Manifest this update: Thu 21 Aug 2025 07:41:00 +0000 Manifest next update: Thu 28 Aug 2025 07:41:00 +0000 Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: H6iyd5fcV+fosJS/2VkvsgIrwaED5gcYW7XU+2VupXI=) 2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Validity Not Before: Aug 21 07:41:00 2025 GMT Not After : Aug 28 07:41:00 2025 GMT Subject: CN=68a6cd8c-1793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:1e:50:59:4e:f7:63:a0:53:a7:99:88:b7: 76:e7:ae:00:28:1c:52:ce:41:56:0f:1c:71:ae:00: c8:4f:8a:5d:a3:d5:b4:1b:19:52:07:0b:55:60:60: 31:3e:45:a9:41:21:80:02:21:4a:b6:ca:6a:a5:fe: 4e:43:3e:a5:f4:a4:6a:40:c8:69:bf:d5:28:74:89: af:c7:fb:d6:a2:a1:b0:69:f4:13:0a:10:59:1b:c4: 99:e8:d4:ca:98:c8:73:55:e2:5d:ef:90:dc:f3:7a: f8:10:3d:83:b1:29:b3:29:7b:0c:31:3e:a7:13:46: 74:29:5d:f1:51:bb:18:90:ed:c9:e2:8d:53:f6:02: f9:ee:db:4f:92:63:9d:4d:bf:e3:6a:4f:f8:0d:27: 8e:8c:57:84:34:f7:2c:5b:35:01:95:1d:0d:d6:29: 03:0f:aa:d4:ca:bb:6f:bc:54:c2:a4:6d:95:13:3c: 5a:7a:55:28:7b:3e:f0:b7:67:80:5f:3b:fd:77:57: e1:6c:b4:0b:7b:6b:69:c7:a9:59:04:f8:b8:2b:89: 87:fc:0e:b2:a1:25:96:58:a5:d3:be:99:d8:2f:f6: eb:fc:b4:9a:99:07:af:47:7f:7d:a4:f0:d9:15:29: 34:a1:22:cd:5d:2f:80:90:7c:83:df:2b:1c:f0:01: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F3:93:49:F1:79:42:DC:8E:FC:96:97:63:B5:A1:57:B3:2F:2E:4D X509v3 Authority Key Identifier: keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:5d:78:21:47:ee:b4:70:1b:78:19:ae:e4:3e:6a:4c:0b:80: 90:56:8d:8a:85:80:63:f3:ec:70:fe:12:50:84:ea:74:06:11: de:08:96:2f:29:4c:ee:1d:b0:3c:c3:1c:f5:99:4b:cd:55:aa: 72:3a:ff:ec:93:7e:0f:c1:b4:1c:99:26:ac:08:8c:c0:71:a4: b2:1f:72:5a:65:9e:21:22:9b:c6:ad:45:66:0f:3f:ea:a2:62: 59:e7:12:7c:95:bf:33:b9:8a:92:66:0b:44:bb:72:41:6f:87: 49:29:16:82:c1:f8:48:6a:7b:37:bf:56:64:0b:6d:b8:4a:1b: 54:dd:af:d4:37:b3:35:0d:12:2d:65:c7:77:15:6e:ef:cd:ac: da:6f:87:fe:c9:4f:20:76:2e:d1:95:a6:c0:4f:0b:c0:de:43: a8:41:77:11:2f:c0:10:c8:d0:db:08:29:c1:5a:7d:91:39:78: ce:4c:31:ef:09:d3:bd:9e:59:6d:57:d5:17:71:1f:00:0c:27: 96:ef:ce:1f:83:35:47:a1:e9:e5:8e:13:ab:d9:c9:9e:59:a6: 78:ae:3e:77:fc:f6:54:39:2c:18:d5:01:84:f7:91:d4:5f:53: f4:84:1f:86:cf:87:a6:a0:16:ef:57:44:ee:6e:5a:b6:79:3e: 69:1b:67:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEJDMTExMC8GA1UEBRMoNDI3NzNBQTg0MUQ3MEU3M0M0RUY3RDI3Qzk4RkNCOUQ0 NDIwQzQ2QzAeFw0yNTA4MjEwNzQxMDBaFw0yNTA4MjgwNzQxMDBaMBgxFjAUBgNV BAMTDTY4YTZjZDhjLTE3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8JB5QWU73Y6BTp5mIt3bnrgAoHFLOQVYPHHGuAMhPil2j1bQbGVIHC1VgYDE+ RalBIYACIUq2ymql/k5DPqX0pGpAyGm/1Sh0ia/H+9aiobBp9BMKEFkbxJno1MqY yHNV4l3vkNzzevgQPYOxKbMpewwxPqcTRnQpXfFRuxiQ7cnijVP2Avnu20+SY51N v+NqT/gNJ46MV4Q09yxbNQGVHQ3WKQMPqtTKu2+8VMKkbZUTPFp6VSh7PvC3Z4Bf O/13V+FstAt7a2nHqVkE+LgriYf8DrKhJZZYpdO+mdgv9uv8tJqZB69Hf32k8NkV KTShIs1dL4CQfIPfKxzwAVWJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbvOTSfF5 QtyO/JaXY7WhV7MvLk0wHwYDVR0jBBgwFoAUQnc6qEHXDnPE730nyY/LnUQgxGww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QkMxLzE1MkQ1Qzg2MUI2 OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hH dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5jNnFFSFhEblBFNzMwbnlZX0xuVVFneEd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5Q RTczMG55WV9MblVRZ3hHdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANBdeCFH7rRwG3gZruQ+akwLgJBWjYqFgGPz7HD+ElCE6nQGEd4Ili8p TO4dsDzDHPWZS81VqnI6/+yTfg/BtByZJqwIjMBxpLIfclplniEim8atRWYPP+qi YlnnEnyVvzO5ipJmC0S7ckFvh0kpFoLB+Ehqeze/VmQLbbhKG1Tdr9Q3szUNEi1l x3cVbu/NrNpvh/7JTyB2LtGVpsBPC8DeQ6hBdxEvwBDI0NsIKcFafZE5eM5MMe8J 072eWW1X1RdxHwAMJ5bvzh+DNUeh6eWOE6vZyZ5ZpniuPnf89lQ5LBjVAYT3kdRf U/SEH4bPh6agFu9XRO5uWrZ5PmkbZ6o= -----END CERTIFICATE-----Generated at Fri Aug 22 16:17:03 2025 by rpki-client