$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: 0nFpaR7MTL0L1f6TI4n0QCY4bJWHeZtcJbRUq1tdARg= Subject key identifier: E8:82:E8:F5:A8:67:F5:88:95:FA:C4:CE:E2:FA:4F:89:C1:60:29:E5 Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 04AE Signing time: Fri 05 Sep 2025 00:15:08 +0000 Manifest this update: Fri 05 Sep 2025 00:15:08 +0000 Manifest next update: Fri 12 Sep 2025 00:15:08 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: iMHaGEE8nIo32qM0LGPh60Y5l2YVADmWPjMyzDqSHrE=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: Sep 5 00:15:08 2025 GMT Not After : Sep 12 00:15:08 2025 GMT Subject: CN=68ba2b8c-09f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:cc:a3:64:f7:bc:53:49:5c:05:73:28:93: 94:76:b4:fa:a8:6b:27:63:9e:15:17:76:ba:02:da: 0e:9b:98:1d:af:93:97:8a:7d:58:0c:69:5e:fa:5b: c2:74:09:42:5e:bf:18:68:16:bd:00:25:95:58:1e: 84:b4:7d:9e:a5:b2:c6:d6:88:d7:93:9f:40:7f:37: e4:5e:a8:4d:47:69:cb:ea:2c:ea:7e:92:17:49:4d: c6:9a:47:d9:10:34:30:2f:e1:8a:e6:86:af:cf:6b: 89:28:fe:1b:96:8e:59:48:30:df:0f:0c:bf:a4:05: 72:78:df:09:65:f5:0e:6e:92:5e:75:42:51:ec:52: e4:21:19:9f:dc:2a:7e:05:68:7e:c8:98:ad:64:ff: 32:2a:67:fc:7f:4b:0f:71:24:2d:dc:a2:d7:29:b8: d7:58:27:c2:c6:ab:f1:18:9e:f0:94:88:d1:89:3f: e9:a3:61:e4:ed:c0:4e:37:ce:6c:12:e4:aa:41:81: 19:2c:a6:b6:21:20:9e:ea:c5:f5:8f:32:c8:d0:ce: cd:fc:68:48:e6:c4:14:d5:96:5f:2c:0b:38:da:bd: 46:27:18:cf:c2:db:91:64:d3:98:eb:ce:9c:f8:6e: 1d:43:b1:72:db:d7:ff:04:9d:ba:79:38:d5:ee:02: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:82:E8:F5:A8:67:F5:88:95:FA:C4:CE:E2:FA:4F:89:C1:60:29:E5 X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6a:78:32:46:b4:00:4d:14:83:9d:56:b1:d0:59:b7:9a:d3: 6f:ae:75:57:bc:19:2d:0a:ac:a8:36:4f:7a:b1:95:ac:4d:be: b6:40:0a:34:ca:08:66:64:35:a6:d0:49:e5:68:c5:fc:f9:68: 97:b9:ca:7c:d9:a5:db:dc:0b:c2:0f:30:95:42:39:33:cb:2f: 1f:a7:77:45:43:29:2d:2e:fb:33:a3:8f:01:e1:ae:f5:97:62: ea:b5:51:68:dd:49:77:0d:ed:65:d5:49:c8:c4:6f:23:2e:67: 35:07:53:94:51:15:b2:c7:fe:23:53:62:18:53:c2:f7:7a:d7: 07:d4:fa:e9:19:e3:21:b3:80:70:1a:dd:5f:37:31:c3:7a:1f: 34:96:ce:5d:a6:22:88:5f:8e:41:5a:91:e7:95:03:ad:13:14: b0:d3:dd:5f:d3:bb:51:bf:64:e2:9b:24:e7:f3:e1:c5:59:14: 29:1b:ff:4d:b8:73:d7:64:74:b3:71:14:a6:03:dc:33:b6:b6: 77:63:f9:44:ee:d6:63:ae:9f:70:3c:82:76:98:8a:77:15:16: 28:85:88:5a:80:bf:0d:3c:3b:a5:fd:9a:77:29:e3:cb:44:44: 71:5d:52:34:12:13:ea:b9:30:5a:a3:bd:16:bf:b5:0a:3f:70: 63:2d:3c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUwOTA1MDAxNTA4WhcNMjUwOTEyMDAxNTA4WjAYMRYwFAYD VQQDEw02OGJhMmI4Yy0wOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIPMo2T3vFNJXAVzKJOUdrT6qGsnY54VF3a6AtoOm5gdr5OXin1YDGle+lvC dAlCXr8YaBa9ACWVWB6EtH2epbLG1ojXk59AfzfkXqhNR2nL6izqfpIXSU3GmkfZ EDQwL+GK5oavz2uJKP4blo5ZSDDfDwy/pAVyeN8JZfUObpJedUJR7FLkIRmf3Cp+ BWh+yJitZP8yKmf8f0sPcSQt3KLXKbjXWCfCxqvxGJ7wlIjRiT/po2Hk7cBON85s EuSqQYEZLKa2ISCe6sX1jzLI0M7N/GhI5sQU1ZZfLAs42r1GJxjPwtuRZNOY686c +G4dQ7Fy29f/BJ26eTjV7gKaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiC6PWo Z/WIlfrEzuL6T4nBYCnlMB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGangyRrQATRSDnVax0Fm3mtNvrnVXvBktCqyoNk96sZWsTb62QAo0 yghmZDWm0EnlaMX8+WiXucp82aXb3AvCDzCVQjkzyy8fp3dFQyktLvszo48B4a71 l2LqtVFo3Ul3De1l1UnIxG8jLmc1B1OUURWyx/4jU2IYU8L3etcH1PrpGeMhs4Bw Gt1fNzHDeh80ls5dpiKIX45BWpHnlQOtExSw091f07tRv2TimyTn8+HFWRQpG/9N uHPXZHSzcRSmA9wztrZ3Y/lE7tZjrp9wPIJ2mIp3FRYohYhagL8NPDul/Zp3KePL RERxXVI0EhPquTBao70Wv7UKP3BjLTzV -----END CERTIFICATE-----Generated at Sat Sep 6 14:24:17 2025 by rpki-client