$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: niNhDepV+FiN8LksnjYQ7rvMTKQah8AmpjcETHN3xz8= Subject key identifier: 58:62:3F:4D:5D:AB:02:73:19:78:8B:E4:CA:1E:C9:AC:05:01:B4:1B Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: B8 Signing time: Fri 05 Sep 2025 06:26:26 +0000 Manifest this update: Fri 05 Sep 2025 06:26:25 +0000 Manifest next update: Fri 12 Sep 2025 06:26:25 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: bM3fYYW6I7HqMwoQL5jZK1/RtyQmDuYrslDePK8uWXs=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Sep 5 06:26:25 2025 GMT Not After : Sep 12 06:26:25 2025 GMT Subject: CN=68ba8291-1389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:2a:9b:97:ce:16:0b:84:7c:39:4c:fe:09: 78:35:79:ad:92:a3:66:70:99:4f:65:a6:4b:d6:d2: 5c:2f:c6:32:c1:05:cb:c1:92:ee:2e:2c:1d:5a:1b: bb:38:1b:58:4a:ac:02:60:1e:fe:3a:7f:dd:2d:fc: d4:36:3c:a0:67:54:8d:fb:1e:13:ed:b0:b3:cb:ab: 8b:0e:22:58:cf:15:1e:3a:e5:1e:f5:bb:13:ba:cc: ef:1e:9e:a1:f5:77:ba:5e:5f:01:db:de:6a:e4:80: 87:f3:5d:37:60:b3:73:7d:a6:c7:67:8f:97:93:64: 45:60:bc:19:6b:d4:a1:b5:71:6f:9d:e0:ca:63:4a: 2d:e3:b5:2b:e0:c3:2c:8c:b4:5f:03:a5:18:19:1a: d4:00:6d:17:b4:03:54:0a:18:a7:97:e3:5e:b7:70: a0:2c:a8:98:26:b9:91:74:9d:66:5b:88:ff:73:fc: 04:12:92:19:e2:52:cd:79:0d:51:28:3d:9d:86:4f: b5:26:63:54:61:ed:9b:c4:2b:61:07:a3:61:a9:98: dd:bb:45:59:d0:f6:20:59:43:c5:5b:93:3d:27:d8: b1:3f:01:60:21:70:ec:4d:0e:50:61:0c:ae:ea:31: 1e:d5:a2:05:9e:cd:b7:a0:57:a1:d7:04:0f:0d:08: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:3F:4D:5D:AB:02:73:19:78:8B:E4:CA:1E:C9:AC:05:01:B4:1B X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4a:4e:51:1d:de:89:a0:50:72:f9:a6:b9:f2:f2:b8:3c:ca: 11:2e:01:81:62:76:f8:9e:00:28:19:5b:7c:81:e9:38:77:13: 7c:96:16:a0:d2:ab:fe:60:42:a4:bb:76:7f:2e:e8:ed:05:5c: 81:bb:18:a2:45:d9:09:26:7d:f7:fe:93:c8:1f:fa:8d:4f:24: 40:6f:c0:6b:56:06:07:ab:98:51:b0:20:06:36:70:90:d0:cf: 81:ea:5d:c2:9a:5c:2a:22:c3:bd:5b:c1:0d:8c:82:ec:55:39: 54:ee:43:2c:c1:2f:79:da:67:99:2e:5c:da:6e:49:d6:d0:31: 2c:af:3a:6a:e8:b5:51:06:eb:6f:3c:17:8a:b7:27:84:7f:cc: f6:95:1c:3b:3f:c8:da:14:db:a3:62:64:df:fa:46:ee:aa:5c: 11:ba:ca:28:ea:d7:4e:2a:4a:bc:d7:4b:25:61:b2:ec:d1:eb: dc:98:d6:09:39:db:92:91:06:0a:b6:70:d3:20:49:ee:86:09: b7:97:25:d9:84:16:fc:d4:31:b8:35:5a:a8:ff:80:23:8e:f1: fc:14:19:b7:d9:97:82:e8:84:cf:02:5f:3d:39:7b:9a:ac:09: bb:2a:44:e8:73:1f:3e:39:fd:e4:c0:33:7a:a7:cf:11:a1:86: 33:e2:5c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUwOTA1MDYyNjI1WhcNMjUwOTEyMDYyNjI1WjAYMRYwFAYD VQQDEw02OGJhODI5MS0xMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXIqm5fOFguEfDlM/gl4NXmtkqNmcJlPZaZL1tJcL8YywQXLwZLuLiwdWhu7 OBtYSqwCYB7+On/dLfzUNjygZ1SN+x4T7bCzy6uLDiJYzxUeOuUe9bsTuszvHp6h 9Xe6Xl8B295q5ICH8103YLNzfabHZ4+Xk2RFYLwZa9ShtXFvneDKY0ot47Ur4MMs jLRfA6UYGRrUAG0XtANUChinl+Net3CgLKiYJrmRdJ1mW4j/c/wEEpIZ4lLNeQ1R KD2dhk+1JmNUYe2bxCthB6NhqZjdu0VZ0PYgWUPFW5M9J9ixPwFgIXDsTQ5QYQyu 6jEe1aIFns23oFeh1wQPDQhjywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhiP01d qwJzGXiL5MoeyawFAbQbMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjSk5RHd6JoFBy+aa58vK4PMoRLgGBYnb4ngAoGVt8gek4dxN8lhag 0qv+YEKku3Z/LujtBVyBuxiiRdkJJn33/pPIH/qNTyRAb8BrVgYHq5hRsCAGNnCQ 0M+B6l3CmlwqIsO9W8ENjILsVTlU7kMswS952meZLlzabknW0DEsrzpq6LVRButv PBeKtyeEf8z2lRw7P8jaFNujYmTf+kbuqlwRusoo6tdOKkq810slYbLs0evcmNYJ OduSkQYKtnDTIEnuhgm3lyXZhBb81DG4NVqo/4AjjvH8FBm32ZeC6ITPAl89OXua rAm7KkTocx8+Of3kwDN6p88RoYYz4lwI -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:12 2025 by rpki-client