$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: dU4qXH26Q4tFvKS1SrTdwlkawYAK49maYZoLVPJ8D2o= Subject key identifier: 4E:22:6F:C0:20:F6:2F:64:A1:A1:A3:DA:8F:6C:3C:32:D3:3D:61:D9 Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: 88 Signing time: Fri 25 Jul 2025 06:55:36 +0000 Manifest this update: Fri 25 Jul 2025 06:55:36 +0000 Manifest next update: Fri 01 Aug 2025 06:55:36 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: KG7q0CYcoOvCBG1c/D+VPpm7NSB4l9Q3x9c+/i4E8yw=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 06:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Jul 25 06:55:36 2025 GMT Not After : Aug 1 06:55:36 2025 GMT Subject: CN=68832a68-020d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:ab:fc:38:3b:46:76:58:6c:92:86:e1:d2: 54:40:7b:87:33:4f:b1:58:c5:be:08:c4:28:1b:7f: 02:e5:cd:99:7c:e4:fc:aa:5f:cf:ec:df:64:54:bf: e3:4f:72:aa:f8:81:ca:f5:1f:08:17:89:e7:ca:1f: e8:e5:05:c2:72:c6:db:71:9f:4e:31:33:8c:33:23: 42:5b:d4:27:6a:8a:12:4a:29:13:4f:44:d9:03:5d: 87:a7:b2:79:92:b0:cf:88:aa:fd:11:d4:53:67:ed: 18:12:59:a3:8d:70:bd:ab:0c:2d:95:1b:18:61:1e: 18:ee:13:25:3d:9b:98:9b:e8:f0:1e:11:e7:97:c7: 50:0c:ad:2a:06:fb:ba:d0:71:7f:d1:39:68:41:2c: 39:4f:9e:04:af:ac:df:0a:07:52:28:bc:56:2f:30: d9:89:cd:d3:67:86:05:6b:20:4a:b3:a5:b6:20:ef: ad:b7:f3:ce:7d:66:21:0a:37:8e:8a:5d:97:5b:83: 82:37:02:0e:21:30:03:31:ed:cd:02:d5:f6:4b:27: 19:77:d9:6c:ff:82:c3:82:79:72:a8:bc:92:3c:cd: 7a:7c:b1:9c:99:35:38:1d:46:02:7d:46:6f:4a:9b: 60:b8:38:27:69:32:26:30:d7:b5:f0:65:63:bc:6d: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:6F:C0:20:F6:2F:64:A1:A1:A3:DA:8F:6C:3C:32:D3:3D:61:D9 X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0b:bc:c0:3f:53:09:ee:2f:6a:9c:aa:8a:9b:a5:37:ab:f9: e1:c9:a4:64:9d:df:a1:b4:e2:c8:59:d6:99:1b:46:b8:6c:63: 33:49:12:1d:b6:55:a6:7c:73:e0:3d:26:e4:8b:90:79:90:3d: 78:4f:f3:85:85:75:64:e3:cd:2b:5d:b4:9e:8f:77:a9:a3:a4: f8:5f:c9:0d:ee:79:2f:f2:c0:29:1c:4c:5e:17:6b:9d:6a:e7: 73:ab:31:ed:f2:7f:fe:27:4a:0b:de:95:6a:c6:a4:98:32:cc: 9a:2a:c2:11:3e:d6:26:d3:48:cc:1c:04:9a:3f:78:21:e2:22: f4:8b:8e:62:69:8e:75:8d:d6:cd:ac:3c:71:61:17:51:91:cc: e5:02:40:cd:99:be:03:a5:88:0c:9c:6e:09:7a:62:3d:a5:55: 34:27:7e:4d:77:45:ee:00:64:a1:d3:16:94:45:99:ae:28:4f: 0a:c3:84:25:8a:da:fd:c6:dc:cc:51:30:86:fc:8d:5e:53:15: ef:09:8b:96:1e:ad:2f:04:79:a4:4c:4a:7f:47:60:5e:40:77: d7:d7:44:bf:32:19:8c:91:84:08:a1:29:46:56:1e:f2:60:c4: 2a:d4:6c:39:29:7e:29:e2:a0:1a:31:45:d7:46:27:36:88:93: 45:21:f0:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5 N0YwMEY1RjUwHhcNMjUwNzI1MDY1NTM2WhcNMjUwODAxMDY1NTM2WjAYMRYwFAYD VQQDEw02ODgzMmE2OC0wMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqyr/Dg7RnZYbJKG4dJUQHuHM0+xWMW+CMQoG38C5c2ZfOT8ql/P7N9kVL/j T3Kq+IHK9R8IF4nnyh/o5QXCcsbbcZ9OMTOMMyNCW9QnaooSSikTT0TZA12Hp7J5 krDPiKr9EdRTZ+0YElmjjXC9qwwtlRsYYR4Y7hMlPZuYm+jwHhHnl8dQDK0qBvu6 0HF/0TloQSw5T54Er6zfCgdSKLxWLzDZic3TZ4YFayBKs6W2IO+tt/POfWYhCjeO il2XW4OCNwIOITADMe3NAtX2SycZd9ls/4LDgnlyqLySPM16fLGcmTU4HUYCfUZv SptguDgnaTImMNe18GVjvG2jgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4ib8Ag 9i9koaGj2o9sPDLTPWHZMB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5 ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu UllXWTNqd1pxaGVYOEE5ZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTC7zAP1MJ7i9qnKqKm6U3q/nhyaRknd+htOLIWdaZG0a4bGMzSRId tlWmfHPgPSbki5B5kD14T/OFhXVk480rXbSej3epo6T4X8kN7nkv8sApHExeF2ud audzqzHt8n/+J0oL3pVqxqSYMsyaKsIRPtYm00jMHASaP3gh4iL0i45iaY51jdbN rDxxYRdRkczlAkDNmb4DpYgMnG4JemI9pVU0J35Nd0XuAGSh0xaURZmuKE8Kw4Ql itr9xtzMUTCG/I1eUxXvCYuWHq0vBHmkTEp/R2BeQHfX10S/MhmMkYQIoSlGVh7y YMQq1Gw5KX4p4qAaMUXXRic2iJNFIfCy -----END CERTIFICATE-----Generated at Fri Jul 25 13:30:54 2025 by rpki-client