$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: DSqIFg9EBBceDq1M3/O95Sdl5FgD7JRh4mWNVNPzSLs= Subject key identifier: 68:5D:2F:3F:89:68:DD:BD:95:4B:41:33:1E:6F:09:8A:E9:8A:2F:DE Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: A4 Signing time: Wed 17 Sep 2025 06:55:37 +0000 Manifest this update: Wed 17 Sep 2025 06:55:37 +0000 Manifest next update: Wed 24 Sep 2025 06:55:37 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: TFSYqHjdBIFWx/NyGSuhzAmvHr1Romzs5Fh77WyMmmg=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Sep 17 06:55:37 2025 GMT Not After : Sep 24 06:55:37 2025 GMT Subject: CN=68ca5b69-f58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:13:ec:d7:c5:49:61:08:6d:ef:a0:6e:c9: 50:d4:04:88:ff:70:1b:f2:88:7c:02:fc:23:49:c3: 3b:2e:3d:30:da:97:55:a3:64:38:3e:5f:3d:66:f5: 47:1e:4b:c3:6d:a7:21:0f:04:0c:b4:7e:04:7c:f1: a5:cb:73:03:f1:35:07:2f:21:82:e5:69:16:7a:0e: 23:40:49:36:1f:77:85:7f:40:be:00:62:f7:72:db: 1b:70:8a:57:66:88:a3:d4:18:de:c3:94:88:bd:09: b3:3e:11:c7:3a:72:b6:82:fa:69:8c:50:86:f0:f8: b3:2b:9d:dd:2f:ff:5d:67:83:96:9a:61:2f:ef:6c: 98:bf:a2:10:ab:d2:34:22:fa:82:79:cb:51:60:ab: 86:34:09:81:5b:c9:8b:0a:3d:5d:a3:97:69:73:9d: 79:b7:8d:06:d3:ac:c7:75:82:d3:bd:7c:c7:69:92: 7a:cb:b8:af:ff:a3:c1:36:49:6c:41:09:b5:7c:d1: 20:0e:43:f3:ba:ea:8d:26:a3:b7:e1:36:82:7c:8b: 5c:2c:1d:38:ef:02:0f:72:bb:54:49:18:1d:e2:de: e2:79:96:9a:32:c8:79:d2:a1:70:1e:4a:dd:9e:7e: 1a:6e:07:1a:3c:9d:67:0b:77:be:da:b5:db:b1:c6: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:2F:3F:89:68:DD:BD:95:4B:41:33:1E:6F:09:8A:E9:8A:2F:DE X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:18:ae:06:1b:bc:51:f5:4d:c2:59:df:23:1d:a5:86:1f:d8: d6:f8:e9:27:c6:3c:1f:31:a3:b2:02:df:ec:ee:0f:32:3e:16: 58:33:19:c8:b1:04:f2:4d:2f:f3:04:5d:43:34:4d:52:c4:da: 5f:51:11:9a:6e:13:b1:c0:4d:60:44:18:98:99:33:c2:24:f0: 11:87:e8:46:52:ee:66:20:02:2a:0e:b0:3e:c8:73:18:6a:53: c8:3c:e5:4f:95:c3:48:47:df:ad:7d:23:19:2a:04:a8:9f:55: 8a:35:5d:bf:d7:d7:c9:be:ec:09:28:2e:8f:22:f9:a9:2f:c7: 91:d5:f1:07:a6:75:91:c8:b4:d0:67:0a:cb:76:71:05:98:7b: 78:c9:1c:a7:ba:ea:0f:c1:a9:e0:80:c6:a5:ec:68:d9:6d:6f: eb:1c:61:6d:70:f9:69:59:fa:5c:e3:b5:4b:9a:78:1b:19:63: 93:67:d3:63:d7:32:cc:45:2c:c5:18:15:44:ae:68:1c:ea:41: 51:f5:68:45:8b:01:f9:94:70:51:48:aa:cf:a9:41:0f:ec:98: b7:2b:22:fc:ee:a9:53:6d:77:96:2f:69:d0:28:ec:68:8d:3f: 3e:a5:2a:7b:d6:68:b1:d8:6e:18:7e:69:fd:67:09:5c:e6:e8: b3:f0:be:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5 N0YwMEY1RjUwHhcNMjUwOTE3MDY1NTM3WhcNMjUwOTI0MDY1NTM3WjAYMRYwFAYD VQQDEw02OGNhNWI2OS1mNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPoT7NfFSWEIbe+gbslQ1ASI/3Ab8oh8AvwjScM7Lj0w2pdVo2Q4Pl89ZvVH HkvDbachDwQMtH4EfPGly3MD8TUHLyGC5WkWeg4jQEk2H3eFf0C+AGL3ctsbcIpX Zoij1Bjew5SIvQmzPhHHOnK2gvppjFCG8PizK53dL/9dZ4OWmmEv72yYv6IQq9I0 IvqCectRYKuGNAmBW8mLCj1do5dpc515t40G06zHdYLTvXzHaZJ6y7iv/6PBNkls QQm1fNEgDkPzuuqNJqO34TaCfItcLB047wIPcrtUSRgd4t7ieZaaMsh50qFwHkrd nn4abgcaPJ1nC3e+2rXbscYq3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhdLz+J aN29lUtBMx5vCYrpii/eMB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5 ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu UllXWTNqd1pxaGVYOEE5ZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdGK4GG7xR9U3CWd8jHaWGH9jW+OknxjwfMaOyAt/s7g8yPhZYMxnI sQTyTS/zBF1DNE1SxNpfURGabhOxwE1gRBiYmTPCJPARh+hGUu5mIAIqDrA+yHMY alPIPOVPlcNIR9+tfSMZKgSon1WKNV2/19fJvuwJKC6PIvmpL8eR1fEHpnWRyLTQ ZwrLdnEFmHt4yRynuuoPwanggMal7GjZbW/rHGFtcPlpWfpc47VLmngbGWOTZ9Nj 1zLMRSzFGBVErmgc6kFR9WhFiwH5lHBRSKrPqUEP7Ji3KyL87qlTbXeWL2nQKOxo jT8+pSp71mix2G4Yfmn9Zwlc5uiz8L5C -----END CERTIFICATE-----Generated at Thu Sep 18 16:57:05 2025 by rpki-client