$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: bYnhkIF9wVA4Q3Yd55+8wUWPYbkk9FuaSdVmwDoovzo= Subject key identifier: 34:08:65:5B:1B:7A:89:97:24:FB:A7:93:0B:A1:08:BF:77:94:03:41 Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: 0113 Signing time: Wed 17 Sep 2025 05:34:46 +0000 Manifest this update: Wed 17 Sep 2025 05:34:45 +0000 Manifest next update: Wed 24 Sep 2025 05:34:45 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: xweVVICtgv/D2eM0bt6xqdeilrVamHrUdKApgIeTDfs=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: sah200aOwYvH7hldekVzzUV/LvL4ckSI60/32eio3go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Sep 17 05:34:45 2025 GMT Not After : Sep 24 05:34:45 2025 GMT Subject: CN=68ca4875-8fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:96:87:4d:ee:17:2e:ce:4a:fa:32:e1:46: 4a:6e:90:0c:95:1b:80:a7:fe:e8:74:37:0a:77:6d: e3:52:6f:05:7c:89:20:8c:57:86:3e:6f:6c:df:3f: 49:91:58:76:ec:cf:96:38:27:32:6c:c4:e9:2b:b0: 0b:23:ce:1a:38:c2:65:38:50:8b:b5:db:73:d9:70: 0c:77:c3:2b:81:7a:e6:71:6e:a3:74:a3:6d:38:83: 32:3e:71:a5:53:99:94:78:65:16:02:d9:90:37:a7: 6e:6b:ba:70:2d:91:ea:08:97:be:fc:55:d3:92:3b: e7:52:c3:87:a7:50:d3:5a:3f:7a:ba:e4:cf:d9:a7: fb:a3:e8:47:d4:ee:56:ce:ad:5b:c3:44:22:92:49: 18:5e:04:aa:cc:5b:ee:d5:93:86:95:39:1c:2e:77: 9f:f2:35:09:fc:be:7c:13:52:48:ab:5a:5d:4c:5b: 07:ca:50:6c:f8:06:40:64:0d:46:dd:e1:2f:5a:f6: a9:19:68:a0:e6:ba:0d:16:fd:74:f9:41:97:bc:c2: 2b:fe:7d:9a:e1:8a:6c:a9:50:e3:6c:9b:49:45:9b: f8:14:f2:3c:5a:46:30:ce:ad:9d:54:4d:b7:02:68: e0:c7:f6:55:a1:ca:aa:22:c9:a7:ed:32:15:bc:2f: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:65:5B:1B:7A:89:97:24:FB:A7:93:0B:A1:08:BF:77:94:03:41 X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d3:53:fa:84:28:af:e3:a5:af:af:c4:9e:67:f1:d3:f4:6e: c5:c9:8f:e9:0b:e5:d4:83:8b:87:41:3c:8d:7d:61:51:9c:74: 35:a7:9c:77:5a:98:78:f4:ab:2a:a5:34:63:eb:0d:e8:03:db: 82:51:d3:ec:67:42:fc:69:f9:ed:16:a9:f3:39:26:37:fd:dc: 63:7b:4b:8f:0a:7e:6d:d7:00:9b:db:a4:a4:d4:1f:a3:0d:72: 92:c6:9e:34:dd:d6:70:b2:d2:c6:99:ca:c1:b0:c5:aa:27:40: 2c:d5:3c:c6:47:52:a0:5b:aa:dc:9e:92:1b:95:94:f7:b2:ad: 6e:3b:91:1a:25:f8:fe:fc:e7:fb:56:72:b4:79:8e:79:55:27: 55:ed:a8:d5:41:61:a3:1d:42:ae:8f:ea:2d:91:b6:e8:9a:54: ab:12:db:3b:3d:59:c7:4d:64:d1:9b:36:9f:b2:b4:38:f0:18: 2b:71:35:b6:47:99:1e:69:c1:73:b1:14:94:68:52:83:fa:69: c0:6f:7f:bf:ad:ee:d3:d5:30:c8:3b:35:f5:c4:ad:0d:a4:f3: ba:fb:ac:5c:f3:e3:cd:6a:c2:ac:f8:b1:0e:db:7b:3f:b8:d3: 11:e9:ae:bd:35:db:d7:af:48:17:d0:91:99:5c:94:e3:c5:f4: e3:fd:e0:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUwOTE3MDUzNDQ1WhcNMjUwOTI0MDUzNDQ1WjAYMRYwFAYD VQQDEw02OGNhNDg3NS04ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreaWh03uFy7OSvoy4UZKbpAMlRuAp/7odDcKd23jUm8FfIkgjFeGPm9s3z9J kVh27M+WOCcybMTpK7ALI84aOMJlOFCLtdtz2XAMd8MrgXrmcW6jdKNtOIMyPnGl U5mUeGUWAtmQN6dua7pwLZHqCJe+/FXTkjvnUsOHp1DTWj96uuTP2af7o+hH1O5W zq1bw0QikkkYXgSqzFvu1ZOGlTkcLnef8jUJ/L58E1JIq1pdTFsHylBs+AZAZA1G 3eEvWvapGWig5roNFv10+UGXvMIr/n2a4YpsqVDjbJtJRZv4FPI8WkYwzq2dVE23 Amjgx/ZVocqqIsmn7TIVvC8blQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQIZVsb eomXJPunkwuhCL93lANBMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB401P6hCiv46Wvr8SeZ/HT9G7FyY/pC+XUg4uHQTyNfWFRnHQ1p5x3 Wph49KsqpTRj6w3oA9uCUdPsZ0L8afntFqnzOSY3/dxje0uPCn5t1wCb26Sk1B+j DXKSxp403dZwstLGmcrBsMWqJ0As1TzGR1KgW6rcnpIblZT3sq1uO5EaJfj+/Of7 VnK0eY55VSdV7ajVQWGjHUKuj+otkbbomlSrEts7PVnHTWTRmzafsrQ48BgrcTW2 R5keacFzsRSUaFKD+mnAb3+/re7T1TDIOzX1xK0NpPO6+6xc8+PNasKs+LEO23s/ uNMR6a69NdvXr0gX0JGZXJTjxfTj/eAE -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:44 2025 by rpki-client