$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: fWAZqTxUC5REI6dDJwM/Jy+6lvG2UK1VfNWBFgxK1gc= Subject key identifier: 08:D0:AE:A1:B3:FD:B5:A4:BC:E3:41:27:BE:9E:EF:67:C9:84:C4:E4 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 025B Signing time: Wed 17 Sep 2025 02:17:46 +0000 Manifest this update: Wed 17 Sep 2025 02:17:46 +0000 Manifest next update: Wed 24 Sep 2025 02:17:46 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: 2yNHiB9oRHNhQ4AsIsQytvPD1xbEKQMvUd4W5AduJr8=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: ktK9vCE7vIpwa3GinrPFia6DHxl96KzteCFThN1eca8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Sep 17 02:17:46 2025 GMT Not After : Sep 24 02:17:46 2025 GMT Subject: CN=68ca1a4a-c0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:83:f6:6b:7b:f2:7d:d1:fa:00:7c:09:54: 63:b5:a7:25:5b:db:83:b9:74:83:9f:0b:a3:e6:9d: 5d:75:4d:ae:25:01:9f:6d:6e:82:ad:d7:3d:76:73: 01:28:1d:b6:08:12:69:59:ac:bb:34:e9:df:bd:ea: c5:cb:af:8f:13:7d:95:c7:85:b1:6a:ea:75:d4:b6: 43:8c:6e:83:6b:01:ac:62:30:2e:11:68:d7:4f:05: e2:b3:2d:e3:14:d6:de:40:15:4c:31:9c:d9:bb:d4: 03:b0:35:87:92:c8:c3:03:d1:4e:4c:4e:41:ec:85: 61:f3:45:de:2f:a9:7d:88:b8:ed:38:03:75:46:7e: f3:43:b2:d9:19:3e:f3:32:33:98:cd:91:73:23:65: e3:78:98:5a:2b:a1:b4:3c:5e:87:c5:85:ec:4a:49: df:19:dd:1a:95:29:0a:4d:fd:32:e7:9a:57:24:12: 95:05:cb:de:f3:25:23:7f:9e:1f:cd:4e:ef:9f:fe: 2c:3e:71:b1:ba:27:aa:96:fb:13:74:28:f4:db:65: a1:2b:3a:c5:e1:97:b0:7a:ea:24:4c:d8:f3:44:5b: 38:1f:07:44:3a:47:4f:2c:5f:0e:79:c3:87:c2:f4: 1b:ce:6d:cf:eb:2f:aa:25:85:72:54:e3:03:b1:d9: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:AE:A1:B3:FD:B5:A4:BC:E3:41:27:BE:9E:EF:67:C9:84:C4:E4 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:e5:10:ea:6c:34:a8:e3:15:ee:49:24:f0:fc:a6:4f:31:e6: 71:29:04:2d:20:89:57:cc:90:a9:89:c9:da:a9:ad:60:c4:a4: a9:b4:9e:10:b2:89:dc:38:2a:20:07:21:6e:45:26:92:f2:3d: 2d:88:26:e6:9e:cc:b0:1f:2b:2b:34:dc:63:c4:bc:8a:d5:07: dc:32:27:28:47:e6:65:ad:af:f3:65:81:b1:27:07:c4:27:a7: e6:9c:37:78:49:09:d4:fa:97:9e:62:17:c5:d7:fd:59:85:46: 16:5c:d9:4b:1d:0e:3e:0f:cd:90:0d:32:91:15:1d:06:b5:5b: c9:e5:2c:75:84:fb:19:8e:fc:a5:40:4b:ea:35:8c:75:56:7e: 50:d7:b7:78:8e:3a:c5:d1:8f:87:74:35:06:c9:91:a9:a0:fd: ca:81:10:e3:ed:33:b9:20:4f:04:34:f2:d2:ed:35:73:aa:08: c3:d4:34:a0:59:9e:f6:19:e0:d1:7d:29:56:4e:ab:10:34:02: 7a:5f:70:25:8f:51:0e:37:6a:0e:82:d9:f1:30:78:70:53:2a: 64:d8:0f:97:e4:62:67:4b:91:6a:83:bd:4a:75:a7:36:5f:22: 96:69:e8:df:d0:b2:3a:03:c6:25:30:dd:14:57:70:44:41:63: f0:5f:76:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUwOTE3MDIxNzQ2WhcNMjUwOTI0MDIxNzQ2WjAYMRYwFAYD VQQDEw02OGNhMWE0YS1jMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUaD9mt78n3R+gB8CVRjtaclW9uDuXSDnwuj5p1ddU2uJQGfbW6Crdc9dnMB KB22CBJpWay7NOnfverFy6+PE32Vx4Wxaup11LZDjG6DawGsYjAuEWjXTwXisy3j FNbeQBVMMZzZu9QDsDWHksjDA9FOTE5B7IVh80XeL6l9iLjtOAN1Rn7zQ7LZGT7z MjOYzZFzI2XjeJhaK6G0PF6HxYXsSknfGd0alSkKTf0y55pXJBKVBcve8yUjf54f zU7vn/4sPnGxuieqlvsTdCj022WhKzrF4ZeweuokTNjzRFs4HwdEOkdPLF8OecOH wvQbzm3P6y+qJYVyVOMDsdlO/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjQrqGz /bWkvONBJ76e72fJhMTkMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC95RDqbDSo4xXuSSTw/KZPMeZxKQQtIIlXzJCpicnaqa1gxKSptJ4Q soncOCogByFuRSaS8j0tiCbmnsywHysrNNxjxLyK1QfcMicoR+Zlra/zZYGxJwfE J6fmnDd4SQnU+peeYhfF1/1ZhUYWXNlLHQ4+D82QDTKRFR0GtVvJ5Sx1hPsZjvyl QEvqNYx1Vn5Q17d4jjrF0Y+HdDUGyZGpoP3KgRDj7TO5IE8ENPLS7TVzqgjD1DSg WZ72GeDRfSlWTqsQNAJ6X3Alj1EON2oOgtnxMHhwUypk2A+X5GJnS5Fqg71Kdac2 XyKWaejf0LI6A8YlMN0UV3BEQWPwX3bh -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:53 2025 by rpki-client