$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: 4KkZ9QjpLGUsDIUE8Es49+Oq0PlmHeGSEeztq2EfqvY= Subject key identifier: 00:2E:3E:01:98:A1:31:AE:B8:D8:09:82:EE:E2:93:2A:CD:8E:C9:01 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 8B Signing time: Sat 23 Aug 2025 06:46:15 +0000 Manifest this update: Sat 23 Aug 2025 06:46:15 +0000 Manifest next update: Sat 30 Aug 2025 06:46:15 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: BvWRk4xRh4yyl5hHK9M5hzog9iiZaLbiLV7qxQ+D86E=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Aug 23 06:46:15 2025 GMT Not After : Aug 30 06:46:15 2025 GMT Subject: CN=68a963b7-b9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c2:51:68:af:70:78:4b:b3:40:86:c3:03:e8: c9:a4:b5:92:50:60:b9:60:8f:14:34:11:ae:2e:e4: 10:3e:4b:8e:f2:63:ea:d5:99:60:2d:e7:06:07:7e: 0b:10:4b:b2:c5:ad:2b:2d:8e:6d:d4:a5:6e:a3:51: 64:9c:1b:a2:dd:08:5f:58:08:ab:af:63:bf:fa:b8: 12:1e:89:a0:f1:63:fa:13:5b:f5:a7:15:60:ff:84: c7:58:2c:86:1a:e4:b8:f9:6a:c0:32:21:91:2f:46: 97:79:01:59:7a:9c:9f:af:88:9f:0e:3f:73:40:da: 8d:b6:79:db:0e:52:49:24:a6:0a:de:3f:63:8b:5d: 32:dc:2e:0b:09:36:8c:d9:62:06:74:75:46:8e:d0: 08:5e:35:ae:e7:d4:40:19:da:44:df:7c:3d:eb:19: 04:5d:28:73:68:10:42:a0:ed:c8:65:56:96:df:6e: cd:a7:01:88:17:bc:09:f5:60:ee:96:5b:c5:42:59: ec:1b:d1:27:4a:07:78:4e:d9:b9:ca:85:56:b6:41: a8:f0:b2:dd:4a:e7:f7:77:b1:b5:11:e9:7c:5e:72: b6:ea:3f:94:71:0f:b7:d9:9d:54:07:34:27:96:29: c7:29:f3:cb:4a:a8:72:f8:34:98:b3:fd:e7:2c:93: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2E:3E:01:98:A1:31:AE:B8:D8:09:82:EE:E2:93:2A:CD:8E:C9:01 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4a:63:9e:e8:dc:65:82:13:f4:a3:2c:fb:5a:f0:65:38:59: 0e:c8:87:76:38:75:0a:09:0a:a9:8c:0c:e2:97:81:94:fa:9c: f0:a9:dc:79:ec:e5:b8:16:e2:18:00:a2:0b:88:94:56:06:66: 63:90:f7:24:21:b3:b7:32:d5:be:a5:17:7c:99:c9:67:fe:b0: 90:73:16:ac:c5:6d:75:31:58:31:bc:31:36:62:ef:94:5f:9d: a2:d4:51:a9:c1:23:41:e3:42:ba:d0:79:19:94:4f:d1:2a:75: be:7c:19:60:c7:ed:38:0f:45:a2:e4:03:b9:9d:7b:4c:b0:d6: 44:b2:78:06:08:d7:ad:d5:b9:5b:e4:2f:ce:94:ea:59:1c:12: 19:de:45:0d:6c:0e:ef:22:38:32:50:70:7a:aa:2b:d6:86:8e: ab:ef:0b:fd:17:f4:22:e0:2b:99:d2:15:8a:5a:85:b8:cf:9d: a6:72:7f:8f:1e:91:6c:ba:a2:5e:d9:56:8f:7e:9d:b6:b2:0c: 83:f8:b2:de:8d:95:8b:16:f3:86:d5:b2:cc:8d:d3:8b:9b:75: 52:a0:17:dd:db:2c:e2:d0:b3:d2:91:ce:bb:5f:21:c9:ba:c1: a8:e1:c2:c5:a2:86:7b:0f:56:86:b4:d7:d3:65:b6:79:8b:a2: cd:bc:fd:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYxNzkxMTAvBgNVBAUTKDQwNTAyQTRCMEMxRkY0NjgyRjUyRTM0MDY0MDQ0NDQ1 Mjg3RDRCQjgwHhcNMjUwODIzMDY0NjE1WhcNMjUwODMwMDY0NjE1WjAYMRYwFAYD VQQDEw02OGE5NjNiNy1iOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sJRaK9weEuzQIbDA+jJpLWSUGC5YI8UNBGuLuQQPkuO8mPq1ZlgLecGB34L EEuyxa0rLY5t1KVuo1FknBui3QhfWAirr2O/+rgSHomg8WP6E1v1pxVg/4THWCyG GuS4+WrAMiGRL0aXeQFZepyfr4ifDj9zQNqNtnnbDlJJJKYK3j9ji10y3C4LCTaM 2WIGdHVGjtAIXjWu59RAGdpE33w96xkEXShzaBBCoO3IZVaW327NpwGIF7wJ9WDu llvFQlnsG9EnSgd4Ttm5yoVWtkGo8LLdSuf3d7G1Eel8XnK26j+UcQ+32Z1UBzQn linHKfPLSqhy+DSYs/3nLJMXMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAuPgGY oTGuuNgJgu7ikyrNjskBMB8GA1UdIwQYMBaAFEBQKksMH/RoL1LjQGQEREUofUu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS81NEUwNDcxNkFB N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlHZ3ZVdU5BWkFSRVJTaDlT N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjE3OS81NEUwNDcxNkFBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlH Z3ZVdU5BWkFSRVJTaDlTN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApSmOe6NxlghP0oyz7WvBlOFkOyId2OHUKCQqpjAzil4GU+pzwqdx5 7OW4FuIYAKILiJRWBmZjkPckIbO3MtW+pRd8mcln/rCQcxasxW11MVgxvDE2Yu+U X52i1FGpwSNB40K60HkZlE/RKnW+fBlgx+04D0Wi5AO5nXtMsNZEsngGCNet1blb 5C/OlOpZHBIZ3kUNbA7vIjgyUHB6qivWho6r7wv9F/Qi4CuZ0hWKWoW4z52mcn+P HpFsuqJe2VaPfp22sgyD+LLejZWLFvOG1bLMjdOLm3VSoBfd2yzi0LPSkc67XyHJ usGo4cLFooZ7D1aGtNfTZbZ5i6LNvP3Q -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:27 2025 by rpki-client