$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: Vzl1+0cQwQ3KPNNBOrCDRtsnFw6jLCXAMP1ZjfoR9WQ= Subject key identifier: 0C:6E:1B:D8:FE:EB:65:BF:F8:5D:EB:DC:CE:0E:E2:C2:FB:F2:36:A1 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 1038 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1024 Signing time: Sun 24 Aug 2025 17:24:12 +0000 Manifest this update: Sun 24 Aug 2025 17:24:12 +0000 Manifest next update: Sun 31 Aug 2025 17:24:12 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: qvIQViQ2Qfms29ioiZz+UK+L0d/Mr9bGpan94jFhkzA=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4152 (0x1038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Aug 24 17:24:12 2025 GMT Not After : Aug 31 17:24:12 2025 GMT Subject: CN=68ab4abc-cbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:68:85:e2:99:22:d3:c7:79:9f:c6:38:53:47: 04:85:1e:af:51:72:c6:0d:f3:5b:35:24:23:56:8c: 48:08:1c:3b:57:77:97:45:a7:a3:39:58:a0:fe:9b: 57:79:6f:24:6f:a4:77:76:08:0e:01:d4:63:e2:b6: a6:0a:30:8f:16:63:22:10:6b:7b:c7:db:eb:9e:31: de:31:6c:c5:58:84:00:fe:9a:65:d7:26:bf:ef:91: 5e:43:2b:93:86:79:cd:43:d7:f4:9b:c3:41:9a:0e: d8:71:5f:36:e7:19:7a:90:26:07:e6:72:a7:d9:93: 2e:c9:96:08:94:09:29:48:ba:64:7f:ca:d7:ee:40: 73:68:2f:e7:1b:9f:c2:ae:68:f4:bb:51:53:e2:4f: 11:a7:c0:95:64:1b:c3:94:70:65:01:a3:f3:09:cb: 00:de:ce:ed:96:6d:f4:2f:d2:26:83:62:da:53:21: 4a:64:f0:9f:a5:87:6b:ba:a3:b9:37:80:e8:62:26: ae:24:fa:bb:73:e9:ff:0d:4b:53:c9:7c:21:a6:ac: a7:8f:77:d0:3e:18:24:62:ff:83:f2:0b:ab:88:81: 35:c5:d3:73:0d:e6:61:77:8a:55:0a:c6:fb:1c:6e: 53:8c:ac:0b:fa:f7:ba:b2:5b:fa:7f:e3:17:4f:55: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6E:1B:D8:FE:EB:65:BF:F8:5D:EB:DC:CE:0E:E2:C2:FB:F2:36:A1 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:95:a7:d0:eb:d5:b9:8f:1b:1e:32:ce:d3:c7:d8:76:8a: d3:f9:e4:9a:64:ba:eb:e4:b8:d5:d9:d6:a2:68:5c:df:ed:ac: 35:0e:ee:1d:83:ed:df:5b:0b:20:96:98:01:9a:09:0f:6b:0e: f5:e6:91:de:13:80:bd:77:8d:41:00:d2:ac:83:92:2c:ef:de: 40:bf:06:da:26:47:49:72:9f:8a:e6:d4:d2:d1:f4:9b:37:72: a9:c4:67:1b:d2:c6:cf:9c:97:5b:3f:40:79:96:48:82:4a:f8: 4b:54:23:3f:4c:cc:ed:23:fe:46:3e:37:00:a0:cc:78:8d:e1: 9e:94:c4:11:07:64:9c:c7:c7:40:9a:6b:79:e9:62:c8:27:3f: c0:2a:53:97:65:8e:25:95:f6:60:0b:67:35:9d:d9:26:cd:d4: a1:ad:1a:5f:0c:66:7d:e7:19:94:bd:70:45:21:8b:6a:fa:d3: b1:d4:99:1c:5f:36:a3:c6:77:53:0d:d3:24:e0:a9:ae:f3:8a: 7d:9e:c0:bc:45:99:32:49:39:78:8d:44:6e:bb:fa:3b:9f:5a: 3c:9b:d4:b3:41:94:a9:71:72:00:fd:05:7e:00:7c:5d:8b:8b: a7:a3:82:76:60:8e:e8:75:b5:9f:5d:28:a0:93:3a:f1:80:3e: 05:a0:e3:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUwODI0MTcyNDEyWhcNMjUwODMxMTcyNDEyWjAYMRYwFAYD VQQDEw02OGFiNGFiYy1jYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WiF4pki08d5n8Y4U0cEhR6vUXLGDfNbNSQjVoxICBw7V3eXRaejOVig/ptX eW8kb6R3dggOAdRj4ramCjCPFmMiEGt7x9vrnjHeMWzFWIQA/ppl1ya/75FeQyuT hnnNQ9f0m8NBmg7YcV825xl6kCYH5nKn2ZMuyZYIlAkpSLpkf8rX7kBzaC/nG5/C rmj0u1FT4k8Rp8CVZBvDlHBlAaPzCcsA3s7tlm30L9Img2LaUyFKZPCfpYdruqO5 N4DoYiauJPq7c+n/DUtTyXwhpqynj3fQPhgkYv+D8guriIE1xdNzDeZhd4pVCsb7 HG5TjKwL+ve6slv6f+MXT1VcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxuG9j+ 62W/+F3r3M4O4sL78jahMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcJWn0OvVuY8bHjLO08fYdorT+eSaZLrr5LjV2daiaFzf7aw1Du4d g+3fWwsglpgBmgkPaw715pHeE4C9d41BANKsg5Is795AvwbaJkdJcp+K5tTS0fSb N3KpxGcb0sbPnJdbP0B5lkiCSvhLVCM/TMztI/5GPjcAoMx4jeGelMQRB2Scx8dA mmt56WLIJz/AKlOXZY4llfZgC2c1ndkmzdShrRpfDGZ95xmUvXBFIYtq+tOx1Jkc XzajxndTDdMk4Kmu84p9nsC8RZkySTl4jURuu/o7n1o8m9SzQZSpcXIA/QV+AHxd i4uno4J2YI7odbWfXSigkzrxgD4FoOMu -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:53 2025 by rpki-client