$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json) Hash identifier: HYDlXeDs6euUDWVNYaSYlVe3aDXedZlBDuHtojboCNs= Subject key identifier: 7F:E5:0F:58:D7:8C:9C:94:A8:74:3A:CD:6A:21:D8:B3:CE:C1:33:3A Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Certificate serial: 0AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft Manifest number: 0AD4 Signing time: Sun 24 Aug 2025 19:28:16 +0000 Manifest this update: Sun 24 Aug 2025 19:28:15 +0000 Manifest next update: Sun 31 Aug 2025 19:28:15 +0000 Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: OQxYfiuIbZfnyqBqWLY0FzqPVRRywABhz1MCZ3VU66M=) 2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: kRz4OHfhPxe5EPvefvMi3Xao6izuUxMq6U5mJJMpf2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Validity Not Before: Aug 24 19:28:15 2025 GMT Not After : Aug 31 19:28:15 2025 GMT Subject: CN=68ab67d0-c3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:15:af:9f:70:50:7d:0b:3e:cf:6d:b5:05: 22:27:e8:51:cf:61:fd:e8:a3:da:b0:34:51:dd:11: f5:7f:eb:45:bd:a1:45:50:b3:14:58:bc:e4:42:fa: 5f:01:18:5a:fc:2a:a7:57:1d:cb:30:c8:e1:e7:7f: aa:2b:c1:4c:e7:25:4a:fb:8d:70:8b:53:f6:01:a6: 3c:1a:c3:cc:06:fc:9c:1c:19:0c:8e:88:14:b7:54: 83:6d:23:18:9a:bd:3b:de:68:6f:0e:d5:c2:a3:98: 06:f0:92:cb:61:43:b2:75:e7:75:6b:06:32:2b:b9: d9:f5:0f:20:90:f5:d7:e3:8b:e1:73:f8:f2:3e:45: 6d:be:25:da:0e:8f:21:50:6e:26:1b:a7:ce:0a:05: 19:5a:1d:69:e5:ee:ce:2f:95:ae:4b:f8:c2:70:88: ab:3a:ac:13:75:07:e1:5c:ed:33:be:36:27:5b:a1: ba:7a:8c:7a:59:5d:86:2f:21:75:c8:6c:3a:23:3d: 69:af:2c:9e:19:61:67:64:ad:a9:7d:14:bb:8f:44: 64:ee:a2:e0:f4:9b:90:38:39:54:d2:2e:88:e2:8c: 16:d1:66:81:75:28:92:6f:3b:cd:1e:1d:68:ee:f2: 1a:9e:8a:c7:d4:94:12:24:74:ff:dd:0d:00:e7:6e: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:0F:58:D7:8C:9C:94:A8:74:3A:CD:6A:21:D8:B3:CE:C1:33:3A X509v3 Authority Key Identifier: keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:be:7f:3e:b7:e5:67:ae:2a:a8:c7:4a:5b:54:66:72:8c:9c: 45:83:ee:0d:74:ab:04:e6:c9:b4:fe:09:d1:7a:fb:97:57:89: 51:cd:39:45:47:3b:96:47:9b:42:ca:3f:3f:7a:97:db:65:92: 60:cf:c1:b1:d3:7d:1b:51:5d:50:e9:cd:5f:0a:a6:9d:9a:56: 8d:18:83:e9:20:87:0a:2f:47:87:91:86:99:1d:d7:f1:78:e2: 47:ea:9c:93:a5:0d:9c:80:90:67:5b:fe:5d:33:da:4c:cf:ed: 61:b5:1f:ca:e8:12:ba:57:73:92:b9:63:5d:64:0a:b0:9d:ff: 1c:72:bb:1c:5a:91:a2:a4:53:5e:30:79:08:72:d4:34:95:38: 5b:9f:bd:4c:20:37:8f:79:8c:64:0e:e8:e1:35:84:dd:5f:fb: 95:04:38:da:d8:c7:97:00:0d:ed:f5:31:14:97:ec:77:7e:cc: ed:6e:72:40:cf:29:47:bd:c8:4e:93:66:1d:65:c3:6f:21:ac: cf:1a:6d:94:f6:7a:f4:38:34:0b:63:a1:0f:2a:68:40:6f:b9: f1:b0:ac:3e:f0:86:89:36:7e:eb:46:6d:28:bb:08:04:12:cd: c0:0b:eb:5f:b1:70:3c:2f:71:13:42:f6:34:c9:7a:29:c8:5b: 05:a1:e9:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2 QTQyMjBGRDAwHhcNMjUwODI0MTkyODE1WhcNMjUwODMxMTkyODE1WjAYMRYwFAYD VQQDEw02OGFiNjdkMC1jM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n0Vr59wUH0LPs9ttQUiJ+hRz2H96KPasDRR3RH1f+tFvaFFULMUWLzkQvpf ARha/CqnVx3LMMjh53+qK8FM5yVK+41wi1P2AaY8GsPMBvycHBkMjogUt1SDbSMY mr073mhvDtXCo5gG8JLLYUOyded1awYyK7nZ9Q8gkPXX44vhc/jyPkVtviXaDo8h UG4mG6fOCgUZWh1p5e7OL5WuS/jCcIirOqwTdQfhXO0zvjYnW6G6eox6WV2GLyF1 yGw6Iz1pryyeGWFnZK2pfRS7j0Rk7qLg9JuQODlU0i6I4owW0WaBdSiSbzvNHh1o 7vIanorH1JQSJHT/3Q0A524NyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/lD1jX jJyUqHQ6zWoh2LPOwTM6MB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3 QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi VzZOWXlrQnUyV0pxUWlEOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJvn8+t+Vnriqox0pbVGZyjJxFg+4NdKsE5sm0/gnRevuXV4lRzTlF RzuWR5tCyj8/epfbZZJgz8Gx030bUV1Q6c1fCqadmlaNGIPpIIcKL0eHkYaZHdfx eOJH6pyTpQ2cgJBnW/5dM9pMz+1htR/K6BK6V3OSuWNdZAqwnf8ccrscWpGipFNe MHkIctQ0lThbn71MIDePeYxkDujhNYTdX/uVBDja2MeXAA3t9TEUl+x3fsztbnJA zylHvchOk2YdZcNvIazPGm2U9nr0ODQLY6EPKmhAb7nxsKw+8IaJNn7rRm0ouwgE Es3AC+tfsXA8L3ETQvY0yXopyFsFoenM -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:14 2025 by rpki-client