$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: N90R1YHh/d2yb+W2/avAiWKfSK/F2TYyRMdh5ZYylOI= Subject key identifier: E4:B5:8C:E3:CD:A0:BA:48:46:E8:73:77:70:D9:92:58:74:79:AB:1F Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 8C Signing time: Thu 21 Aug 2025 03:42:46 +0000 Manifest this update: Thu 21 Aug 2025 03:42:45 +0000 Manifest next update: Thu 28 Aug 2025 03:42:45 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: yO+pYtbBwskmPAXls4deYXRW9euxpSwk+u+lwl73igU=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Aug 21 03:42:45 2025 GMT Not After : Aug 28 03:42:45 2025 GMT Subject: CN=68a695b5-65a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:36:57:19:8d:aa:58:f1:a6:b5:c7:e5:99: 6a:a8:07:4a:80:08:34:e6:0d:a7:4a:aa:67:07:3e: 97:12:42:95:03:dd:da:ee:5f:5d:f2:9b:ff:1f:0c: 64:ae:3e:ae:19:9b:4c:ca:18:1c:0e:f5:f9:a1:a2: d2:61:62:2f:65:09:fb:7e:b8:11:ca:51:3c:7a:6e: f7:52:2f:f2:39:22:4f:3f:c2:f7:98:dd:b3:db:16: 4d:c1:df:3c:84:43:a5:f0:7e:2b:a4:86:ff:b4:7f: b0:d4:82:fb:f7:f6:19:0c:2e:49:a2:e0:7d:73:67: 4c:46:39:21:17:49:0b:da:ca:7b:40:7f:2d:8d:47: 5f:b6:ca:0c:df:90:6d:14:ed:8f:8b:54:18:12:28: a4:ea:a3:99:49:41:f8:8c:02:d3:38:3d:d0:36:02: 46:20:b5:e1:3d:91:03:27:fd:64:74:e2:20:b1:b4: 32:09:b1:a4:da:4f:62:0d:ec:80:60:a2:b2:ec:6f: 17:57:7b:4d:56:26:6b:19:4d:00:56:91:97:e9:8c: 8d:25:66:f0:cf:86:22:dd:b0:d4:e7:e0:99:b0:34: 17:71:9b:53:73:8d:23:ef:1c:a0:38:79:ed:3f:20: 70:35:5d:26:0e:95:cf:dc:e9:77:3c:29:e8:68:b3: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:8C:E3:CD:A0:BA:48:46:E8:73:77:70:D9:92:58:74:79:AB:1F X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:49:98:4d:6b:59:6b:55:cc:a2:2c:27:51:bb:b4:4c:47:63: a9:14:5e:5d:f9:6b:39:6f:7d:6e:d5:ed:05:52:d6:50:24:c7: a5:fc:70:fe:7f:89:90:43:ca:60:14:40:28:b4:02:09:9d:1d: c1:4f:a8:cd:7c:23:0c:3e:a8:f1:64:4f:a5:c4:36:eb:38:e5: 94:6c:65:08:df:a8:af:c7:8d:4c:c1:31:16:10:eb:de:23:e3: 34:47:63:98:18:65:ae:24:ee:f1:9c:8c:40:9f:f4:5a:b3:07: 95:3f:0b:29:d9:04:b6:5f:00:1e:70:8f:54:12:1a:b9:dd:14: d9:84:dc:19:fe:39:9c:b8:02:6d:ea:67:f5:28:d9:43:66:c7: f3:91:63:c9:8c:dd:2f:f1:15:4f:c3:b3:94:da:b5:7c:3c:43: 97:c2:7a:b7:17:f4:e9:3a:47:83:87:e8:33:4b:2b:17:c7:f2: 1d:64:7c:f9:ff:56:9a:52:cb:7a:ef:17:64:51:cb:da:58:c6: 68:12:21:0e:f5:52:bd:e0:bb:36:d3:8a:a2:d4:2d:1f:dd:ba: c5:5e:4a:19:97:8f:60:17:c9:17:59:67:d1:de:63:b8:ff:0a: 07:7c:6d:c7:d1:3c:77:1f:c8:a1:5a:d8:8d:08:85:9f:4a:ac: 81:5a:f6:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NUYxMTAvBgNVBAUTKDQxMTUyMjM0NjBBM0RERkFDODNBODJGQzYxQjJCRTlF QzYyNkMyMEMwHhcNMjUwODIxMDM0MjQ1WhcNMjUwODI4MDM0MjQ1WjAYMRYwFAYD VQQDEw02OGE2OTViNS02NWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvc2VxmNqljxprXH5ZlqqAdKgAg05g2nSqpnBz6XEkKVA93a7l9d8pv/Hwxk rj6uGZtMyhgcDvX5oaLSYWIvZQn7frgRylE8em73Ui/yOSJPP8L3mN2z2xZNwd88 hEOl8H4rpIb/tH+w1IL79/YZDC5JouB9c2dMRjkhF0kL2sp7QH8tjUdftsoM35Bt FO2Pi1QYEiik6qOZSUH4jALTOD3QNgJGILXhPZEDJ/1kdOIgsbQyCbGk2k9iDeyA YKKy7G8XV3tNViZrGU0AVpGX6YyNJWbwz4Yi3bDU5+CZsDQXcZtTc40j7xygOHnt PyBwNV0mDpXP3Ol3PCnoaLMI+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS1jOPN oLpIRuhzd3DZklh0easfMB8GA1UdIwQYMBaAFEEVIjRgo936yDqC/GGyvp7GJsIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri84Q0EyMEExQ0FB RDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNmcklPb0w4WWJLLW5zWW13 Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ1Ri84Q0EyMEExQ0FBRDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNm cklPb0w4WWJLLW5zWW13Z3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCESZhNa1lrVcyiLCdRu7RMR2OpFF5d+Ws5b31u1e0FUtZQJMel/HD+ f4mQQ8pgFEAotAIJnR3BT6jNfCMMPqjxZE+lxDbrOOWUbGUI36ivx41MwTEWEOve I+M0R2OYGGWuJO7xnIxAn/RasweVPwsp2QS2XwAecI9UEhq53RTZhNwZ/jmcuAJt 6mf1KNlDZsfzkWPJjN0v8RVPw7OU2rV8PEOXwnq3F/TpOkeDh+gzSysXx/IdZHz5 /1aaUst67xdkUcvaWMZoEiEO9VK94Ls204qi1C0f3brFXkoZl49gF8kXWWfR3mO4 /woHfG3H0Tx3H8ihWtiNCIWfSqyBWvYz -----END CERTIFICATE-----Generated at Sat Aug 23 03:25:44 2025 by rpki-client