$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft File: quimiBHXcVavSOB4FMqP1mI9mL4.mft (raw, json) Hash identifier: qV36c1ZqntJ+lEr/Q8aI/iJFgdMCN0ITETUsAz7wUjI= Subject key identifier: 51:CD:0E:72:CA:9A:4B:90:76:9D:BB:65:42:73:1C:DD:13:25:19:CD Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft Manifest number: 36 Signing time: Thu 21 Aug 2025 07:47:21 +0000 Manifest this update: Thu 21 Aug 2025 07:47:20 +0000 Manifest next update: Thu 28 Aug 2025 07:47:20 +0000 Files and hashes: 1: quimiBHXcVavSOB4FMqP1mI9mL4.crl (hash: tnrKu+aWFc7aapoCUlDB/6PjRPYhYkBqVD+N6VyLwQs=) 2: E45745342AC411F0B2B1822CC4F9AE02.roa (hash: vV4viCWjAxoxyHSeBD7Bmq6t4EgnYb1F/xaDHHxFuCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Validity Not Before: Aug 21 07:47:20 2025 GMT Not After : Aug 28 07:47:20 2025 GMT Subject: CN=68a6cf09-aa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:ad:2b:b1:39:c0:2c:21:f3:bf:2a:88:78: d9:e3:4c:43:79:f5:ee:07:38:c1:9b:09:47:8a:de: 92:74:bd:ba:35:33:c3:95:0b:eb:7b:12:11:91:a6: 06:b2:4e:4e:14:32:86:86:76:4b:ae:58:94:3e:0d: 66:59:4c:5b:f9:ae:ee:fe:94:32:17:ce:2c:68:fd: ec:dd:59:47:b1:c8:7c:3d:b0:ee:ee:28:41:72:31: 2d:6c:5c:d8:0e:3a:9e:0b:3b:51:6d:4d:87:51:fc: 3b:02:6a:7b:52:2f:a6:77:89:1b:0f:88:c1:8b:58: 6b:4c:68:dc:66:9b:bd:a6:20:86:33:6b:13:09:d5: 94:17:7c:40:e3:29:b7:5f:20:b6:71:9c:9b:c1:9f: 09:ec:e6:7a:3d:88:27:7d:6e:5b:d7:9e:6e:1a:70: bc:91:84:00:c3:ee:50:80:a7:80:3e:d7:90:83:ee: 96:fd:0d:15:7b:7e:28:29:52:f1:80:83:2b:7a:7a: 16:a3:ee:6f:c7:12:1c:8f:81:04:1e:fa:51:43:a8: 91:0d:62:fe:a3:d0:c6:15:de:e5:9d:7f:14:a3:a6: 63:e3:d2:67:58:97:3b:b3:83:91:ad:01:0c:35:ad: f3:42:b7:7d:f0:68:5d:1e:e0:52:63:c7:16:dc:48: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CD:0E:72:CA:9A:4B:90:76:9D:BB:65:42:73:1C:DD:13:25:19:CD X509v3 Authority Key Identifier: keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e2:58:35:43:37:cc:0b:36:a3:d4:71:06:a6:f7:e2:65:8b: ca:60:1f:71:ae:c6:49:85:ce:3d:7b:0a:31:ef:64:d0:f9:71: c2:ed:47:9b:ae:c9:ab:6c:d5:a2:11:a2:84:9f:9a:12:dd:41: 7e:7f:6a:12:c3:85:a0:4a:84:a8:73:7e:7e:46:78:66:49:7f: a0:75:9a:2a:e4:2b:87:03:3f:d9:b8:66:c4:58:49:68:3d:7f: 74:d6:8a:be:82:ec:9e:2f:1b:9b:71:0e:1f:b6:56:6f:07:b7: 38:42:bb:4a:86:92:ce:02:47:9c:bd:d4:c3:96:c5:cf:80:5a: 7b:ec:48:22:21:5f:79:0c:42:83:d9:79:7a:eb:1d:00:f0:a5: 18:7a:53:48:33:0d:88:97:26:ea:72:af:02:c2:86:3c:c2:6b: 6c:0f:ce:73:6e:6f:fa:83:d4:34:f8:ce:f3:ef:0b:4f:47:5b: d2:9a:d1:66:c1:bb:a4:f2:42:0c:60:b5:72:e8:3b:3c:8e:8f: b5:65:0b:6f:f5:e9:5f:ff:5a:a2:07:b3:8c:66:52:b4:5d:2b: a7:ab:b2:ec:f6:d8:5e:1d:dc:53:1e:0f:0a:97:47:23:b1:81: 26:14:42:33:d5:74:c4:3d:c7:2f:51:83:5c:25:95:b6:87:c9: 7b:4b:4b:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0RGOTExMC8GA1UEBRMoQUFFOEE2ODgxMUQ3NzE1NkFGNDhFMDc4MTRDQThGRDY2 MjNEOThCRTAeFw0yNTA4MjEwNzQ3MjBaFw0yNTA4MjgwNzQ3MjBaMBgxFjAUBgNV BAMTDTY4YTZjZjA5LWFhNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH/a0rsTnALCHzvyqIeNnjTEN59e4HOMGbCUeK3pJ0vbo1M8OVC+t7EhGRpgay Tk4UMoaGdkuuWJQ+DWZZTFv5ru7+lDIXzixo/ezdWUexyHw9sO7uKEFyMS1sXNgO Op4LO1FtTYdR/DsCantSL6Z3iRsPiMGLWGtMaNxmm72mIIYzaxMJ1ZQXfEDjKbdf ILZxnJvBnwns5no9iCd9blvXnm4acLyRhADD7lCAp4A+15CD7pb9DRV7figpUvGA gyt6ehaj7m/HEhyPgQQe+lFDqJENYv6j0MYV3uWdfxSjpmPj0mdYlzuzg5GtAQw1 rfNCt33waF0e4FJjxxbcSOj7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUc0Ocsqa S5B2nbtlQnMc3RMlGc0wHwYDVR0jBBgwFoAUquimiBHXcVavSOB4FMqP1mI9mL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDREY5LzAxNjQ5NzM2MkFD NDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1ZhdlNPQjRGTXFQMW1JOW1M NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVpbWlCSFhjVmF2U09CNEZNcVAxbUk5bUw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD REY5LzAxNjQ5NzM2MkFDNDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1Zh dlNPQjRGTXFQMW1JOW1MNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXiWDVDN8wLNqPUcQam9+Jli8pgH3GuxkmFzj17CjHvZND5ccLtR5uu yats1aIRooSfmhLdQX5/ahLDhaBKhKhzfn5GeGZJf6B1mirkK4cDP9m4ZsRYSWg9 f3TWir6C7J4vG5txDh+2Vm8HtzhCu0qGks4CR5y91MOWxc+AWnvsSCIhX3kMQoPZ eXrrHQDwpRh6U0gzDYiXJupyrwLChjzCa2wPznNub/qD1DT4zvPvC09HW9Ka0WbB u6TyQgxgtXLoOzyOj7VlC2/16V//WqIHs4xmUrRdK6ersuz22F4d3FMeDwqXRyOx gSYUQjPVdMQ9xy9Rg1wllbaHyXtLSz4= -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:11 2025 by rpki-client