$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json) Hash identifier: WY2hDnn7qfYpaE0rh06d/PZjaAqqk+patTZ1cSWfwLQ= Subject key identifier: 28:5F:A6:E7:63:0B:90:13:EA:D5:73:BC:8B:14:26:D6:91:14:45:2E Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1B45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft Manifest number: 1B40 Signing time: Tue 02 Sep 2025 16:28:11 +0000 Manifest this update: Tue 02 Sep 2025 16:28:10 +0000 Manifest next update: Tue 09 Sep 2025 16:28:10 +0000 Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: cj4NZIoq9yjcO5ANJ1Hwt/o4SWCs12FLm93ebLK/UoQ=) 2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: f7v965g9bOSdEznd3YTHpzh8If/rvk4WHQj9sYnabU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6981 (0x1b45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Validity Not Before: Sep 2 16:28:10 2025 GMT Not After : Sep 9 16:28:10 2025 GMT Subject: CN=68b71b1a-e56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:f9:f8:d1:ff:eb:27:0c:56:21:b9:4f:c0: 3f:df:ea:6c:1c:1d:02:f1:5c:3f:8d:4e:76:24:e8: 8e:a3:3e:6a:f1:88:2d:4f:c4:9b:0c:99:d5:8d:a9: 0d:d8:3a:b4:62:3f:38:60:20:9f:b0:16:53:8d:55: 1f:f7:e0:34:01:02:f7:4f:c4:09:c5:90:d3:0e:43: f4:8b:d5:9b:08:c4:1f:f8:aa:1e:4e:aa:1b:1b:82: 27:6b:aa:e9:46:44:16:57:82:da:e5:7b:6b:b8:b5: 32:2e:9c:4e:3a:31:a0:05:02:f8:df:64:f7:b1:74: ae:e6:79:ec:dc:79:e8:6d:0e:5a:e7:ab:cb:a9:86: 50:16:b4:84:a3:da:2e:fc:ab:aa:78:9e:86:f2:33: 2f:b1:c0:2c:c3:37:50:0e:d5:c2:94:46:f4:a6:23: 66:ab:09:2f:87:ef:02:6a:ee:3a:f5:23:a2:79:bc: 51:1a:f1:15:91:e5:64:d6:2a:ec:ae:c8:56:54:5d: 59:ab:73:f9:76:69:d7:44:e9:64:b3:66:79:fb:8d: 80:15:68:19:b9:b7:5d:e8:0d:86:26:aa:7b:c0:d9: a3:47:1a:45:d5:65:5e:10:30:f6:bd:8b:4f:01:20: 52:27:09:31:dd:25:f3:d0:bd:11:78:1b:56:13:27: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:A6:E7:63:0B:90:13:EA:D5:73:BC:8B:14:26:D6:91:14:45:2E X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6e:30:6b:97:37:c0:5c:36:a6:8d:6c:ce:ec:1c:e4:33:bc: 95:53:1a:61:6b:d5:64:42:db:bb:98:70:9d:d8:36:b0:0d:3b: fe:44:a7:67:fe:d1:8f:04:ba:e5:58:92:b3:55:24:15:6c:de: 2d:36:a9:02:4f:85:c2:ab:8b:b8:09:ba:dd:ad:d3:f4:4c:96: 6b:79:71:64:6e:9d:3a:86:cf:fd:f3:f2:71:67:46:5a:88:8f: c4:d3:b1:9c:15:c0:3c:0c:a5:5b:87:44:54:d3:13:61:78:53: d4:55:cd:73:52:89:1b:f7:0f:bf:ed:78:d6:22:59:6b:ae:c4: 08:33:80:22:eb:0c:78:6e:96:e6:85:3c:dc:69:f0:a2:e7:c5: 8a:5c:e0:98:62:13:30:90:2e:57:9b:ed:4b:ee:30:c5:c6:d1: 1d:bd:90:e4:a2:ef:e1:a4:ab:39:3f:83:62:73:e5:76:6c:93: aa:43:6f:8d:91:e9:53:ac:3c:24:2f:ef:e0:d7:b1:af:57:83: 60:41:eb:d3:b5:3f:b8:80:46:93:60:b1:78:63:3d:68:9b:0b: 57:6b:4e:53:d3:59:37:a5:14:54:bd:84:aa:e9:3e:9f:74:59: b3:38:f2:a9:58:ef:c4:61:58:0e:4a:99:0a:50:25:33:94:c4: 55:f8:1f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjUwOTAyMTYyODEwWhcNMjUwOTA5MTYyODEwWjAYMRYwFAYD VQQDEw02OGI3MWIxYS1lNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWf5+NH/6ycMViG5T8A/3+psHB0C8Vw/jU52JOiOoz5q8YgtT8SbDJnVjakN 2Dq0Yj84YCCfsBZTjVUf9+A0AQL3T8QJxZDTDkP0i9WbCMQf+KoeTqobG4Ina6rp RkQWV4La5XtruLUyLpxOOjGgBQL432T3sXSu5nns3HnobQ5a56vLqYZQFrSEo9ou /KuqeJ6G8jMvscAswzdQDtXClEb0piNmqwkvh+8Cau469SOiebxRGvEVkeVk1irs rshWVF1Zq3P5dmnXROlks2Z5+42AFWgZubdd6A2GJqp7wNmjRxpF1WVeEDD2vYtP ASBSJwkx3SXz0L0ReBtWEyc9fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChfpudj C5AT6tVzvIsUJtaRFEUuMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT U3hFUWxseWM5UGxraGdJQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/bjBrlzfAXDamjWzO7BzkM7yVUxpha9VkQtu7mHCd2DawDTv+RKdn /tGPBLrlWJKzVSQVbN4tNqkCT4XCq4u4CbrdrdP0TJZreXFkbp06hs/98/JxZ0Za iI/E07GcFcA8DKVbh0RU0xNheFPUVc1zUokb9w+/7XjWIllrrsQIM4Ai6wx4bpbm hTzcafCi58WKXOCYYhMwkC5Xm+1L7jDFxtEdvZDkou/hpKs5P4Nic+V2bJOqQ2+N kelTrDwkL+/g17GvV4NgQevTtT+4gEaTYLF4Yz1omwtXa05T01k3pRRUvYSq6T6f dFmzOPKpWO/EYVgOSpkKUCUzlMRV+B8f -----END CERTIFICATE-----Generated at Thu Sep 4 14:02:16 2025 by rpki-client