$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: 69mTFc3B9+R/eYWrmk+7arj4e1pTAZxrjol6rAeEHug= Subject key identifier: 97:EB:ED:95:9A:DE:EA:AD:C6:87:F3:A2:7B:84:1E:C8:28:42:0B:A1 Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1AD6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 1AC1 Signing time: Tue 02 Sep 2025 15:48:11 +0000 Manifest this update: Tue 02 Sep 2025 15:48:11 +0000 Manifest next update: Tue 09 Sep 2025 15:48:11 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: sl/tBnsq0+2iw4RF7yLx9uE/6/599+STVGnr6ZN4mXI=) 2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=) 3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6870 (0x1ad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: Sep 2 15:48:11 2025 GMT Not After : Sep 9 15:48:11 2025 GMT Subject: CN=68b711bb-aaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:6d:02:1c:2c:5e:fb:b1:6f:f3:09:70:44: de:8a:b6:14:6f:53:12:94:53:3e:60:52:a7:32:27: 03:7e:7f:71:98:98:7d:ba:e7:94:4f:fd:d4:7b:27: c7:c0:a4:89:c0:b0:6b:80:b3:63:46:ec:ff:35:22: f5:88:25:ae:1e:79:1b:37:09:73:2d:76:cb:59:4d: 58:d9:95:84:a3:5d:3e:15:be:00:d1:9a:e0:fe:47: cf:44:79:1b:46:25:3f:b1:bf:19:90:96:b7:ec:f0: e9:c4:01:33:4a:62:50:28:58:a5:52:3c:f8:78:38: f2:ae:e9:84:e3:c1:c8:7f:c2:3c:fb:cc:ac:70:53: 17:0e:8f:e0:0a:3c:5f:d3:66:56:02:fa:d1:75:dd: df:63:18:d7:72:ca:a4:c2:0d:c3:f8:af:06:41:3a: 54:97:f6:16:06:55:ef:28:0b:93:74:7f:87:76:38: 08:a8:3f:ee:0f:29:20:0b:5e:2e:03:53:c4:12:fe: 34:5e:69:32:ce:0d:c9:82:de:7c:b5:78:e5:be:1a: c7:0d:63:1f:73:06:4c:83:d8:e8:11:30:1a:9e:d5: 3b:77:f3:fc:5b:81:ef:86:f4:09:33:b3:27:16:e3: 34:95:01:c8:56:9a:06:41:7b:fe:98:b4:7c:4b:11: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EB:ED:95:9A:DE:EA:AD:C6:87:F3:A2:7B:84:1E:C8:28:42:0B:A1 X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8e:01:26:49:1e:e5:77:b5:28:41:f5:0a:f2:4c:95:10:56: 05:0e:27:00:15:e6:a0:4f:49:3e:9b:a8:6e:58:5d:17:82:1d: 11:83:ef:5b:2d:ce:a7:01:12:13:be:71:31:0d:e1:d1:86:67: 1b:01:22:cb:2e:95:75:b2:66:e6:cc:85:44:cf:2a:20:7a:7f: ef:b7:d2:25:fb:a0:92:a0:b4:3b:68:1c:a9:78:01:d3:e0:4b: b9:24:08:c0:a0:3c:ec:cd:90:5b:ca:92:b2:b9:36:b3:75:4e: e1:29:47:37:d0:52:33:54:56:97:e2:d3:6c:20:57:81:d3:ba: d0:e5:f1:4c:2d:0c:2f:e7:dd:65:5e:ed:a4:49:af:f1:98:d0: f7:62:4a:a0:dd:59:a7:32:bc:eb:87:4d:6c:68:de:71:32:1a: 3b:01:c4:0e:50:4f:2d:1d:1c:c8:ad:00:22:54:28:54:e6:43: a9:5a:55:f3:e2:47:4c:e6:71:e6:e2:8d:fa:84:e1:50:20:dd: 57:0f:5f:67:9f:ac:dd:74:35:a6:15:cc:11:63:e7:a0:cf:60: cf:2b:8c:8c:21:2a:c2:5f:74:24:97:96:de:ef:b6:b1:2f:99: 8b:08:91:6b:82:90:76:fc:d7:9f:2d:46:97:96:31:cb:32:8d: d0:1a:66:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjUwOTAyMTU0ODExWhcNMjUwOTA5MTU0ODExWjAYMRYwFAYD VQQDEw02OGI3MTFiYi1hYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U1tAhwsXvuxb/MJcETeirYUb1MSlFM+YFKnMicDfn9xmJh9uueUT/3UeyfH wKSJwLBrgLNjRuz/NSL1iCWuHnkbNwlzLXbLWU1Y2ZWEo10+Fb4A0Zrg/kfPRHkb RiU/sb8ZkJa37PDpxAEzSmJQKFilUjz4eDjyrumE48HIf8I8+8yscFMXDo/gCjxf 02ZWAvrRdd3fYxjXcsqkwg3D+K8GQTpUl/YWBlXvKAuTdH+HdjgIqD/uDykgC14u A1PEEv40Xmkyzg3Jgt58tXjlvhrHDWMfcwZMg9joETAantU7d/P8W4HvhvQJM7Mn FuM0lQHIVpoGQXv+mLR8SxEhuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfr7ZWa 3uqtxofzonuEHsgoQguhMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmjgEmSR7ld7UoQfUK8kyVEFYFDicAFeagT0k+m6huWF0Xgh0Rg+9b Lc6nARITvnExDeHRhmcbASLLLpV1smbmzIVEzyogen/vt9Il+6CSoLQ7aBypeAHT 4Eu5JAjAoDzszZBbypKyuTazdU7hKUc30FIzVFaX4tNsIFeB07rQ5fFMLQwv591l Xu2kSa/xmND3Ykqg3VmnMrzrh01saN5xMho7AcQOUE8tHRzIrQAiVChU5kOpWlXz 4kdM5nHm4o36hOFQIN1XD19nn6zddDWmFcwRY+egz2DPK4yMISrCX3Qkl5be77ax L5mLCJFrgpB2/NefLUaXljHLMo3QGmY7 -----END CERTIFICATE-----Generated at Thu Sep 4 15:52:57 2025 by rpki-client