$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: OfYW0rS2hZ4L75efSPjNZEIcueEhni6ZsB6EB0Wfeuk= Subject key identifier: 7B:7F:FA:CA:83:F3:87:85:39:76:D4:D1:F9:03:93:DF:78:BB:5E:E2 Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1C7B Signing time: Thu 18 Sep 2025 16:18:06 +0000 Manifest this update: Thu 18 Sep 2025 16:18:05 +0000 Manifest next update: Thu 25 Sep 2025 16:18:05 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: GQkIsNtvsrIm6UxJIarot/JcV+mBm+MWcgdeV6aCTMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7327 (0x1c9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: Sep 18 16:18:05 2025 GMT Not After : Sep 25 16:18:05 2025 GMT Subject: CN=68cc30bd-9643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:5f:04:d1:a3:e2:a3:7b:82:52:1b:3a:c7: 84:d9:87:1b:84:45:dc:72:e4:27:96:af:e3:d5:51: 8d:15:5d:a5:6d:3c:ca:3a:51:f8:43:c5:65:b1:2f: a3:57:18:f1:02:6d:35:de:76:0d:eb:13:a8:fc:ea: af:df:55:d1:36:8c:1d:fe:d2:fb:2a:ac:f2:cc:f9: 6f:76:ae:e5:ed:3e:16:9e:7e:a4:98:f3:71:e4:4c: 13:0f:93:0b:fb:b8:29:72:47:5b:14:19:3c:9d:00: 87:44:e6:a4:48:a3:54:8f:2e:b3:34:23:15:78:b0: 9f:48:fd:02:e4:42:4c:9b:ec:db:5d:c5:ed:87:cf: 29:91:ff:a2:af:a2:9a:98:f0:c4:de:b3:bd:d9:6f: 96:95:b7:8f:a1:39:b4:ec:a6:5e:aa:79:05:26:89: 79:61:b1:48:dc:ed:b2:c7:b2:84:13:00:90:60:4e: c6:8a:d5:02:08:d0:70:f4:5c:73:d5:a5:4b:0d:58: 07:89:d3:27:b2:00:f2:c7:53:6b:01:bd:11:6c:9e: 59:cd:6c:6c:05:2e:9f:6f:95:c1:76:4e:d3:18:fe: ec:94:01:ce:53:fe:be:89:6b:bc:22:4d:45:11:84: 92:c4:e7:f3:73:69:fd:d7:d1:6b:8f:ab:78:a5:25: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7F:FA:CA:83:F3:87:85:39:76:D4:D1:F9:03:93:DF:78:BB:5E:E2 X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:d1:a0:2c:83:82:2e:a6:eb:cc:d0:d2:88:6e:e8:88:e0:fa: 70:f9:3b:52:23:2e:0d:a2:6c:0e:f3:f0:ac:f5:c9:0c:65:76: 10:fd:ce:91:2d:c5:bb:a8:a1:89:89:61:80:b8:44:af:b5:a3: bd:3b:af:c1:df:5a:d4:00:e1:ca:05:0e:83:6f:27:64:a9:48: 69:2a:b0:c6:1b:56:07:d2:fe:0b:73:53:eb:2c:50:05:ea:14: 6d:35:bc:b5:be:72:bb:d3:e2:44:bf:d8:ab:67:b3:ad:cc:3f: c0:bd:21:03:e7:aa:b0:d2:f9:e2:e4:b9:19:4b:e9:26:c9:e6: 41:1a:53:a9:7c:7f:07:c9:10:96:84:1e:46:70:fa:60:24:f6: b4:4f:6a:3d:64:3d:fd:ae:6b:95:65:f1:d7:f9:c1:ff:95:9c: b8:06:35:0a:13:58:84:b9:98:5f:d0:8f:92:f6:f4:65:d6:16: ba:4f:46:e1:56:c7:66:45:19:0a:5a:fb:60:e0:0d:45:c2:88: 2b:9c:44:c7:1e:65:ab:17:97:eb:02:a8:41:30:89:8e:87:b0: 26:b2:64:1b:e9:47:80:51:d8:a9:d8:a4:5f:4f:72:95:ae:a0: 9a:a5:d9:48:2e:b7:74:50:82:f2:9a:1d:2b:9d:95:e9:23:cb: 07:62:90:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjUwOTE4MTYxODA1WhcNMjUwOTI1MTYxODA1WjAYMRYwFAYD VQQDEw02OGNjMzBiZC05NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2apfBNGj4qN7glIbOseE2YcbhEXccuQnlq/j1VGNFV2lbTzKOlH4Q8VlsS+j VxjxAm013nYN6xOo/Oqv31XRNowd/tL7KqzyzPlvdq7l7T4Wnn6kmPNx5EwTD5ML +7gpckdbFBk8nQCHROakSKNUjy6zNCMVeLCfSP0C5EJMm+zbXcXth88pkf+ir6Ka mPDE3rO92W+WlbePoTm07KZeqnkFJol5YbFI3O2yx7KEEwCQYE7GitUCCNBw9Fxz 1aVLDVgHidMnsgDyx1NrAb0RbJ5ZzWxsBS6fb5XBdk7TGP7slAHOU/6+iWu8Ik1F EYSSxOfzc2n919Frj6t4pSXssQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt/+sqD 84eFOXbU0fkDk994u17iMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC0aAsg4IupuvM0NKIbuiI4Ppw+TtSIy4NomwO8/Cs9ckMZXYQ/c6R LcW7qKGJiWGAuESvtaO9O6/B31rUAOHKBQ6DbydkqUhpKrDGG1YH0v4Lc1PrLFAF 6hRtNby1vnK70+JEv9irZ7OtzD/AvSED56qw0vni5LkZS+kmyeZBGlOpfH8HyRCW hB5GcPpgJPa0T2o9ZD39rmuVZfHX+cH/lZy4BjUKE1iEuZhf0I+S9vRl1ha6T0bh VsdmRRkKWvtg4A1FwogrnETHHmWrF5frAqhBMImOh7AmsmQb6UeAUdip2KRfT3KV rqCapdlILrd0UILymh0rnZXpI8sHYpAj -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:55 2025 by rpki-client