$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft File: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json) Hash identifier: w09y+BT/zrEBXSVOECEOIyZG3TdWp3CmjJT7XLu7MTk= Subject key identifier: 53:AA:A3:D9:78:DA:1A:85:83:52:50:B5:95:7B:AB:92:41:A6:30:6E Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B Certificate issuer: /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Certificate serial: 1144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft Manifest number: 113B Signing time: Wed 20 Aug 2025 17:20:48 +0000 Manifest this update: Wed 20 Aug 2025 17:20:47 +0000 Manifest next update: Wed 27 Aug 2025 17:20:47 +0000 Files and hashes: 1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: bgUZdYhNTfA6+jScPGdtXvujiebJoB77FCS3gMs6yx8=) 2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4420 (0x1144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Validity Not Before: Aug 20 17:20:47 2025 GMT Not After : Aug 27 17:20:47 2025 GMT Subject: CN=68a603f0-db18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:c2:f6:c3:b8:fa:4a:42:cb:fb:ca:93:df: 51:b2:13:2d:3f:5e:ce:83:10:42:8d:63:c8:b2:e1: 5a:cb:64:db:40:41:13:27:22:9a:d1:18:07:7e:57: f4:62:7d:9e:47:dc:6b:6c:f2:84:22:30:5f:db:56: a8:09:5d:89:d8:3d:c7:42:4f:a4:39:7c:23:0b:25: 4c:5c:4e:0b:11:d8:fb:ee:47:40:1e:2d:03:a0:1e: 9a:5a:73:b4:4b:99:aa:4b:3d:ec:0a:6d:f9:06:e9: f9:db:7c:a4:ae:8a:e0:6e:de:20:f4:1a:ab:5b:c9: 4b:4a:72:7c:ad:bb:dd:f7:8c:ab:86:8e:a6:8e:78: f3:d6:65:f5:d2:75:ba:ac:67:77:9a:4f:72:4a:6b: c3:d4:b8:c6:7a:ab:09:95:62:4e:2b:31:e7:65:f5: a3:79:ff:ec:bf:68:59:5d:4a:d8:49:84:f2:e0:69: 95:4e:8d:25:7f:48:9c:46:56:fe:68:26:cd:1c:a3: e4:23:77:84:2e:5a:71:6a:8e:08:69:5f:a9:a3:d2: 98:75:65:b7:09:b0:ba:fa:d4:64:58:9e:74:3e:7b: 52:04:28:6b:73:ba:91:e9:e2:62:9b:d9:f8:82:69: 4c:99:18:97:ae:8c:1d:0d:f9:c9:b1:24:36:c7:ec: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AA:A3:D9:78:DA:1A:85:83:52:50:B5:95:7B:AB:92:41:A6:30:6E X509v3 Authority Key Identifier: keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:55:b3:64:ce:64:4f:e4:77:74:91:e6:b0:d3:28:eb:11:6c: ba:1d:dd:2f:8a:e3:81:b9:94:53:3c:45:cf:3a:55:21:8e:e5: 99:75:13:30:4e:fe:ed:0f:bb:36:3c:c3:7f:ee:0e:44:a4:2f: 4e:3d:36:d1:a9:25:d7:a3:4f:c0:70:d4:5c:b4:c8:a5:89:e6: 70:e9:2d:d8:3d:0a:c9:c5:f4:34:ae:4c:e9:53:bd:49:a9:16: 29:1e:4d:a0:55:ae:f7:72:49:c6:a9:7f:13:f0:99:b2:7d:e5: d1:0e:68:b8:c6:10:a0:bb:49:8e:c9:1d:16:94:20:2e:07:cc: f7:b0:af:12:7f:c6:bd:67:15:d0:7f:51:b0:cd:8b:56:c5:5a: ef:1e:66:33:81:0c:4a:5f:e0:1d:33:38:88:b4:96:35:77:29: f5:ad:62:c3:92:50:61:7e:d0:4b:00:74:33:75:ba:6c:f9:c8: 17:66:f1:fd:ea:8b:4a:5a:9e:3e:fd:db:f9:13:bf:06:ed:44: 62:1b:93:52:fb:9e:45:d2:74:32:71:d6:33:55:57:e4:32:18: 3c:2f:15:2b:54:53:9d:ef:29:95:b6:81:aa:79:81:d8:fd:3a: d5:2b:1d:0e:85:9b:71:75:c8:db:9f:e1:bb:fb:50:30:c9:52: 4e:8e:fc:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4 RjI4MjA0OEIwHhcNMjUwODIwMTcyMDQ3WhcNMjUwODI3MTcyMDQ3WjAYMRYwFAYD VQQDEw02OGE2MDNmMC1kYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYTC9sO4+kpCy/vKk99RshMtP17OgxBCjWPIsuFay2TbQEETJyKa0RgHflf0 Yn2eR9xrbPKEIjBf21aoCV2J2D3HQk+kOXwjCyVMXE4LEdj77kdAHi0DoB6aWnO0 S5mqSz3sCm35Bun523ykrorgbt4g9BqrW8lLSnJ8rbvd94yrho6mjnjz1mX10nW6 rGd3mk9ySmvD1LjGeqsJlWJOKzHnZfWjef/sv2hZXUrYSYTy4GmVTo0lf0icRlb+ aCbNHKPkI3eELlpxao4IaV+po9KYdWW3CbC6+tRkWJ50PntSBChrc7qR6eJim9n4 gmlMmRiXrowdDfnJsSQ2x+xIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOqo9l4 2hqFg1JQtZV7q5JBpjBuMB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy OElncDNGTEM3VHFQS0NCSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbVbNkzmRP5Hd0keaw0yjrEWy6Hd0viuOBuZRTPEXPOlUhjuWZdRMw Tv7tD7s2PMN/7g5EpC9OPTbRqSXXo0/AcNRctMilieZw6S3YPQrJxfQ0rkzpU71J qRYpHk2gVa73cknGqX8T8JmyfeXRDmi4xhCgu0mOyR0WlCAuB8z3sK8Sf8a9ZxXQ f1GwzYtWxVrvHmYzgQxKX+AdMziItJY1dyn1rWLDklBhftBLAHQzdbps+cgXZvH9 6otKWp4+/dv5E78G7URiG5NS+55F0nQycdYzVVfkMhg8LxUrVFOd7ymVtoGqeYHY /TrVKx0OhZtxdcjbn+G7+1AwyVJOjvy/ -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client