$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json) Hash identifier: NU33T9DaXYKkyXuSb2d1Y0JFPjBSWHkKw6vEF4gHWt8= Subject key identifier: 61:7E:00:0F:64:30:6A:D3:FA:5A:80:D1:F4:F0:B3:6F:92:00:1E:CD Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Certificate serial: 0D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft Manifest number: 0D6F Signing time: Sun 24 Aug 2025 17:55:16 +0000 Manifest this update: Sun 24 Aug 2025 17:55:15 +0000 Manifest next update: Sun 31 Aug 2025 17:55:15 +0000 Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: M/UBqhhqSc8jvmBY43zcNU+q3kGZICPEBdmXLqeepuI=) 2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: 3lfdylanDHmeBtco3xOY3EFynIvyeVsjRU7spFbzglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Validity Not Before: Aug 24 17:55:15 2025 GMT Not After : Aug 31 17:55:15 2025 GMT Subject: CN=68ab5204-73fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:ca:68:87:e0:ac:3a:9d:fe:6e:b3:fd:c9: d3:c5:da:6b:98:e0:cc:d6:19:e6:d5:43:d4:a2:b2: 5a:eb:1a:55:d2:90:bd:78:7e:98:8d:a8:63:07:c0: cf:a5:a9:1c:7b:d8:73:2a:c9:a1:87:5d:87:51:8f: 34:af:b9:40:55:03:3c:28:16:3f:4d:13:c8:38:01: b4:c6:bb:00:4b:1b:62:ba:8a:b3:38:55:11:57:2d: d3:00:56:03:f9:a4:29:48:08:dd:eb:5a:b6:5d:f5: ac:e1:71:37:59:ee:63:14:71:2a:20:e7:40:60:aa: 1b:54:62:02:36:94:5d:ff:ef:e0:d9:09:e2:55:d2: c0:2a:46:7d:bf:db:30:70:eb:b3:fc:29:32:78:65: ee:e9:d7:2e:0c:72:d1:e2:73:96:34:67:40:47:a8: 77:26:99:1c:a3:5f:9e:fd:d0:30:dc:77:ee:45:a7: 29:10:fe:39:de:95:98:50:84:68:19:78:d6:77:f5: 77:51:d3:9f:3b:4e:07:13:94:1d:4e:6a:73:9a:3c: 18:08:8f:1a:59:75:7d:ef:82:fa:1a:b6:37:8e:03: e2:0b:1a:26:0b:2e:00:60:1e:d4:54:2c:28:62:7d: c1:41:92:69:45:30:b4:15:f1:b8:0e:8d:7a:24:52: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7E:00:0F:64:30:6A:D3:FA:5A:80:D1:F4:F0:B3:6F:92:00:1E:CD X509v3 Authority Key Identifier: keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:bb:16:81:79:2a:dd:03:3a:5d:d4:2f:fd:71:44:31:11:ae: 14:bb:04:1b:00:1f:8c:e9:32:93:41:95:74:4c:31:02:a5:3b: 4d:81:2a:de:4e:15:91:a9:3d:10:02:0f:e9:c7:a6:f8:56:e0: d2:f5:b3:44:b2:d0:f0:3f:9f:42:3e:5f:cb:b1:20:8e:8c:32: 0e:26:d2:58:bc:30:73:7d:e2:d6:38:01:ca:23:c8:25:1e:23: 6d:09:39:03:06:58:6c:64:78:66:42:85:e2:97:3d:23:93:5e: 64:3f:3f:1a:0d:6e:44:a4:2d:18:95:45:3a:71:96:80:50:0d: e9:22:72:6f:e0:b5:b9:36:9c:ce:1d:82:8e:dd:fc:d8:2b:ca: 20:86:2e:6c:c4:d6:84:4d:d3:fe:ab:7d:84:f1:ce:0b:a9:be: cd:7d:42:bf:17:5a:b3:51:51:7f:c5:16:de:07:e3:1e:3f:f6: 03:f1:8d:4b:e5:78:a5:21:b7:53:e2:a6:d6:3d:53:72:7d:87: 9a:9c:02:a2:9e:cc:5e:78:cf:80:c6:72:27:a3:cd:a7:ae:95: be:70:81:5d:b8:7e:71:10:35:8a:3c:fc:59:18:97:23:da:1f: 22:b3:9d:ec:9c:67:49:65:ce:28:f5:ca:3a:9f:d6:95:63:21: 74:8d:68:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODQxMTAvBgNVBAUTKDQzNUJERjkzMDMwNDE5NEEwODY5QURFRTg3QTBCNTU2 QzU4OEY2RjQwHhcNMjUwODI0MTc1NTE1WhcNMjUwODMxMTc1NTE1WjAYMRYwFAYD VQQDEw02OGFiNTIwNC03M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne/KaIfgrDqd/m6z/cnTxdprmODM1hnm1UPUorJa6xpV0pC9eH6YjahjB8DP pakce9hzKsmhh12HUY80r7lAVQM8KBY/TRPIOAG0xrsASxtiuoqzOFURVy3TAFYD +aQpSAjd61q2XfWs4XE3We5jFHEqIOdAYKobVGICNpRd/+/g2QniVdLAKkZ9v9sw cOuz/CkyeGXu6dcuDHLR4nOWNGdAR6h3Jpkco1+e/dAw3HfuRacpEP453pWYUIRo GXjWd/V3UdOfO04HE5QdTmpzmjwYCI8aWXV974L6GrY3jgPiCxomCy4AYB7UVCwo Yn3BQZJpRTC0FfG4Do16JFI3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF+AA9k MGrT+lqA0fTws2+SAB7NMB8GA1UdIwQYMBaAFENb35MDBBlKCGmt7oegtVbFiPb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4NC82OTI1QkQ4RUQy QzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdVb0lhYTN1aDZDMVZzV0k5 dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExdmZrd01FR1VvSWFhM3VoNkMxVnNXSTl2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4NC82OTI1QkQ4RUQyQzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdV b0lhYTN1aDZDMVZzV0k5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEuxaBeSrdAzpd1C/9cUQxEa4UuwQbAB+M6TKTQZV0TDECpTtNgSre ThWRqT0QAg/px6b4VuDS9bNEstDwP59CPl/LsSCOjDIOJtJYvDBzfeLWOAHKI8gl HiNtCTkDBlhsZHhmQoXilz0jk15kPz8aDW5EpC0YlUU6cZaAUA3pInJv4LW5NpzO HYKO3fzYK8oghi5sxNaETdP+q32E8c4Lqb7NfUK/F1qzUVF/xRbeB+MeP/YD8Y1L 5XilIbdT4qbWPVNyfYeanAKinsxeeM+AxnIno82nrpW+cIFduH5xEDWKPPxZGJcj 2h8is53snGdJZc4o9co6n9aVYyF0jWj4 -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:11 2025 by rpki-client