$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: L1viZpxvbSd/SaW/PGigk1loLo9CE1O9o/kKXGxI5fk= Subject key identifier: 80:A8:38:67:71:8E:1F:17:BD:EB:F8:B7:4F:EA:0F:73:D3:71:B3:48 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1297 Signing time: Wed 20 Aug 2025 19:42:36 +0000 Manifest this update: Wed 20 Aug 2025 19:42:35 +0000 Manifest next update: Wed 27 Aug 2025 19:42:35 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: MKbE9wjt/aoyxbsEukHs5hJVY1GM7pws5gD6KWPF3ig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Aug 20 19:42:35 2025 GMT Not After : Aug 27 19:42:35 2025 GMT Subject: CN=68a6252b-8d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:63:bd:1c:f0:b9:9a:2f:a7:f3:df:ae:46: ac:85:28:75:69:14:d2:04:49:0f:ee:02:a7:d4:ff: fb:03:f8:82:5a:7d:50:ff:88:f8:f3:ed:be:48:68: 89:81:de:08:f4:0b:03:05:9b:45:5d:8e:1b:5b:ba: 4f:d6:0d:52:05:7a:92:0e:24:46:52:61:b9:fe:63: 93:a3:d0:bb:39:63:5f:d0:e8:20:3a:aa:47:f8:af: 3f:ae:2c:bc:b0:e8:04:26:ba:f0:dd:fa:27:3f:fe: e3:8d:1b:e7:4b:2f:49:d2:c8:8b:de:04:30:8f:a2: 8b:4c:54:1c:8f:70:78:b3:c0:25:c5:8b:b6:21:0a: 8b:cc:68:5b:5f:63:20:e2:dc:bf:42:c3:84:ee:31: ba:43:52:b5:36:ca:d4:6a:65:e6:3f:e6:03:c1:af: 8a:a2:89:c6:06:37:6f:94:d3:e5:c0:0c:ba:fe:b5: 43:33:5d:79:26:e5:de:04:70:eb:72:6c:a8:db:e5: 4f:8e:ca:9c:8c:14:0c:9f:78:31:39:0b:71:09:ee: e6:ec:c0:a5:c9:8a:72:b6:c7:bc:7e:07:4d:20:23: 79:82:8f:75:c8:1b:fe:f4:b5:f2:25:ec:a7:72:26: 4a:f8:0b:16:76:95:b9:c1:cd:71:74:70:8a:04:2e: 0b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A8:38:67:71:8E:1F:17:BD:EB:F8:B7:4F:EA:0F:73:D3:71:B3:48 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ca:9f:91:9e:83:fb:36:c6:43:b6:4c:4c:b5:ed:45:82:da: 76:ba:b0:e0:a5:e9:16:f3:a8:7f:49:15:75:6f:fe:4a:47:09: d7:2b:83:11:05:ce:0b:e0:4e:1e:bc:4f:b1:1d:d0:73:8e:6b: e1:2e:3c:7a:fe:a1:42:aa:d9:3a:c8:97:ad:bb:b1:63:33:0f: 78:64:32:d8:70:e9:dc:80:d9:d0:b5:a5:f6:57:05:a0:dc:93: 61:14:e1:e7:6b:d6:92:f6:76:9e:6a:df:c7:d8:f7:b2:2b:d0: eb:14:c2:54:ec:96:a2:55:92:ac:4d:a4:ec:52:68:2d:37:45: fb:b1:5f:45:42:36:d2:92:04:a8:94:5b:21:85:6a:f3:70:9a: 9f:14:85:7e:6e:46:6c:46:a9:5f:fa:f0:24:c4:45:cf:79:fb: 8b:c2:b5:20:5b:31:4f:c6:93:81:d4:eb:7f:bc:46:15:2e:53: 10:ae:00:05:a3:7a:6f:39:b6:5e:24:ae:28:7b:5b:38:94:ad: 57:e3:74:31:aa:9e:5b:3c:90:9a:71:19:bb:52:5e:18:46:ce: 6d:fc:48:96:bd:19:31:44:a6:85:11:18:e5:24:92:45:5f:99: f6:be:ea:a4:d4:18:ec:dc:bf:43:05:4e:9a:32:ee:7c:a9:93: 9f:0e:f8:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwODIwMTk0MjM1WhcNMjUwODI3MTk0MjM1WjAYMRYwFAYD VQQDEw02OGE2MjUyYi04ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorFjvRzwuZovp/PfrkashSh1aRTSBEkP7gKn1P/7A/iCWn1Q/4j48+2+SGiJ gd4I9AsDBZtFXY4bW7pP1g1SBXqSDiRGUmG5/mOTo9C7OWNf0OggOqpH+K8/riy8 sOgEJrrw3fonP/7jjRvnSy9J0siL3gQwj6KLTFQcj3B4s8AlxYu2IQqLzGhbX2Mg 4ty/QsOE7jG6Q1K1NsrUamXmP+YDwa+KoonGBjdvlNPlwAy6/rVDM115JuXeBHDr cmyo2+VPjsqcjBQMn3gxOQtxCe7m7MClyYpytse8fgdNICN5go91yBv+9LXyJeyn ciZK+AsWdpW5wc1xdHCKBC4LdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICoOGdx jh8Xvev4t0/qD3PTcbNIMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACyp+RnoP7NsZDtkxMte1Fgtp2urDgpekW86h/SRV1b/5KRwnXK4MR Bc4L4E4evE+xHdBzjmvhLjx6/qFCqtk6yJetu7FjMw94ZDLYcOncgNnQtaX2VwWg 3JNhFOHna9aS9naeat/H2PeyK9DrFMJU7JaiVZKsTaTsUmgtN0X7sV9FQjbSkgSo lFshhWrzcJqfFIV+bkZsRqlf+vAkxEXPefuLwrUgWzFPxpOB1Ot/vEYVLlMQrgAF o3pvObZeJK4oe1s4lK1X43Qxqp5bPJCacRm7Ul4YRs5t/EiWvRkxRKaFERjlJJJF X5n2vuqk1Bjs3L9DBU6aMu58qZOfDvjO -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:44 2025 by rpki-client