$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json) Hash identifier: eSpjOg0gCgNKdsZIidw5xtfHjJM/a35lmgA8KLw7tgM= Subject key identifier: 31:1C:C7:5A:07:44:CC:15:38:1A:90:1F:2E:66:9C:A0:92:D8:D9:74 Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft Manifest number: 0848 Signing time: Wed 20 Aug 2025 20:46:16 +0000 Manifest this update: Wed 20 Aug 2025 20:46:15 +0000 Manifest next update: Wed 27 Aug 2025 20:46:15 +0000 Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: IQTbLxXzFHdytvl9Ji2f0sQ5RlG67fGOGuMT4mxotk0=) 2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: l0ICGLwuaPDJO60DuHwg4w9v81ASlnFGPH6s06O+ZdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Validity Not Before: Aug 20 20:46:15 2025 GMT Not After : Aug 27 20:46:15 2025 GMT Subject: CN=68a63417-8b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:e1:7a:78:f6:80:45:3f:4d:82:c7:b2:48: ff:74:25:b4:33:0e:ff:9d:a6:44:0c:ec:69:4e:06: 7e:f1:be:c8:cc:56:e0:31:18:07:23:66:22:40:cf: 9e:a3:1d:d2:26:b5:fe:39:ba:32:c3:71:28:79:54: f7:41:38:1f:11:32:6c:34:47:13:67:4d:63:89:f2: 18:31:18:c0:f6:f7:20:d7:4b:83:1a:fb:11:dd:28: e6:c3:3a:9f:fe:6c:52:dc:d0:4f:5e:4f:e6:93:9b: 52:8e:6f:c8:6b:9e:cd:60:13:78:72:5b:8f:c8:7f: dd:4a:3b:cd:1e:29:3c:0d:e8:11:26:79:73:18:4f: 00:9f:83:b6:10:bf:c0:e2:b1:8a:5f:22:ac:92:55: b7:a3:6a:cd:cc:77:1b:f1:e1:9c:b3:1d:b8:46:09: 8d:7f:47:36:74:04:29:29:6a:7d:85:20:f3:7b:b7: 79:da:48:82:bc:09:ea:a1:af:8a:b0:f8:2c:31:4b: 68:97:81:6a:52:2b:0e:05:71:56:26:97:37:d3:8f: 6a:68:4f:19:d2:2a:ee:ee:fa:3a:fc:ae:07:e7:db: fe:14:ba:88:71:1e:3a:66:e4:a6:8c:7f:46:6d:16: cf:9a:28:50:78:75:a8:df:ae:f4:c1:1b:37:dc:85: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:C7:5A:07:44:CC:15:38:1A:90:1F:2E:66:9C:A0:92:D8:D9:74 X509v3 Authority Key Identifier: keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6a:37:51:3f:41:2e:2f:30:8f:b5:0d:7d:c0:a1:99:09:3f: f7:41:d5:08:49:54:6a:49:b7:cf:5b:2a:fd:7a:d9:5c:20:7d: 1f:39:8e:f7:21:6a:bb:35:9d:5e:ba:78:df:07:28:a2:04:9f: 2c:40:d0:d6:07:69:81:d8:b4:b9:e9:03:7b:3f:e7:53:48:58: d7:58:c4:a2:cb:92:69:a6:4b:26:a8:ef:6d:d0:fe:31:da:95: ce:4f:81:49:77:1a:51:79:d7:7f:ac:b1:a9:69:bb:b3:9c:02: 27:d2:6d:b1:95:ef:4b:18:50:ab:27:4c:de:15:a3:cf:bf:17: c8:1e:87:55:f7:00:cd:1c:f2:4b:62:e4:5c:4f:2b:0e:40:df: 3f:20:0b:04:a0:fa:62:64:5e:25:0a:82:06:7b:fb:ce:92:2f: 99:78:21:bb:1d:50:24:94:f8:50:36:96:04:a7:8d:f0:f6:ed: b5:c9:b0:30:5d:0f:a8:3f:09:b7:a5:06:a5:4b:fa:38:94:9a: b9:b4:70:40:b4:16:c9:94:27:2c:33:a6:b9:c3:95:be:06:56: fa:02:91:aa:f8:06:45:57:da:bf:2d:f7:1b:34:63:bd:87:f3: 96:d4:8a:28:a9:05:aa:4c:62:f4:33:46:6c:62:9e:46:32:ac: a8:00:c5:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5 NzNDNEFCQzAwHhcNMjUwODIwMjA0NjE1WhcNMjUwODI3MjA0NjE1WjAYMRYwFAYD VQQDEw02OGE2MzQxNy04YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B/henj2gEU/TYLHskj/dCW0Mw7/naZEDOxpTgZ+8b7IzFbgMRgHI2YiQM+e ox3SJrX+Oboyw3EoeVT3QTgfETJsNEcTZ01jifIYMRjA9vcg10uDGvsR3Sjmwzqf /mxS3NBPXk/mk5tSjm/Ia57NYBN4cluPyH/dSjvNHik8DegRJnlzGE8An4O2EL/A 4rGKXyKsklW3o2rNzHcb8eGcsx24RgmNf0c2dAQpKWp9hSDze7d52kiCvAnqoa+K sPgsMUtol4FqUisOBXFWJpc3049qaE8Z0iru7vo6/K4H59v+FLqIcR46ZuSmjH9G bRbPmihQeHWo3670wRs33IWkzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEcx1oH RMwVOBqQHy5mnKCS2Nl0MB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2 NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkajdRP0EuLzCPtQ19wKGZCT/3QdUISVRqSbfPWyr9etlcIH0fOY73 IWq7NZ1eunjfByiiBJ8sQNDWB2mB2LS56QN7P+dTSFjXWMSiy5JppksmqO9t0P4x 2pXOT4FJdxpRedd/rLGpabuznAIn0m2xle9LGFCrJ0zeFaPPvxfIHodV9wDNHPJL YuRcTysOQN8/IAsEoPpiZF4lCoIGe/vOki+ZeCG7HVAklPhQNpYEp43w9u21ybAw XQ+oPwm3pQalS/o4lJq5tHBAtBbJlCcsM6a5w5W+Blb6ApGq+AZFV9q/LfcbNGO9 h/OW1IooqQWqTGL0M0ZsYp5GMqyoAMVQ -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:38 2025 by rpki-client