$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json) Hash identifier: B3gLubm5IC3XaaFOuiG8W3WVrUq6KMhosghzcvniJME= Subject key identifier: 20:3F:6E:ED:16:5F:12:A8:CF:39:E8:6D:EE:9B:6B:83:27:AF:C9:F9 Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 06:58:40 +0000 Manifest this update: Sat 23 Aug 2025 06:58:40 +0000 Manifest next update: Sat 30 Aug 2025 06:58:40 +0000 Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: S7X6CYO60kmDy1prtojyVz0xrD3+Bj2nhL5bg3szVPE=) 2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Validity Not Before: Aug 23 06:58:40 2025 GMT Not After : Aug 30 06:58:40 2025 GMT Subject: CN=68a966a0-2795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:a9:b9:9d:00:79:ab:71:c1:70:ac:c6:ac: a9:53:2f:f0:a5:6d:14:e2:6c:94:69:fd:6d:9a:2e: 38:39:4b:43:73:ca:c7:5e:ce:01:db:e4:50:77:7b: 1e:89:8b:76:0b:13:97:ed:d5:65:20:0d:74:14:76: 15:89:f0:56:69:7b:a6:cc:3d:1d:67:e8:7b:2e:0c: a3:02:51:c6:46:cd:4b:83:ba:36:57:61:4f:e8:2d: eb:d4:dc:21:df:f7:7e:f9:f3:16:ed:01:3a:73:d0: b9:85:96:aa:5b:48:9c:58:7a:c0:9b:38:62:2f:48: b3:85:75:81:07:6e:4f:e0:92:3c:82:52:fe:d3:ba: f8:fb:10:52:22:ab:f8:c0:e0:1a:7a:3a:a3:9b:2d: f4:d7:7e:84:66:66:43:d6:b8:61:9e:1b:30:1a:80: 49:37:49:56:0b:53:37:60:31:01:1d:bc:eb:28:39: 43:96:5e:fc:00:ef:97:29:e4:a0:fd:fc:73:23:04: 02:47:c8:19:f5:a6:d5:f5:75:0c:94:58:f4:02:20: d8:9c:3d:26:ce:a0:f3:4f:e5:0b:de:26:10:1a:b1: 73:09:63:1a:7d:ee:6b:37:a3:66:eb:f7:11:2f:79: fc:b1:dd:67:e7:09:f2:d7:87:d3:c9:28:05:39:65: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:6E:ED:16:5F:12:A8:CF:39:E8:6D:EE:9B:6B:83:27:AF:C9:F9 X509v3 Authority Key Identifier: keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5b:99:50:52:fc:e7:e5:a7:b4:b9:31:90:f6:09:e3:e8:f0: 97:ed:a9:62:b2:28:f0:6f:1b:59:a0:44:b4:6d:55:c7:ed:fc: 63:06:8f:d2:de:d8:78:00:6c:11:e5:9f:f2:92:1a:35:9f:8d: 2a:3e:1f:86:91:7f:11:5e:a0:7c:96:1d:59:75:f7:33:4c:f3: d4:ed:26:1e:fe:6b:11:7d:6f:98:9d:5f:75:a6:c0:f0:24:68: b4:89:a8:d3:7b:ed:fc:b6:a7:ab:3c:95:1f:9c:90:03:50:ec: 39:6e:e4:a0:cd:9b:fa:7c:6a:cb:80:70:0f:9e:ed:68:5c:a6: 9f:29:ff:c4:91:03:e8:d5:fc:ce:ea:50:e7:9d:bd:f5:d4:e4: 2c:09:2f:f4:f0:56:bd:df:5a:30:7d:44:a8:de:91:7c:c0:ff: 5b:60:35:e9:d2:f4:10:4d:fb:0a:56:17:3b:4c:e2:a7:36:d7: 53:48:aa:8d:44:90:36:9a:92:5a:5f:1d:b8:5c:d3:ec:9f:8c: fe:74:49:66:c7:5f:c6:f6:98:a3:dc:6c:4b:24:0e:97:88:0d: 46:8c:8e:98:22:e8:d5:c6:0e:34:42:8c:eb:76:8d:1d:65:1d: 16:5d:e3:05:ab:b2:a2:16:2f:5d:a9:45:d6:d0:3a:24:f9:22: 2f:1f:d8:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDJGRUYzMzE3NDFBNTRENUEwQUU3NTUzMTA4RDREMkQz MkIwNTdCMDAeFw0yNTA4MjMwNjU4NDBaFw0yNTA4MzAwNjU4NDBaMBgxFjAUBgNV BAMTDTY4YTk2NmEwLTI3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKJKm5nQB5q3HBcKzGrKlTL/ClbRTibJRp/W2aLjg5S0NzysdezgHb5FB3ex6J i3YLE5ft1WUgDXQUdhWJ8FZpe6bMPR1n6HsuDKMCUcZGzUuDujZXYU/oLevU3CHf 93758xbtATpz0LmFlqpbSJxYesCbOGIvSLOFdYEHbk/gkjyCUv7Tuvj7EFIiq/jA 4Bp6OqObLfTXfoRmZkPWuGGeGzAagEk3SVYLUzdgMQEdvOsoOUOWXvwA75cp5KD9 /HMjBAJHyBn1ptX1dQyUWPQCINicPSbOoPNP5QveJhAasXMJYxp97ms3o2br9xEv efyx3WfnCfLXh9PJKAU5ZYlbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUID9u7RZf EqjPOeht7ptrgyevyfkwHwYDVR0jBBgwFoAUQv7zMXQaVNWgrnVTEI1NLTKwV7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzI2NjE5RDQ0QzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXY3ek1YUWFWTldncm5WVEVJMU5MVEt3VjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzI2NjE5RDQ0QzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5X Z3JuVlRFSTFOTFRLd1Y3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACFbmVBS/Oflp7S5MZD2CePo8JftqWKyKPBvG1mgRLRtVcft/GMGj9Le 2HgAbBHln/KSGjWfjSo+H4aRfxFeoHyWHVl19zNM89TtJh7+axF9b5idX3WmwPAk aLSJqNN77fy2p6s8lR+ckANQ7Dlu5KDNm/p8asuAcA+e7Whcpp8p/8SRA+jV/M7q UOedvfXU5CwJL/TwVr3fWjB9RKjekXzA/1tgNenS9BBN+wpWFztM4qc211NIqo1E kDaaklpfHbhc0+yfjP50SWbHX8b2mKPcbEskDpeIDUaMjpgi6NXGDjRCjOt2jR1l HRZd4wWrsqIWL12pRdbQOiT5Ii8f2MU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:54 2025 by rpki-client