$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: P/c9h81QxzsdmjF2GLALsah3NoU5jRt/hOaQUqaI02Y= Subject key identifier: BD:9E:6A:79:73:EF:7D:35:5B:46:4A:E6:37:97:D1:D8:8B:99:0B:FC Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 094C Signing time: Fri 22 Aug 2025 20:21:29 +0000 Manifest this update: Fri 22 Aug 2025 20:21:29 +0000 Manifest next update: Fri 29 Aug 2025 20:21:29 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: /K8bzm5Xhem0hg5PVz52/qRKkkaAgHWQPpm8QuE0Bk8=) 2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: OA6Ay1bXyUAJq+KfCYl3CuSq1KvT2rPbVpCqhvkc99A=) 3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: Cf3w2+/kQFFdBNp0nOAXgGT+JLVmdNCHNGijos8QA7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Aug 22 20:21:29 2025 GMT Not After : Aug 29 20:21:29 2025 GMT Subject: CN=68a8d149-f0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:54:f1:74:fc:6d:9c:31:cd:dc:bb:7c:80: c4:f8:29:e8:b7:dd:c9:78:21:e7:66:c6:0b:10:a3: 08:83:89:e5:bd:97:b9:ba:48:1b:4f:d1:1e:93:a7: b0:a1:c3:c8:07:4a:e4:1c:cd:19:5a:c8:ca:bb:98: 0e:a3:e8:6a:25:69:04:55:9a:a2:0d:4e:ff:e5:2e: 21:e2:67:c3:9d:c8:8f:94:74:30:67:55:af:fa:90: a7:57:f7:be:36:26:84:df:d4:96:8f:6c:cf:7f:66: 18:43:10:a6:d3:29:e7:ff:44:a5:d6:21:e0:a5:2f: 5a:cd:63:84:7a:7f:06:46:a4:e4:f3:56:50:05:f5: 51:87:4f:ca:0f:7d:0e:48:a0:3b:55:d9:19:45:ea: cc:36:a9:b2:fc:fe:55:4b:7d:ba:ea:8c:ba:34:14: 7c:a5:a1:44:50:a6:13:47:f2:99:7f:f1:ae:63:52: 94:75:4a:c2:8e:b4:90:ba:1c:e9:26:f5:90:93:17: 07:b4:fd:6d:14:2f:65:18:99:b7:60:b3:e7:94:0e: f8:63:6c:77:e6:79:41:e4:e6:7e:ee:31:97:8a:c3: 27:4d:11:66:0c:ef:40:13:5e:c2:8a:4a:33:3f:c2: ae:c0:9b:ec:9b:cc:b4:12:96:82:e2:71:25:03:ab: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:6A:79:73:EF:7D:35:5B:46:4A:E6:37:97:D1:D8:8B:99:0B:FC X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:52:62:3d:a2:02:ca:cb:01:79:61:0c:43:9f:e8:16:f1:4c: 44:a7:72:6e:55:b3:55:30:0e:8c:f9:1a:cd:98:cb:a6:64:64: 5b:a1:3a:d5:4c:36:2a:ca:b3:36:4c:a9:7d:94:e4:1c:45:34: 82:2c:39:56:c1:0d:8f:a8:44:6e:89:5e:98:af:fe:0d:af:64: e0:13:bc:76:40:9a:6b:80:21:63:cc:ab:ab:64:32:34:f9:bf: 25:7a:34:0e:4e:29:75:4d:0b:c7:b7:22:63:12:a3:f0:c8:1f: 2f:6d:26:7a:35:0a:9f:ba:f7:73:e2:c5:f6:ec:c8:d4:c8:17: 18:c4:12:ee:31:b2:28:7c:c0:1a:7b:22:5e:35:f2:48:bc:bf: de:7b:cd:a2:5d:9e:d4:b5:f4:d1:80:81:05:38:2b:99:5f:37: c2:9c:74:6c:d5:3f:eb:0c:fd:57:ce:01:ef:b5:4e:96:67:60: ed:71:39:71:47:ef:4c:89:56:6e:6e:cc:dd:73:e1:a7:22:d2: d7:37:43:99:b8:3f:16:0c:39:05:21:45:94:44:f2:e8:74:50: cd:ac:7e:50:ec:9c:1b:74:80:c6:5a:41:2f:b6:05:25:dd:9c: 5e:3e:74:66:10:ef:eb:5d:3a:cc:31:fe:e5:e4:b6:1a:0b:d3: 46:f0:52:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjUwODIyMjAyMTI5WhcNMjUwODI5MjAyMTI5WjAYMRYwFAYD VQQDEw02OGE4ZDE0OS1mMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/JU8XT8bZwxzdy7fIDE+Cnot93JeCHnZsYLEKMIg4nlvZe5ukgbT9Eek6ew ocPIB0rkHM0ZWsjKu5gOo+hqJWkEVZqiDU7/5S4h4mfDnciPlHQwZ1Wv+pCnV/e+ NiaE39SWj2zPf2YYQxCm0ynn/0Sl1iHgpS9azWOEen8GRqTk81ZQBfVRh0/KD30O SKA7VdkZRerMNqmy/P5VS3266oy6NBR8paFEUKYTR/KZf/GuY1KUdUrCjrSQuhzp JvWQkxcHtP1tFC9lGJm3YLPnlA74Y2x35nlB5OZ+7jGXisMnTRFmDO9AE17Cikoz P8KuwJvsm8y0EpaC4nElA6vI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2eanlz 7301W0ZK5jeX0diLmQv8MB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBUmI9ogLKywF5YQxDn+gW8UxEp3JuVbNVMA6M+RrNmMumZGRboTrV TDYqyrM2TKl9lOQcRTSCLDlWwQ2PqERuiV6Yr/4Nr2TgE7x2QJprgCFjzKurZDI0 +b8lejQOTil1TQvHtyJjEqPwyB8vbSZ6NQqfuvdz4sX27MjUyBcYxBLuMbIofMAa eyJeNfJIvL/ee82iXZ7UtfTRgIEFOCuZXzfCnHRs1T/rDP1XzgHvtU6WZ2DtcTlx R+9MiVZubszdc+GnItLXN0OZuD8WDDkFIUWURPLodFDNrH5Q7JwbdIDGWkEvtgUl 3ZxePnRmEO/rXTrMMf7l5LYaC9NG8FLo -----END CERTIFICATE-----Generated at Sat Aug 23 20:42:38 2025 by rpki-client