$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: 0N/sBg2+Zb7Uw+RTWfhfdnFyANkGsO9uohq3j2sn5C4= Subject key identifier: A7:40:8C:13:C3:70:09:4D:81:0F:26:BC:8C:DC:BE:D8:0A:76:B0:30 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 34C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 34BC Signing time: Fri 22 Aug 2025 14:37:48 +0000 Manifest this update: Fri 22 Aug 2025 14:37:48 +0000 Manifest next update: Fri 29 Aug 2025 14:37:48 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: t88mZ9XqLzJVyMcv8WLkO2Aki9pZMq3q1C0cJLDoSKE=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 1QZz1HDQ1jRfLspLePE9D1zwt8zFnYwF7eP5N5O/9vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13511 (0x34c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Aug 22 14:37:48 2025 GMT Not After : Aug 29 14:37:48 2025 GMT Subject: CN=68a880bc-70b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:ab:3e:99:ea:63:a1:02:e0:11:0a:06:57: c2:f5:16:e9:eb:d4:e6:a1:2c:b3:f4:28:82:14:6f: 46:ff:69:d7:66:d6:4b:1f:70:4f:51:ac:08:ef:9d: ef:9b:30:fb:03:40:1d:97:ad:23:0a:16:67:f5:61: ff:5f:34:76:b6:eb:b2:28:fa:9d:83:23:c4:43:be: 0c:fb:ad:74:c5:82:a7:ca:e7:a3:99:cd:98:7e:09: e5:5e:7e:de:b5:76:df:18:10:ee:0f:da:46:b0:0a: 8b:ef:f1:c7:00:06:c2:10:4c:9c:81:ce:ff:5c:63: cf:b4:84:6d:ce:51:b2:17:9d:e1:6e:c1:03:42:8f: 8b:4d:83:35:a8:a7:1d:11:16:be:24:55:fe:04:25: e0:f6:70:32:08:a1:4d:9f:55:7f:46:c2:0e:8a:8c: 42:bb:4c:d8:ec:00:4a:56:cc:6c:a1:6c:16:06:aa: 57:36:0b:c3:77:13:e7:e3:2c:83:c6:8c:0e:b9:f8: 5a:e5:15:40:f1:da:a5:97:81:11:66:73:e1:cf:ef: e9:13:16:16:ac:f2:4e:b2:c8:99:3a:32:8d:1c:24: 8e:76:d1:24:ce:d3:57:6a:0d:3c:3e:41:7e:43:54: e5:d2:d7:eb:ce:9c:8f:0f:d0:89:97:e1:e1:e5:ef: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:8C:13:C3:70:09:4D:81:0F:26:BC:8C:DC:BE:D8:0A:76:B0:30 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a6:03:33:7d:15:d8:4b:e9:63:a1:ff:eb:22:54:f0:c4:75: 4e:53:e7:92:dc:50:f2:83:d1:72:84:70:e4:90:51:77:97:26: a3:5b:ee:21:c2:4c:51:b7:ad:f7:6e:ad:f3:10:15:de:a7:f4: 5f:08:84:f9:60:80:98:bc:42:f9:dd:f3:80:23:39:e6:5a:a1: 9b:f4:79:78:12:a9:f4:24:37:b3:27:cf:0d:e5:d3:04:3c:33: 21:87:48:0c:91:c2:b7:09:51:3c:8a:6f:1f:5a:17:ba:11:45: f5:37:3e:ce:32:ec:e6:40:83:05:05:96:ba:a8:16:52:6b:c6: c3:9b:98:cb:2a:bf:49:00:c2:2a:f8:50:de:7e:d3:79:78:a1: 40:64:a9:54:93:0d:72:94:04:d6:ad:22:e9:3c:fb:26:e6:b6: 60:62:95:6c:63:a8:15:a0:6a:ea:c3:3a:cc:fb:39:a8:27:64: 3c:0e:9f:89:34:95:77:c6:52:5c:f7:ca:dc:65:d3:91:a3:12: d0:66:ed:59:20:94:19:28:a3:d5:2f:cb:a4:21:27:74:07:bd: 58:a8:6d:d0:ed:6f:cb:41:dd:ec:fd:5e:0a:78:18:f0:b5:d5: f0:7c:53:81:e4:d8:56:9a:2d:42:08:c3:f3:69:bc:83:5b:f7: 34:cd:c4:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUwODIyMTQzNzQ4WhcNMjUwODI5MTQzNzQ4WjAYMRYwFAYD VQQDEw02OGE4ODBiYy03MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiarPpnqY6EC4BEKBlfC9Rbp69TmoSyz9CiCFG9G/2nXZtZLH3BPUawI753v mzD7A0Adl60jChZn9WH/XzR2tuuyKPqdgyPEQ74M+610xYKnyuejmc2YfgnlXn7e tXbfGBDuD9pGsAqL7/HHAAbCEEycgc7/XGPPtIRtzlGyF53hbsEDQo+LTYM1qKcd ERa+JFX+BCXg9nAyCKFNn1V/RsIOioxCu0zY7ABKVsxsoWwWBqpXNgvDdxPn4yyD xowOufha5RVA8dqll4ERZnPhz+/pExYWrPJOssiZOjKNHCSOdtEkztNXag08PkF+ Q1Tl0tfrzpyPD9CJl+Hh5e/8tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdAjBPD cAlNgQ8mvIzcvtgKdrAwMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvpgMzfRXYS+ljof/rIlTwxHVOU+eS3FDyg9FyhHDkkFF3lyajW+4h wkxRt633bq3zEBXep/RfCIT5YICYvEL53fOAIznmWqGb9Hl4Eqn0JDezJ88N5dME PDMhh0gMkcK3CVE8im8fWhe6EUX1Nz7OMuzmQIMFBZa6qBZSa8bDm5jLKr9JAMIq +FDeftN5eKFAZKlUkw1ylATWrSLpPPsm5rZgYpVsY6gVoGrqwzrM+zmoJ2Q8Dp+J NJV3xlJc98rcZdORoxLQZu1ZIJQZKKPVL8ukISd0B71YqG3Q7W/LQd3s/V4KeBjw tdXwfFOB5NhWmi1CCMPzabyDW/c0zcQf -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:12 2025 by rpki-client