$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: 50y+03CmBcqDUDMmYIjMeTMNbkLa+EF/S+rru6NjPlg= Subject key identifier: 8D:AD:F7:76:77:69:CE:37:C5:64:83:3A:65:DD:74:80:A3:5B:F9:29 Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 01E4 Signing time: Sat 23 Aug 2025 02:50:16 +0000 Manifest this update: Sat 23 Aug 2025 02:50:15 +0000 Manifest next update: Sat 30 Aug 2025 02:50:15 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: 1wrMLL3z5f01HSAPravS3cbCeS8OswwVhPQ3DfokgIM=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Aug 23 02:50:15 2025 GMT Not After : Aug 30 02:50:15 2025 GMT Subject: CN=68a92c67-0a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:07:43:62:16:cd:0d:2f:c6:8d:29:3c:30: 35:48:cc:79:33:97:d1:1a:b6:49:d1:76:49:0a:4d: 34:b6:fb:05:55:84:ae:06:d7:b6:7b:f9:1b:b0:cf: 24:09:62:a9:11:f1:4b:83:f8:35:6a:73:97:fd:95: 85:b0:37:3a:6b:c9:c4:28:e3:f2:a8:c0:e0:1e:2f: b2:d1:d8:d5:5f:2f:3f:15:e2:87:4f:27:47:94:ad: 9e:df:48:11:6f:fd:c8:3e:a9:9d:ae:8a:19:52:45: e9:57:c8:9c:51:12:cf:07:14:42:55:31:93:de:46: 0c:f1:c3:84:a1:66:c5:07:25:31:15:69:3d:3a:61: 99:9e:e5:24:49:f2:a9:61:5c:aa:85:8a:cb:35:4e: 6b:52:f0:35:93:7d:6c:4b:4c:84:cf:75:d4:1c:35: 85:a4:71:5f:8c:b7:52:98:c6:c3:5f:bb:99:dd:27: 0c:21:cb:af:db:36:79:39:fe:d8:05:39:30:b0:24: 46:e8:fb:32:78:78:9b:f8:d1:47:a2:b3:83:e9:27: b5:65:fd:cf:dd:c3:f1:2b:30:0f:c6:e6:06:a0:37: 60:a6:f1:c0:b0:fa:fd:78:cd:8d:f6:6a:dc:f2:44: 58:fd:8c:db:c4:06:81:52:b7:25:d8:4f:4e:0d:f4: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:F7:76:77:69:CE:37:C5:64:83:3A:65:DD:74:80:A3:5B:F9:29 X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:57:7a:d0:93:57:38:2f:20:00:97:0a:82:f5:9c:e2:92:04: c0:a9:7d:cc:64:d6:45:0f:13:87:09:c9:31:17:3a:2d:5b:65: 06:fb:ac:9e:26:71:3f:33:df:77:36:3f:d8:b4:25:51:33:2f: f7:a2:0e:34:d4:08:89:7e:34:38:16:e8:fb:e5:9a:5c:a4:1f: a9:35:38:d5:63:f7:88:4e:30:7f:88:00:14:1f:bb:94:58:fc: 8e:6c:61:1d:08:c0:fc:4e:47:37:98:a6:2a:94:fb:13:47:7f: ea:be:bb:32:ae:09:fa:59:33:21:0d:1e:b6:04:b2:49:96:ff: ab:ef:5f:20:bb:8b:c3:36:d0:c3:93:75:3b:58:41:b0:78:16: b5:92:18:ce:11:75:92:b4:35:92:68:1a:ea:18:35:66:14:b9: 69:c9:5c:8f:5e:99:5c:f2:f1:74:1d:c2:92:f5:55:34:a6:f7: 0e:c2:b2:ec:5b:ae:16:45:c1:8f:9d:84:f8:02:30:9d:70:1c: 35:dc:b8:5b:a8:34:99:90:a7:93:11:bb:d6:22:f6:c8:4e:f2: cc:8c:56:9a:36:68:51:96:f3:3a:63:66:2d:70:5d:10:f6:26: 49:81:d5:c4:51:43:c6:52:23:22:40:78:04:64:c6:0d:c9:41: 65:d6:d4:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUwODIzMDI1MDE1WhcNMjUwODMwMDI1MDE1WjAYMRYwFAYD VQQDEw02OGE5MmM2Ny0wYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhsHQ2IWzQ0vxo0pPDA1SMx5M5fRGrZJ0XZJCk00tvsFVYSuBte2e/kbsM8k CWKpEfFLg/g1anOX/ZWFsDc6a8nEKOPyqMDgHi+y0djVXy8/FeKHTydHlK2e30gR b/3IPqmdrooZUkXpV8icURLPBxRCVTGT3kYM8cOEoWbFByUxFWk9OmGZnuUkSfKp YVyqhYrLNU5rUvA1k31sS0yEz3XUHDWFpHFfjLdSmMbDX7uZ3ScMIcuv2zZ5Of7Y BTkwsCRG6PsyeHib+NFHorOD6Se1Zf3P3cPxKzAPxuYGoDdgpvHAsPr9eM2N9mrc 8kRY/YzbxAaBUrcl2E9ODfSx1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2t93Z3 ac43xWSDOmXddICjW/kpMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnV3rQk1c4LyAAlwqC9ZzikgTAqX3MZNZFDxOHCckxFzotW2UG+6ye JnE/M993Nj/YtCVRMy/3og401AiJfjQ4Fuj75ZpcpB+pNTjVY/eITjB/iAAUH7uU WPyObGEdCMD8Tkc3mKYqlPsTR3/qvrsyrgn6WTMhDR62BLJJlv+r718gu4vDNtDD k3U7WEGweBa1khjOEXWStDWSaBrqGDVmFLlpyVyPXplc8vF0HcKS9VU0pvcOwrLs W64WRcGPnYT4AjCdcBw13LhbqDSZkKeTEbvWIvbITvLMjFaaNmhRlvM6Y2YtcF0Q 9iZJgdXEUUPGUiMiQHgEZMYNyUFl1tQU -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:20 2025 by rpki-client