$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: OezCGRcsa9ptuaKdGFjpOXJHnMX0Uu5ARwKleLLVz7s= Subject key identifier: C1:DD:85:66:80:C9:F0:26:EA:42:5D:BB:2A:8D:FE:B0:8F:F9:48:7F Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11C1 Signing time: Fri 22 Aug 2025 17:18:35 +0000 Manifest this update: Fri 22 Aug 2025 17:18:34 +0000 Manifest next update: Fri 29 Aug 2025 17:18:34 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: bJDV0vroozFhr4fkbN2u0nI8H077q7hb+Gmu98HsZzc=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4552 (0x11c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Aug 22 17:18:34 2025 GMT Not After : Aug 29 17:18:34 2025 GMT Subject: CN=68a8a66a-f23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:d7:2f:a1:7a:de:ed:79:0c:10:7d:16:22: ab:16:4e:6d:ad:0f:89:36:91:a1:e7:3d:5e:9d:8e: 73:fa:e6:e5:68:eb:73:10:01:ef:0f:e5:9c:5b:53: 01:97:e4:83:4e:7a:a3:49:e9:10:4b:4c:0f:dc:71: 5a:8d:2b:a3:29:77:bf:cd:29:b8:ec:f3:20:d6:ed: c3:00:f6:7b:3e:0a:d9:e0:b6:69:d5:14:51:88:a1: 68:ad:3b:db:34:e7:db:ef:0f:0e:18:b8:8c:c4:30: e2:a6:b7:b0:0c:b3:76:78:d5:7e:67:9a:d3:33:9e: 64:fb:62:84:69:7f:7c:d4:18:a5:f4:d4:f3:f4:28: 68:c1:40:35:5c:2a:71:21:0c:66:78:7f:eb:57:e1: 8f:82:22:e4:ba:31:77:a5:e3:fd:9c:76:cd:79:a4: 3f:ba:b7:62:31:ee:f7:a6:55:01:6a:43:94:6b:d8: 02:8e:a2:13:8f:14:0c:a7:69:42:fd:1e:f9:c7:ca: 83:de:a4:6f:ff:c3:df:6b:04:80:ac:10:be:de:c4: 38:3d:20:ae:2f:06:a5:55:f6:06:a9:e5:fc:f2:17: a2:01:25:36:49:e7:0a:ec:41:84:b7:b7:f7:5c:e2: ae:41:38:08:84:dd:4e:cf:aa:1a:bd:dc:27:d1:76: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DD:85:66:80:C9:F0:26:EA:42:5D:BB:2A:8D:FE:B0:8F:F9:48:7F X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7a:5c:29:15:37:bd:2e:c2:d2:84:5c:06:60:d2:f6:a5:8a: ef:a1:34:78:85:f7:cf:fe:7e:03:87:74:41:15:99:42:fe:ed: 5d:20:ee:d2:fe:69:6a:46:ef:32:de:5d:99:21:64:2a:bf:a2: be:f2:d8:d3:99:4f:46:5a:cd:09:27:c8:c2:e6:13:f8:b0:e2: 03:1f:54:eb:06:41:66:b4:c5:00:81:47:46:cc:fd:7b:4d:28: 73:3e:61:5e:eb:81:88:8d:d3:5d:da:7b:29:ae:56:eb:38:0c: 7c:be:e8:04:5f:87:c7:3f:c6:9d:a9:56:69:5f:e5:2c:a5:81: ab:75:d8:31:a1:72:be:3b:98:40:92:f8:cd:64:47:0e:96:76: 64:78:87:fe:a7:1a:3f:54:25:6e:3d:f5:7a:80:2e:e1:e9:3f: 82:9c:c4:cb:e4:7d:6b:f8:60:dc:b4:54:36:59:7d:c7:20:ed: 2e:ce:02:1e:79:b8:f1:13:28:99:f6:86:71:d2:7a:9b:9e:a1: 7d:9f:e6:8b:16:d5:c1:d8:84:42:fa:4d:8c:e6:59:d0:02:fa: 1c:fb:f6:a5:e9:a6:36:d6:22:a9:50:34:33:64:fd:c9:07:9f: bb:a2:40:1e:ec:e3:34:55:e6:3b:65:f8:9d:bc:28:c5:a5:a2: 47:9b:90:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwODIyMTcxODM0WhcNMjUwODI5MTcxODM0WjAYMRYwFAYD VQQDEw02OGE4YTY2YS1mMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2LXL6F63u15DBB9FiKrFk5trQ+JNpGh5z1enY5z+ublaOtzEAHvD+WcW1MB l+SDTnqjSekQS0wP3HFajSujKXe/zSm47PMg1u3DAPZ7PgrZ4LZp1RRRiKForTvb NOfb7w8OGLiMxDDiprewDLN2eNV+Z5rTM55k+2KEaX981Bil9NTz9ChowUA1XCpx IQxmeH/rV+GPgiLkujF3peP9nHbNeaQ/urdiMe73plUBakOUa9gCjqITjxQMp2lC /R75x8qD3qRv/8PfawSArBC+3sQ4PSCuLwalVfYGqeX88heiASU2SecK7EGEt7f3 XOKuQTgIhN1Oz6oavdwn0XbybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHdhWaA yfAm6kJduyqN/rCP+Uh/MB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/elwpFTe9LsLShFwGYNL2pYrvoTR4hffP/n4Dh3RBFZlC/u1dIO7S /mlqRu8y3l2ZIWQqv6K+8tjTmU9GWs0JJ8jC5hP4sOIDH1TrBkFmtMUAgUdGzP17 TShzPmFe64GIjdNd2nsprlbrOAx8vugEX4fHP8adqVZpX+UspYGrddgxoXK+O5hA kvjNZEcOlnZkeIf+pxo/VCVuPfV6gC7h6T+CnMTL5H1r+GDctFQ2WX3HIO0uzgIe ebjxEyiZ9oZx0nqbnqF9n+aLFtXB2IRC+k2M5lnQAvoc+/al6aY21iKpUDQzZP3J B5+7okAe7OM0VeY7ZfidvCjFpaJHm5Ch -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:20 2025 by rpki-client