$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json) Hash identifier: 342E2Q5t+k0oeN3yPPt/4e72PjWJNLZ+C7aDlysWddc= Subject key identifier: 51:54:88:6F:8A:7F:3F:7F:67:06:67:ED:AB:24:6F:4A:1F:34:2C:9F Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft Manifest number: 41 Signing time: Sat 23 Aug 2025 07:41:21 +0000 Manifest this update: Sat 23 Aug 2025 07:41:21 +0000 Manifest next update: Sat 30 Aug 2025 07:41:21 +0000 Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: w9yAC1V9ophhl43/Ab+htAGJe7Bsu1+CtTzZ40gJwoo=) 2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Validity Not Before: Aug 23 07:41:21 2025 GMT Not After : Aug 30 07:41:21 2025 GMT Subject: CN=68a970a1-8af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:3d:5f:d0:71:f4:08:ae:2c:15:98:fb:64: 13:b6:45:38:59:25:dc:08:51:2e:fc:86:db:40:a0: cd:f5:6c:5c:3d:e2:14:b5:d3:9b:a2:82:d2:7b:20: 2f:37:a5:cd:f3:6c:88:6c:92:3e:24:09:1d:32:2a: 7f:05:ac:17:83:de:f8:00:39:92:49:d3:ed:f9:88: 11:17:fc:3e:2b:b6:7c:20:1c:45:1f:92:c0:b3:ec: 35:a2:96:a8:de:e8:3f:ce:d6:e5:21:2a:f9:1b:29: 55:f4:bb:10:67:2b:a9:ed:98:15:74:d9:6e:74:a3: 78:a8:a8:0d:f6:5e:b3:67:86:9f:00:ab:40:4f:87: 3e:54:80:66:98:5c:d8:b8:a6:86:42:0f:01:69:ce: fa:05:b0:aa:55:8f:92:76:7e:c2:b3:34:b9:42:1e: 72:95:79:2c:69:4e:9c:7d:0d:5a:24:04:a1:0e:39: e1:9e:2a:15:57:d7:d2:56:85:6b:74:76:c6:79:8b: 66:3f:44:93:02:fc:85:c6:a0:b1:a4:2f:31:12:87: 70:01:c5:fe:29:0d:53:8b:6a:9e:7d:dc:03:38:2a: f5:f2:43:38:3d:a1:45:19:64:98:76:11:e6:44:f4: 86:50:39:9a:79:69:ee:d6:96:ae:2a:c3:11:28:2b: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:88:6F:8A:7F:3F:7F:67:06:67:ED:AB:24:6F:4A:1F:34:2C:9F X509v3 Authority Key Identifier: keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ae:ab:c4:67:ff:4e:00:94:43:f6:5f:b7:75:d2:8b:8f:17: 15:c4:a4:86:f1:35:be:5d:f1:39:0b:20:37:0c:3e:7f:6b:94: 2f:00:e1:ec:44:92:73:2a:9b:7c:32:38:cb:60:43:37:a6:dd: 04:66:c9:23:0e:83:08:c1:fa:77:f2:60:13:67:b6:a9:36:56: 69:e4:a3:18:c7:29:01:42:7d:76:87:d7:69:df:4c:c0:74:54: cb:01:de:5f:61:97:73:2c:2b:33:9c:e3:05:26:9b:13:88:2d: 8e:c4:c6:4f:41:b9:d9:e9:d9:57:42:34:f6:64:67:33:3a:bf: 06:0e:5a:76:8c:19:57:6c:e3:3b:8e:28:90:36:c1:5b:89:f3: ab:f1:11:93:7a:e9:76:05:12:1c:3d:3e:29:cb:07:c6:58:a8: af:08:91:dd:3a:06:a1:9c:50:07:5d:53:10:9d:8b:da:62:64: a8:f2:05:ee:e4:14:41:48:b8:c4:0a:a7:2c:34:0a:70:69:25: 48:ba:ca:57:35:16:35:98:61:8c:db:c8:df:60:8f:6f:5e:51: 9b:61:cf:d9:bb:4b:c2:96:98:ca:6c:e0:9b:1c:69:dd:52:91: ad:f2:1f:76:8b:2f:c2:45:aa:23:fd:fe:3e:ca:f8:4d:13:b0: c2:77:5d:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEJDMTExMC8GA1UEBRMoNDI3NzNBQTg0MUQ3MEU3M0M0RUY3RDI3Qzk4RkNCOUQ0 NDIwQzQ2QzAeFw0yNTA4MjMwNzQxMjFaFw0yNTA4MzAwNzQxMjFaMBgxFjAUBgNV BAMTDTY4YTk3MGExLThhZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnwz1f0HH0CK4sFZj7ZBO2RThZJdwIUS78httAoM31bFw94hS105uigtJ7IC83 pc3zbIhskj4kCR0yKn8FrBeD3vgAOZJJ0+35iBEX/D4rtnwgHEUfksCz7DWilqje 6D/O1uUhKvkbKVX0uxBnK6ntmBV02W50o3ioqA32XrNnhp8Aq0BPhz5UgGaYXNi4 poZCDwFpzvoFsKpVj5J2fsKzNLlCHnKVeSxpTpx9DVokBKEOOeGeKhVX19JWhWt0 dsZ5i2Y/RJMC/IXGoLGkLzESh3ABxf4pDVOLap593AM4KvXyQzg9oUUZZJh2EeZE 9IZQOZp5ae7Wlq4qwxEoK/hjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUVSIb4p/ P39nBmftqyRvSh80LJ8wHwYDVR0jBBgwFoAUQnc6qEHXDnPE730nyY/LnUQgxGww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QkMxLzE1MkQ1Qzg2MUI2 OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hH dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5jNnFFSFhEblBFNzMwbnlZX0xuVVFneEd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5Q RTczMG55WV9MblVRZ3hHdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMCuq8Rn/04AlEP2X7d10ouPFxXEpIbxNb5d8TkLIDcMPn9rlC8A4exE knMqm3wyOMtgQzem3QRmySMOgwjB+nfyYBNntqk2VmnkoxjHKQFCfXaH12nfTMB0 VMsB3l9hl3MsKzOc4wUmmxOILY7Exk9Budnp2VdCNPZkZzM6vwYOWnaMGVds4zuO KJA2wVuJ86vxEZN66XYFEhw9PinLB8ZYqK8Ikd06BqGcUAddUxCdi9piZKjyBe7k FEFIuMQKpyw0CnBpJUi6ylc1FjWYYYzbyN9gj29eUZthz9m7S8KWmMps4Jscad1S ka3yH3aLL8JFqiP9/j7K+E0TsMJ3XT8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:57 2025 by rpki-client