$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: Mt+E5t+d1/HEV3WCKXgUesOwUT1EReE+TlTY1sLWUDI= Subject key identifier: 5F:EC:8C:5F:7C:63:DB:13:67:EB:D5:E9:C6:69:1F:45:35:8C:07:27 Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: B1 Signing time: Sat 23 Aug 2025 06:18:48 +0000 Manifest this update: Sat 23 Aug 2025 06:18:47 +0000 Manifest next update: Sat 30 Aug 2025 06:18:47 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: GJBBTwItDkqFIeevL3Pn3GBzXke2k46brIerEg5bFew=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Aug 23 06:18:47 2025 GMT Not After : Aug 30 06:18:47 2025 GMT Subject: CN=68a95d47-52cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:ae:f8:b7:bb:1d:d3:b4:4b:f2:7b:2a:6f: 90:05:20:ee:cf:a2:3f:80:a2:5f:15:2f:c2:88:b0: a8:3a:a0:1e:df:0a:29:64:68:b3:3c:2f:99:42:86: e6:f8:1b:34:b1:bc:98:5e:05:29:c9:d7:6b:5b:2f: 64:2b:42:4d:5b:b6:9a:f3:c1:03:5d:08:4c:8d:aa: 01:3c:d7:1e:5e:90:69:9d:9b:71:7b:b6:80:fb:5f: 12:fe:bf:b2:5b:8d:60:4d:68:08:4d:42:17:a5:c4: cf:c6:c5:91:ba:79:38:cc:52:3c:79:0e:35:1f:7b: fe:82:ec:e5:a8:26:4e:9d:23:e9:18:67:3f:63:9b: ec:37:97:bf:5a:fc:03:62:d8:94:8c:be:70:b4:7a: 26:d7:b5:78:85:1b:79:dc:92:f3:3a:73:82:11:9d: 49:cd:7a:16:3f:4e:0d:83:d8:44:35:d6:b8:28:45: 5a:f3:90:2b:06:82:a0:68:ea:47:e2:20:f5:09:b5: 62:a1:eb:ff:e2:54:a4:d9:ab:cc:04:59:f8:53:29: 7a:f9:d1:15:a7:b3:f8:a1:e1:cc:89:f7:c6:7c:3f: ce:16:26:41:ce:2e:f3:35:d5:1e:45:ae:37:d1:11: 3f:46:f4:26:b0:66:85:7a:dc:db:cd:1c:b5:2d:3d: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EC:8C:5F:7C:63:DB:13:67:EB:D5:E9:C6:69:1F:45:35:8C:07:27 X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e9:97:fb:99:84:10:0d:f7:ba:c7:5e:3d:12:c3:b8:a3:42: 42:b8:88:28:41:92:3f:d0:79:3f:52:03:c3:eb:e1:f0:97:59: c3:b0:09:7a:c9:87:db:7d:96:d0:08:33:9c:b8:2f:89:30:ec: fe:56:43:93:52:75:dc:67:c6:06:8f:84:15:2a:d8:6f:18:1d: f6:18:98:26:55:c8:86:40:c8:bf:f9:92:c9:09:0c:96:31:ec: e4:92:d5:21:57:3d:3c:d1:03:eb:be:31:0c:e4:58:f2:4f:6e: 90:40:3c:f3:04:f8:99:37:74:26:66:8d:29:f8:ed:d2:6b:53: 6f:7c:a2:04:e0:ec:7e:7c:1d:5c:d3:09:40:46:cd:2f:83:bd: 9d:61:da:01:9f:40:ab:c2:1d:18:59:bf:12:9a:bc:ec:c9:7d: 70:b8:78:6a:3d:92:a5:fa:b5:f6:1c:fb:d8:be:3e:da:50:23: 13:ce:c4:94:37:c2:8f:a2:72:c1:e2:1b:21:24:d2:a7:12:38: 0b:99:46:00:6c:6c:39:a6:d4:04:29:e6:9e:e0:94:89:f1:af: 3a:52:b4:22:c7:68:bd:44:f7:a7:24:80:38:65:e6:c1:b4:45: dd:6c:1b:e2:7b:6c:ce:04:92:57:34:13:8e:95:05:0e:b7:ea: 2f:7d:1a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUwODIzMDYxODQ3WhcNMjUwODMwMDYxODQ3WjAYMRYwFAYD VQQDEw02OGE5NWQ0Ny01MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNKu+Le7HdO0S/J7Km+QBSDuz6I/gKJfFS/CiLCoOqAe3wopZGizPC+ZQobm +Bs0sbyYXgUpyddrWy9kK0JNW7aa88EDXQhMjaoBPNceXpBpnZtxe7aA+18S/r+y W41gTWgITUIXpcTPxsWRunk4zFI8eQ41H3v+guzlqCZOnSPpGGc/Y5vsN5e/WvwD YtiUjL5wtHom17V4hRt53JLzOnOCEZ1JzXoWP04Ng9hENda4KEVa85ArBoKgaOpH 4iD1CbVioev/4lSk2avMBFn4Uyl6+dEVp7P4oeHMiffGfD/OFiZBzi7zNdUeRa43 0RE/RvQmsGaFetzbzRy1LT2CFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/sjF98 Y9sTZ+vV6cZpH0U1jAcnMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs6Zf7mYQQDfe6x149EsO4o0JCuIgoQZI/0Hk/UgPD6+Hwl1nDsAl6 yYfbfZbQCDOcuC+JMOz+VkOTUnXcZ8YGj4QVKthvGB32GJgmVciGQMi/+ZLJCQyW MezkktUhVz080QPrvjEM5FjyT26QQDzzBPiZN3QmZo0p+O3Sa1NvfKIE4Ox+fB1c 0wlARs0vg72dYdoBn0Crwh0YWb8SmrzsyX1wuHhqPZKl+rX2HPvYvj7aUCMTzsSU N8KPonLB4hshJNKnEjgLmUYAbGw5ptQEKeae4JSJ8a86UrQix2i9RPenJIA4ZebB tEXdbBvie2zOBJJXNBOOlQUOt+ovfRo4 -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:35 2025 by rpki-client