$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: CuGv/3ti+heXHX2Sewq4vWWtmo3hUK/EYmbG68gJm34= Subject key identifier: FA:F7:74:C1:0E:68:EE:EA:F4:AA:1B:9F:D7:C7:7C:CE:13:5E:99:CB Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 06:37:45 +0000 Manifest this update: Sat 23 Aug 2025 06:37:45 +0000 Manifest next update: Sat 30 Aug 2025 06:37:45 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: KFYHWt1bcQ/XIrHk5iN6e36GD82W8mone600iCpqmsc=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Aug 23 06:37:45 2025 GMT Not After : Aug 30 06:37:45 2025 GMT Subject: CN=68a961b9-e304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:bf:5e:34:b7:be:bc:25:46:83:36:9f:c9: 4b:dd:2a:25:97:d8:57:10:03:12:3e:fa:0d:ed:75: 08:c9:24:24:d4:12:82:b0:41:17:bd:d1:46:36:23: f5:77:d7:68:96:fa:2e:1f:3c:1a:a5:f3:88:17:7a: a6:1c:1a:1b:70:da:af:65:39:aa:92:f3:b1:70:47: 63:d2:7d:b1:5d:a8:9c:61:bd:85:74:df:ae:8d:d5: 30:94:7d:cf:9e:22:fe:b5:3a:a7:d6:98:f7:52:5a: da:89:ac:4d:b3:41:3d:04:d0:8a:fe:15:a3:b0:5f: b9:de:9c:23:42:8c:26:b1:7f:11:c1:23:e6:e6:aa: 2a:da:4f:34:b8:ff:63:07:27:de:93:70:e1:60:e5: 88:a2:13:0f:3f:47:8e:25:52:05:76:30:00:e5:dd: d9:cc:0c:57:c5:22:90:71:38:8c:90:d5:3d:c9:8e: 2b:e3:c0:76:b1:58:1d:ae:3a:02:62:e6:8a:74:e4: c8:35:92:a2:e3:8e:cf:40:bf:f4:56:f8:ec:0a:07: 0d:12:67:be:44:2b:7f:8c:86:5b:d6:c2:8c:3d:92: 70:0d:48:c1:f8:fc:0e:d5:54:c4:9b:8d:d9:8e:07: a7:aa:7c:0f:a8:c1:48:e6:ff:94:c6:92:7f:e5:2e: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F7:74:C1:0E:68:EE:EA:F4:AA:1B:9F:D7:C7:7C:CE:13:5E:99:CB X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:61:9d:7f:4f:22:8c:df:b8:19:4a:fc:e5:90:d6:3b:f3:e5: 36:8f:fc:4f:7b:70:61:ca:c7:83:53:46:ce:21:45:32:33:58: b0:b9:cc:e1:19:bd:5b:ca:aa:69:0a:2e:90:25:91:4c:4d:2e: 46:1b:dc:d2:e7:9b:27:97:1a:2b:84:42:64:aa:65:fb:ea:ef: bb:b8:7a:55:02:15:2e:27:46:4d:e2:15:28:65:2e:8e:2d:d7: 1f:6d:ee:7f:4f:ab:6f:da:92:c1:da:8b:82:d0:fd:89:59:3e: 18:70:a9:7a:80:2e:db:e2:5a:82:e0:46:66:11:90:fe:ba:31: 56:ae:f5:8b:52:f2:43:65:81:b4:2f:74:30:b8:61:dc:07:63: fc:a7:22:ac:0b:36:b9:7b:ca:21:7c:52:23:66:6c:11:ad:bf: ec:37:4b:3b:b6:ba:3c:3c:9a:cd:2a:bb:a8:44:5d:01:f9:d6: 0c:86:ab:36:a7:ff:96:e2:f7:a1:9d:bb:51:dc:68:f8:ba:7d: 3e:78:55:45:60:95:1b:64:cd:79:ba:a5:78:65:f0:46:1c:42: 45:bd:27:18:ca:06:2a:60:64:23:78:63:53:cd:eb:05:9c:1d: 92:d3:93:70:83:30:ad:6e:23:74:67:c4:b2:9d:dc:0a:57:87: eb:ce:ea:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5 N0YwMEY1RjUwHhcNMjUwODIzMDYzNzQ1WhcNMjUwODMwMDYzNzQ1WjAYMRYwFAYD VQQDEw02OGE5NjFiOS1lMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8e/XjS3vrwlRoM2n8lL3Soll9hXEAMSPvoN7XUIySQk1BKCsEEXvdFGNiP1 d9dolvouHzwapfOIF3qmHBobcNqvZTmqkvOxcEdj0n2xXaicYb2FdN+ujdUwlH3P niL+tTqn1pj3UlraiaxNs0E9BNCK/hWjsF+53pwjQowmsX8RwSPm5qoq2k80uP9j Byfek3DhYOWIohMPP0eOJVIFdjAA5d3ZzAxXxSKQcTiMkNU9yY4r48B2sVgdrjoC YuaKdOTINZKi447PQL/0VvjsCgcNEme+RCt/jIZb1sKMPZJwDUjB+PwO1VTEm43Z jgenqnwPqMFI5v+UxpJ/5S5+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr3dMEO aO7q9Kobn9fHfM4TXpnLMB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5 ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu UllXWTNqd1pxaGVYOEE5ZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGYZ1/TyKM37gZSvzlkNY78+U2j/xPe3BhyseDU0bOIUUyM1iwuczh Gb1byqppCi6QJZFMTS5GG9zS55snlxorhEJkqmX76u+7uHpVAhUuJ0ZN4hUoZS6O Ldcfbe5/T6tv2pLB2ouC0P2JWT4YcKl6gC7b4lqC4EZmEZD+ujFWrvWLUvJDZYG0 L3QwuGHcB2P8pyKsCza5e8ohfFIjZmwRrb/sN0s7tro8PJrNKruoRF0B+dYMhqs2 p/+W4vehnbtR3Gj4un0+eFVFYJUbZM15uqV4ZfBGHEJFvScYygYqYGQjeGNTzesF nB2S05NwgzCtbiN0Z8SyndwKV4frzups -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:33 2025 by rpki-client