$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: EPCdKwLpOcsf3vtoSL1TpnxDcFuGdh/YIWHmROcdMMY= Subject key identifier: D7:7B:68:8D:2B:AD:F1:D0:A9:85:F9:87:80:EB:DE:11:8D:32:50:37 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3473 Signing time: Fri 22 Aug 2025 15:22:03 +0000 Manifest this update: Fri 22 Aug 2025 15:22:03 +0000 Manifest next update: Fri 29 Aug 2025 15:22:03 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: cny2E3ANO0qBMXaTp/5W2zEUNooYyuUpzVuMaDW3xlc=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: i7V57Dro1PeoCEaseJh0ivldyfQ81BauNS5GWJcFu1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Aug 22 15:22:03 2025 GMT Not After : Aug 29 15:22:03 2025 GMT Subject: CN=68a88b1b-a867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:4f:47:96:60:8d:7f:bb:45:ba:48:70:5e: 7c:c6:8c:84:a9:45:43:4d:cd:dc:83:37:1c:21:fb: 32:12:b7:3a:26:20:cb:ed:ef:3c:a3:03:3a:e8:59: 93:0f:c6:a5:f1:ea:38:1a:8e:65:e2:86:b1:20:b3: fc:e4:7e:22:5a:f6:17:fc:87:08:f1:d6:78:6a:79: 8f:bb:61:ce:6f:34:65:38:5c:ff:46:2e:2b:c4:1d: e6:15:a0:fc:00:49:4f:fb:62:5a:ec:b6:f7:2d:42: a1:f2:69:cd:6f:6d:c5:b9:b5:bd:4d:ac:3d:da:e4: 67:fd:77:ca:69:a8:13:fb:95:2b:d5:ff:5a:26:63: e3:8b:02:e7:05:20:21:1c:84:3d:a0:bc:c1:81:8c: 1d:ed:1a:b6:24:21:2b:ef:63:b2:b1:a6:7e:87:d5: a8:3b:0f:9a:c2:0a:cc:78:dc:01:71:7e:e8:e0:2f: 6e:b4:a6:73:b7:d8:ac:c2:39:16:e4:5b:f1:28:a0: 92:64:29:a0:92:75:77:d6:5c:77:7d:04:71:8e:a8: 85:2b:27:14:86:46:36:8d:08:fc:98:d1:c0:f4:90: a7:93:4b:23:7d:6d:35:3a:ff:e4:4c:2f:a4:22:bb: af:66:dd:dd:14:3f:14:a6:c6:66:cc:35:b6:5b:15: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:68:8D:2B:AD:F1:D0:A9:85:F9:87:80:EB:DE:11:8D:32:50:37 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:c7:ec:34:38:28:cc:d3:2f:85:2f:a7:54:60:e1:c6:52:67: 6c:05:b2:42:15:a4:4d:b8:29:89:b9:ed:a2:9a:16:e5:96:f9: f7:11:4e:b1:fa:fd:7e:0a:6b:78:b5:0b:2a:a1:d1:3d:70:4f: 83:97:b9:46:98:6f:e6:cb:6d:f9:c1:25:c0:24:7b:b9:28:80: ce:7f:3b:a2:a6:e5:1d:88:75:01:54:3e:76:28:ab:f9:45:13: 9e:e1:d8:95:db:59:3a:ee:68:92:bf:24:40:e5:1a:ea:24:96: 60:cf:54:63:36:a0:7a:39:48:a2:7f:e5:5a:30:96:e0:07:05: 1e:23:ee:24:37:73:51:1f:09:05:6d:5c:f6:ab:03:58:2c:c0: b1:45:7b:b7:74:cf:35:8e:74:df:77:c4:43:b1:76:4d:62:42: 4e:4d:7c:5f:7f:6f:15:f1:e9:d7:7a:7c:f7:21:ad:12:f0:83: b4:c3:cf:b1:1e:c3:53:22:96:ca:12:ed:e0:fe:0d:9f:08:4a: 73:e6:61:0c:6d:63:f6:56:c3:81:fc:3f:f2:7d:9d:02:a5:dc: 5f:f5:bd:75:5f:04:a6:95:9d:1f:0a:ac:bf:51:40:ed:16:68: b7:5b:f5:eb:55:38:35:de:c4:76:b1:c5:e9:22:b3:af:b3:ed: ff:57:31:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjUwODIyMTUyMjAzWhcNMjUwODI5MTUyMjAzWjAYMRYwFAYD VQQDEw02OGE4OGIxYi1hODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SRPR5ZgjX+7RbpIcF58xoyEqUVDTc3cgzccIfsyErc6JiDL7e88owM66FmT D8al8eo4Go5l4oaxILP85H4iWvYX/IcI8dZ4anmPu2HObzRlOFz/Ri4rxB3mFaD8 AElP+2Ja7Lb3LUKh8mnNb23FubW9Taw92uRn/XfKaagT+5Ur1f9aJmPjiwLnBSAh HIQ9oLzBgYwd7Rq2JCEr72OysaZ+h9WoOw+awgrMeNwBcX7o4C9utKZzt9iswjkW 5FvxKKCSZCmgknV31lx3fQRxjqiFKycUhkY2jQj8mNHA9JCnk0sjfW01Ov/kTC+k IruvZt3dFD8UpsZmzDW2WxXakwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd7aI0r rfHQqYX5h4Dr3hGNMlA3MB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFx+w0OCjM0y+FL6dUYOHGUmdsBbJCFaRNuCmJue2imhbllvn3EU6x +v1+Cmt4tQsqodE9cE+Dl7lGmG/my235wSXAJHu5KIDOfzuipuUdiHUBVD52KKv5 RROe4diV21k67miSvyRA5RrqJJZgz1RjNqB6OUiif+VaMJbgBwUeI+4kN3NRHwkF bVz2qwNYLMCxRXu3dM81jnTfd8RDsXZNYkJOTXxff28V8enXenz3Ia0S8IO0w8+x HsNTIpbKEu3g/g2fCEpz5mEMbWP2VsOB/D/yfZ0Cpdxf9b11XwSmlZ0fCqy/UUDt Fmi3W/XrVTg13sR2scXpIrOvs+3/VzE8 -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:47 2025 by rpki-client