$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: 8xpB3BS0r5rdSPi5PlTxc771rKiWZVBtt6mar9pCbks= Subject key identifier: 6F:A2:11:E1:E0:A4:D0:E8:E3:70:6E:1E:16:29:F9:80:9A:AB:9D:F4 Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: E8 Signing time: Thu 03 Jul 2025 05:36:22 +0000 Manifest this update: Thu 03 Jul 2025 05:36:21 +0000 Manifest next update: Thu 10 Jul 2025 05:36:21 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: Vx4lTHOL6e7JVOzjbvhUYDDV9zmAHTQmYxLH/Xbk5+w=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: ey0oQHiSGpH4+EnFGwizJ9b66lbUXNoAkMqUMUf/z8g=) 3: 138E2452F89011EE8B2FC42AC4F9AE02.roa (hash: /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Jul 3 05:36:21 2025 GMT Not After : Jul 10 05:36:21 2025 GMT Subject: CN=686616d5-f864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:83:c3:05:76:b3:74:27:8c:1c:58:1d:fb: f3:a5:0a:5b:55:0a:54:a1:68:07:ae:c6:96:d5:74: 68:53:79:64:84:de:38:3a:2a:50:5c:3e:4b:80:5e: 26:ac:64:a8:a4:56:d9:80:9c:8a:bf:9f:2a:24:cd: 22:27:53:f3:57:09:9b:c3:21:bb:7a:5f:d0:d2:43: 10:fb:04:c2:93:a0:6f:b0:89:a1:ca:7c:d5:2c:6c: a8:ea:80:b2:df:4a:37:d2:9c:48:02:c9:b2:86:36: 55:fd:1c:42:5c:0e:5a:28:d7:cf:a1:6e:d7:74:0b: 8d:a0:49:45:6f:30:18:b4:36:5d:ec:39:6d:49:72: ee:35:9b:99:4b:39:70:0d:d6:d6:9e:fb:06:37:f9: d8:09:db:da:99:78:43:4e:6d:e4:f2:fd:e4:a1:9c: 77:fb:bc:5e:c1:1e:a8:d0:34:a6:76:aa:fe:b8:83: 8c:24:6d:b3:85:76:0a:d8:c5:56:9a:c3:9e:bc:b8: b0:ab:44:25:49:ee:3b:48:83:b6:24:a4:c2:f6:9e: ca:41:1a:3b:0f:1e:87:2d:53:64:94:99:57:b9:7e: 21:12:8a:0e:5c:8d:39:85:8d:a6:2c:a5:bb:33:7a: 39:9a:b2:56:0e:99:9a:23:0d:ad:81:6a:cb:d5:39: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:11:E1:E0:A4:D0:E8:E3:70:6E:1E:16:29:F9:80:9A:AB:9D:F4 X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b9:85:33:4d:fd:0a:82:01:ad:de:af:e6:dd:31:87:4f:ac: a7:8c:43:9b:08:e7:2b:70:0c:13:39:3c:84:49:60:be:17:c6: 2b:6a:e9:c9:0c:58:19:54:72:0c:3d:b2:33:c3:3a:0d:50:5a: 1f:09:0a:39:ea:e0:4d:1a:39:cb:bf:93:2b:d4:82:d0:e3:0c: 21:fd:e7:30:a6:7c:8d:0e:b3:45:10:a5:bb:4d:17:07:ab:01: da:06:90:f3:e6:26:53:84:92:29:f2:11:7a:cc:0f:eb:d3:f0: d6:5b:11:69:c8:cc:90:b9:c9:84:31:95:9b:2c:b1:bd:f5:a0: fe:64:72:c4:39:b9:b7:31:d1:fc:bd:a8:31:77:32:25:fe:d8: 95:c6:ee:70:cf:ea:1d:7a:99:01:62:c3:3e:79:1e:91:3f:6e: 1b:4e:76:e4:7b:70:5c:16:6a:54:29:49:d5:bc:a4:1f:9e:b0: 80:f4:39:7e:a8:bd:b2:14:60:27:0e:1e:2a:e1:ca:f3:3a:8f: af:9b:48:39:11:07:a1:4b:c6:c2:b4:ad:2d:a9:18:6f:18:67: 35:7e:f0:8d:7f:46:9b:86:fe:51:72:50:b9:e3:22:46:d4:f3: 49:cc:86:06:ca:63:d7:a1:69:49:40:ea:a7:50:d0:92:a5:5b: d1:ba:a1:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUwNzAzMDUzNjIxWhcNMjUwNzEwMDUzNjIxWjAYMRYwFAYD VQQDEw02ODY2MTZkNS1mODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfqDwwV2s3QnjBxYHfvzpQpbVQpUoWgHrsaW1XRoU3lkhN44OipQXD5LgF4m rGSopFbZgJyKv58qJM0iJ1PzVwmbwyG7el/Q0kMQ+wTCk6BvsImhynzVLGyo6oCy 30o30pxIAsmyhjZV/RxCXA5aKNfPoW7XdAuNoElFbzAYtDZd7DltSXLuNZuZSzlw DdbWnvsGN/nYCdvamXhDTm3k8v3koZx3+7xewR6o0DSmdqr+uIOMJG2zhXYK2MVW msOevLiwq0QlSe47SIO2JKTC9p7KQRo7Dx6HLVNklJlXuX4hEooOXI05hY2mLKW7 M3o5mrJWDpmaIw2tgWrL1TlAiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+iEeHg pNDo43BuHhYp+YCaq530MB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCauYUzTf0KggGt3q/m3TGHT6ynjEObCOcrcAwTOTyESWC+F8YraunJ DFgZVHIMPbIzwzoNUFofCQo56uBNGjnLv5Mr1ILQ4wwh/ecwpnyNDrNFEKW7TRcH qwHaBpDz5iZThJIp8hF6zA/r0/DWWxFpyMyQucmEMZWbLLG99aD+ZHLEObm3MdH8 vagxdzIl/tiVxu5wz+odepkBYsM+eR6RP24bTnbke3BcFmpUKUnVvKQfnrCA9Dl+ qL2yFGAnDh4q4crzOo+vm0g5EQehS8bCtK0tqRhvGGc1fvCNf0abhv5RclC54yJG 1PNJzIYGymPXoWlJQOqnUNCSpVvRuqHv -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:43 2025 by rpki-client