$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: pn3M4nUf6mpp73uFkD7OG5YJ8G2UN36za2pGmLtKYjI= Subject key identifier: CA:E1:8B:3A:22:9A:5B:78:17:61:B7:F8:CF:C6:26:1E:EF:B3:5A:72 Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: 0106 Signing time: Sat 23 Aug 2025 05:16:25 +0000 Manifest this update: Sat 23 Aug 2025 05:16:24 +0000 Manifest next update: Sat 30 Aug 2025 05:16:24 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: O/ULnNtaDwoO0voIB5K9VX8fJYvw2nxgMXc7RUpNnGw=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: sah200aOwYvH7hldekVzzUV/LvL4ckSI60/32eio3go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Aug 23 05:16:24 2025 GMT Not After : Aug 30 05:16:24 2025 GMT Subject: CN=68a94ea9-8472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:e5:00:78:5a:dd:1e:03:7c:ec:c2:70:dd: 9f:a3:3a:2b:8f:d3:aa:5c:1d:ba:c4:ce:42:ca:a6: 14:43:7d:1d:fe:d5:d0:88:ef:8b:c0:8e:e6:2f:8c: cb:41:04:b4:7e:55:86:34:b3:ee:10:92:6c:2b:30: 1b:05:98:c5:8a:d7:be:bc:44:35:04:9f:f7:83:fa: 89:aa:9a:3a:37:58:27:1c:ee:5b:7d:1b:db:8d:b4: 69:b3:71:27:e3:c6:f1:bf:01:69:7f:1d:6c:4f:b5: 89:fb:6d:be:9b:21:4d:b8:d8:fe:d3:bf:73:7a:fc: 5d:9d:93:0b:9d:fa:d3:fe:20:94:4d:67:ea:e2:cf: fe:02:a9:99:01:c2:3b:bf:4f:f3:c3:cb:a8:7d:dd: 61:c6:0e:9c:ff:f9:22:6b:e1:64:00:c4:29:93:26: 47:26:f2:74:07:8b:a1:e8:af:0b:cb:e6:ad:2a:67: 65:6c:01:fc:13:b6:69:42:c4:56:7f:df:e2:7e:7d: 2a:d0:9f:04:19:f2:2b:27:0d:59:8e:50:4a:37:30: ef:2b:fa:cb:a2:f5:83:46:2c:80:b5:3d:59:cd:fa: 3f:e9:bd:14:8a:d7:80:8c:55:38:88:c1:0c:5d:1e: 4b:70:ab:93:53:83:1e:0d:bd:1c:96:27:26:1a:ef: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E1:8B:3A:22:9A:5B:78:17:61:B7:F8:CF:C6:26:1E:EF:B3:5A:72 X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:33:1d:84:b7:5b:f1:da:de:8b:a6:19:2c:01:00:72:a4:08: db:43:5f:87:64:91:b7:c7:98:a8:ba:ff:84:43:ce:61:74:ac: 92:d4:c1:fc:d1:81:0f:33:e0:1d:6c:5d:d1:d1:2f:57:7f:86: cc:8e:59:f1:65:66:48:35:da:62:8f:b9:7f:9c:f8:ba:6a:2a: 77:0e:d6:bc:5f:ff:5d:d8:f1:21:fb:84:bf:34:63:69:cf:9b: 85:96:c8:23:3a:ce:3c:37:00:15:15:5b:eb:18:d0:28:ef:3d: 01:31:da:bd:cd:e7:30:df:43:57:62:c4:51:ab:56:b8:bb:b5: 0c:98:d3:6f:bf:f3:ce:49:9d:89:1c:47:f1:91:2a:b8:47:e6: 8d:5c:8d:73:51:cb:56:a9:a6:a2:92:86:b9:e5:5a:14:4c:5b: d9:a7:96:c2:59:ba:ed:fb:6c:24:3a:73:81:69:a1:cf:42:ab: 13:c0:d8:15:72:d8:f7:a9:2c:d8:75:c2:91:c3:1e:70:62:a4: 23:f4:81:f7:26:5a:83:25:18:4c:fa:f7:68:d1:65:ad:bf:e1: 33:f5:0f:1a:18:3d:da:e5:6e:c0:b0:66:ec:bb:b9:7f:08:94: fe:76:31:5a:e3:a5:68:99:20:ce:ff:e8:72:94:c6:43:0f:9d: 7f:e9:e3:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUwODIzMDUxNjI0WhcNMjUwODMwMDUxNjI0WjAYMRYwFAYD VQQDEw02OGE5NGVhOS04NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNTlAHha3R4DfOzCcN2fozorj9OqXB26xM5CyqYUQ30d/tXQiO+LwI7mL4zL QQS0flWGNLPuEJJsKzAbBZjFite+vEQ1BJ/3g/qJqpo6N1gnHO5bfRvbjbRps3En 48bxvwFpfx1sT7WJ+22+myFNuNj+079zevxdnZMLnfrT/iCUTWfq4s/+AqmZAcI7 v0/zw8uofd1hxg6c//kia+FkAMQpkyZHJvJ0B4uh6K8Ly+atKmdlbAH8E7ZpQsRW f9/ifn0q0J8EGfIrJw1ZjlBKNzDvK/rLovWDRiyAtT1Zzfo/6b0UiteAjFU4iMEM XR5LcKuTU4MeDb0clicmGu+wtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrhizoi mlt4F2G3+M/GJh7vs1pyMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABMx2Et1vx2t6LphksAQBypAjbQ1+HZJG3x5iouv+EQ85hdKyS1MH8 0YEPM+AdbF3R0S9Xf4bMjlnxZWZINdpij7l/nPi6aip3Dta8X/9d2PEh+4S/NGNp z5uFlsgjOs48NwAVFVvrGNAo7z0BMdq9zecw30NXYsRRq1a4u7UMmNNvv/POSZ2J HEfxkSq4R+aNXI1zUctWqaaikoa55VoUTFvZp5bCWbrt+2wkOnOBaaHPQqsTwNgV ctj3qSzYdcKRwx5wYqQj9IH3JlqDJRhM+vdo0WWtv+Ez9Q8aGD3a5W7AsGbsu7l/ CJT+djFa46VomSDO/+hylMZDD51/6eMC -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:36 2025 by rpki-client