$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: rZwTL56IL2JRF4UGMJV0lIIAuRytV1t88vDhJpdNPmw= Subject key identifier: 44:58:07:FC:84:97:5C:1E:44:49:7D:DB:DC:FB:B8:F1:0D:6D:E6:EF Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 024E Signing time: Sat 23 Aug 2025 02:04:19 +0000 Manifest this update: Sat 23 Aug 2025 02:04:18 +0000 Manifest next update: Sat 30 Aug 2025 02:04:18 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: YWpUgaPr/YqOq1Yofb9k3fwA1RbfeRU2W2tZgPNWsT4=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: ktK9vCE7vIpwa3GinrPFia6DHxl96KzteCFThN1eca8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Aug 23 02:04:18 2025 GMT Not After : Aug 30 02:04:18 2025 GMT Subject: CN=68a921a2-d78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2a:86:9e:c5:97:60:e4:72:c8:b4:cb:00:31: 0a:1c:af:2a:7b:b4:7e:d7:c0:5b:40:42:97:ad:5b: 10:7b:70:c9:41:e2:59:9a:32:1c:56:b3:ec:ce:8e: 93:93:d5:fa:ce:9a:b9:43:73:26:fe:32:fa:ca:31: db:d7:55:59:d3:fc:2a:c0:87:ef:14:a3:db:3e:b7: d6:4c:2a:02:65:8e:b9:75:db:de:2e:c3:1d:44:34: eb:55:53:eb:d6:a5:b2:cb:ab:38:c0:ef:dd:ab:de: 77:6c:39:5c:30:20:35:22:c5:2a:16:22:09:98:80: b7:26:63:14:9a:fe:96:7f:30:1e:a5:03:93:55:f6: cb:3a:91:8e:00:5d:be:7f:d9:b2:3e:2c:58:d1:e4: 0d:dd:a0:1d:75:7d:d2:06:1d:cd:09:b1:a2:ed:96: d2:ef:6f:2e:be:96:9b:92:87:2c:09:ed:8e:44:2c: ef:a6:5b:c8:cc:02:10:78:6a:cd:26:48:df:32:5e: f6:e2:02:e2:92:1f:c8:cc:68:07:52:ef:b0:06:c2: cf:06:3b:ac:8b:00:58:d3:27:f7:cb:4e:90:eb:64: 11:5f:b1:45:30:36:20:c6:f1:a3:ff:03:20:ee:7c: 5b:66:ba:7f:93:6c:d6:ca:ad:b6:87:b8:9d:6d:aa: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:58:07:FC:84:97:5C:1E:44:49:7D:DB:DC:FB:B8:F1:0D:6D:E6:EF X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:2a:b5:fe:d6:c5:ab:99:11:64:8c:43:1d:cb:68:40:5e:80: ca:ce:05:7f:c4:72:80:93:4c:89:8c:2e:b9:3c:99:79:3f:73: 26:7b:21:db:98:ab:bb:46:bb:94:5b:0f:cf:6b:06:c3:b3:d8: 58:23:c5:90:21:cb:42:54:cc:b0:72:64:c8:cb:48:ed:f3:76: 92:b2:cd:c0:b9:6b:be:35:9c:6e:d2:67:26:22:85:4f:df:41: 60:ed:ed:9d:0d:8d:24:65:f4:fe:bf:79:0a:ba:3f:2f:1f:53: d0:a3:b8:a4:48:2b:04:cf:f5:b0:7f:e5:30:e8:0c:79:9e:3a: 2a:3e:be:b0:82:67:75:55:a6:5d:16:6d:4f:36:88:a7:e0:ce: c9:3f:15:37:0c:1c:c1:92:3b:85:51:0e:a2:63:93:6c:90:0b: 1b:16:f8:21:53:70:53:d8:0f:6c:9b:34:bd:55:73:a8:f6:af: b2:5c:aa:56:e1:0b:3e:9e:8c:e1:ee:ca:73:b9:5d:ef:df:b9: 71:48:2c:e9:1d:b2:ed:13:d1:b4:4c:17:10:be:58:b6:58:1e: 81:62:d2:b7:17:8d:fe:7d:cb:cb:5f:b2:18:b8:95:81:84:93: 85:5a:41:12:18:14:5f:6f:2d:75:d0:25:72:85:a1:c8:ad:ca: 9a:da:e0:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUwODIzMDIwNDE4WhcNMjUwODMwMDIwNDE4WjAYMRYwFAYD VQQDEw02OGE5MjFhMi1kNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iqGnsWXYORyyLTLADEKHK8qe7R+18BbQEKXrVsQe3DJQeJZmjIcVrPszo6T k9X6zpq5Q3Mm/jL6yjHb11VZ0/wqwIfvFKPbPrfWTCoCZY65ddveLsMdRDTrVVPr 1qWyy6s4wO/dq953bDlcMCA1IsUqFiIJmIC3JmMUmv6WfzAepQOTVfbLOpGOAF2+ f9myPixY0eQN3aAddX3SBh3NCbGi7ZbS728uvpabkocsCe2ORCzvplvIzAIQeGrN JkjfMl724gLikh/IzGgHUu+wBsLPBjusiwBY0yf3y06Q62QRX7FFMDYgxvGj/wMg 7nxbZrp/k2zWyq22h7idbaqfFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERYB/yE l1weREl929z7uPENbebvMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+KrX+1sWrmRFkjEMdy2hAXoDKzgV/xHKAk0yJjC65PJl5P3MmeyHb mKu7RruUWw/PawbDs9hYI8WQIctCVMywcmTIy0jt83aSss3AuWu+NZxu0mcmIoVP 30Fg7e2dDY0kZfT+v3kKuj8vH1PQo7ikSCsEz/Wwf+Uw6Ax5njoqPr6wgmd1VaZd Fm1PNoin4M7JPxU3DBzBkjuFUQ6iY5NskAsbFvghU3BT2A9smzS9VXOo9q+yXKpW 4Qs+nozh7spzuV3v37lxSCzpHbLtE9G0TBcQvli2WB6BYtK3F43+fcvLX7IYuJWB hJOFWkESGBRfby110CVyhaHIrcqa2uDp -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:57 2025 by rpki-client