$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: GcdYLg+4OGum99igST5lm5UDj6CFDVEtWJpmeMufZa8= Subject key identifier: DD:5B:DF:E1:13:4D:5E:AB:97:4D:95:DF:EC:72:B3:D1:73:7B:30:B3 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 1037 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1023 Signing time: Fri 22 Aug 2025 17:33:35 +0000 Manifest this update: Fri 22 Aug 2025 17:33:34 +0000 Manifest next update: Fri 29 Aug 2025 17:33:34 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: yriPnhdBwucuYPqwyGa2izXjVprahgoaCPIi+0y6x5g=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4151 (0x1037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Aug 22 17:33:34 2025 GMT Not After : Aug 29 17:33:34 2025 GMT Subject: CN=68a8a9ee-6a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:38:1c:34:0a:9b:29:0c:17:29:c7:8f:65: 8e:03:e5:ee:f8:8d:de:bb:88:4b:3b:cd:64:79:aa: 07:c4:ea:89:5c:77:1b:cf:a7:e7:cd:50:87:11:87: 7f:80:62:d5:26:1b:ca:e7:69:a4:e5:3d:b0:ff:19: 83:19:a8:6c:7e:2a:db:83:cd:d5:7a:68:4d:03:2b: ce:aa:9a:2e:71:0c:a1:a0:23:4d:23:4c:f2:5d:7f: b0:50:31:b4:36:55:cb:3e:22:5e:ce:c6:79:f5:b5: 19:7e:54:7e:99:67:34:7c:a5:99:2d:3c:cf:83:f5: 9a:00:54:0d:6c:b8:1c:b7:48:9d:67:21:36:cf:81: e5:b8:9e:32:29:2d:c1:8f:36:49:32:9d:21:b0:b6: 0e:2c:33:07:46:07:b1:f0:be:b9:5d:14:4b:e4:37: 6c:4f:e2:71:58:20:26:20:97:20:13:59:ce:cd:61: c7:d3:be:8e:91:b4:86:a4:6a:5c:cd:41:e8:ed:20: 05:f4:30:a1:81:3e:94:4f:30:fd:ec:a1:f3:dc:bf: 72:3a:93:03:82:d7:7e:70:29:d2:8e:2a:90:ce:16: 94:54:bc:e2:5f:2f:8d:9a:f1:74:7e:19:9e:eb:77: 03:92:3e:a9:a9:88:a9:24:65:9e:de:94:7d:0f:e3: fd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:DF:E1:13:4D:5E:AB:97:4D:95:DF:EC:72:B3:D1:73:7B:30:B3 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:41:6a:56:14:38:2e:7e:0f:bc:a2:89:0f:6d:bf:42:bf:11: 89:01:9c:44:4f:41:8b:e0:37:bb:08:78:9e:47:15:29:29:d9: 4c:38:a1:20:e1:b6:bb:6f:12:35:ee:59:30:54:dc:e8:c7:b5: 65:81:49:7f:f5:1a:b1:1e:4d:f5:54:54:39:13:68:6f:1c:9e: bb:b3:07:d0:f7:08:74:a7:81:74:2d:20:9a:0d:c6:f8:a1:97: 9e:b6:e9:86:de:46:33:a3:fd:e9:ef:2d:98:ba:28:81:df:d0: fb:c2:1a:8c:a0:f3:9b:d8:d7:64:4b:dd:da:1e:69:99:81:f0: 41:23:40:65:cf:8b:92:21:4d:76:d4:22:4c:cb:dc:37:0f:5e: f6:9a:c0:09:24:22:54:7f:8d:38:1e:af:46:a3:e3:d7:40:a8: a0:e5:0c:33:5d:9c:6b:1e:36:15:44:67:53:41:4a:50:1f:dc: 7a:38:a3:9f:fd:d1:02:d9:fc:f1:7d:9b:70:57:fc:8a:e5:6f: e5:50:6c:bd:94:dd:9e:dc:e3:47:fb:ec:b7:47:be:96:3d:b8: 17:7d:1b:1b:35:c8:df:ea:dd:43:e9:1e:2e:3c:f7:be:61:63: d5:33:94:ec:b7:56:9d:1b:ff:73:1e:7a:d9:2c:1c:30:bc:0b: 19:7e:5a:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUwODIyMTczMzM0WhcNMjUwODI5MTczMzM0WjAYMRYwFAYD VQQDEw02OGE4YTllZS02YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs044HDQKmykMFynHj2WOA+Xu+I3eu4hLO81keaoHxOqJXHcbz6fnzVCHEYd/ gGLVJhvK52mk5T2w/xmDGahsfirbg83VemhNAyvOqpoucQyhoCNNI0zyXX+wUDG0 NlXLPiJezsZ59bUZflR+mWc0fKWZLTzPg/WaAFQNbLgct0idZyE2z4HluJ4yKS3B jzZJMp0hsLYOLDMHRgex8L65XRRL5DdsT+JxWCAmIJcgE1nOzWHH076OkbSGpGpc zUHo7SAF9DChgT6UTzD97KHz3L9yOpMDgtd+cCnSjiqQzhaUVLziXy+NmvF0fhme 63cDkj6pqYipJGWe3pR9D+P9nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1b3+ET TV6rl02V3+xys9FzezCzMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnQWpWFDgufg+8ookPbb9CvxGJAZxET0GL4De7CHieRxUpKdlMOKEg 4ba7bxI17lkwVNzox7VlgUl/9RqxHk31VFQ5E2hvHJ67swfQ9wh0p4F0LSCaDcb4 oZeetumG3kYzo/3p7y2YuiiB39D7whqMoPOb2NdkS93aHmmZgfBBI0Blz4uSIU12 1CJMy9w3D172msAJJCJUf404Hq9Go+PXQKig5QwzXZxrHjYVRGdTQUpQH9x6OKOf /dEC2fzxfZtwV/yK5W/lUGy9lN2e3ONH++y3R76WPbgXfRsbNcjf6t1D6R4uPPe+ YWPVM5Tst1adG/9zHnrZLBwwvAsZflrg -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:08 2025 by rpki-client