$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: IZkgCaz3cHVk8xrgfhVRDBg1OsRHmiF3rwuG+zy9Jmg= Subject key identifier: 1C:6F:22:26:02:12:B2:41:D2:35:A5:CA:55:78:02:E5:C1:69:38:72 Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: FB Signing time: Sat 23 Aug 2025 05:19:42 +0000 Manifest this update: Sat 23 Aug 2025 05:19:41 +0000 Manifest next update: Sat 30 Aug 2025 05:19:41 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: WZ67Wv+cKE7mNgMV5WQwID2G1vnSZ0E+wMP3puOsklE=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: OrAHJTjZ/RqHAwIjIMccBjE+JqFUpBNrVGrdl3fQy10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Aug 23 05:19:41 2025 GMT Not After : Aug 30 05:19:41 2025 GMT Subject: CN=68a94f6e-8349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:30:63:e6:81:48:6f:69:17:e8:e4:72:1e:c3: 15:9a:e8:29:ac:40:c4:7d:f2:1b:99:79:58:35:59: ca:06:19:54:8a:84:05:62:84:68:3f:6e:99:8b:77: fb:27:9d:11:0a:ee:33:fe:71:cf:ad:fb:9d:a9:86: a5:ba:5d:c4:3d:32:61:0a:62:d9:ae:1c:54:98:23: c5:1f:ef:86:92:0c:2d:df:d7:e9:03:69:05:cc:02: 84:2a:bc:04:57:fb:a7:85:79:f8:75:ca:93:86:91: e1:7c:a9:54:32:f6:58:42:7c:38:b8:22:65:50:2c: da:9e:e3:7f:15:ab:b6:8d:6b:77:48:78:fa:db:a8: 7f:34:e4:55:fb:00:bd:32:de:ff:57:7d:d8:12:72: 95:0c:98:0e:a0:78:b5:cd:b2:23:64:6d:c9:12:ff: 26:a7:fb:16:94:00:43:71:ce:26:23:99:48:f1:3d: fd:41:08:c7:6b:e1:91:ff:d6:65:d0:46:c2:85:a6: 34:c1:2e:02:a2:26:75:b8:e0:22:49:ce:39:d8:fb: fe:f6:1b:a0:7a:bb:19:3f:ad:b0:0e:fd:ff:ba:2a: 38:ce:bf:31:95:06:6b:40:03:03:4a:9a:e0:32:8a: 84:d5:ab:ed:45:3b:39:3b:82:38:e1:97:37:22:73: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:22:26:02:12:B2:41:D2:35:A5:CA:55:78:02:E5:C1:69:38:72 X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:df:0a:a9:83:8e:8c:50:1d:29:24:43:69:96:30:54:23:97: c5:4e:b1:d4:0d:a0:a6:ce:81:b3:e9:f5:69:61:36:ab:e1:14: 79:75:33:20:1f:c0:6c:49:e6:b1:ae:06:20:43:24:66:f4:2c: 3a:6f:83:37:15:09:15:8c:16:a8:d6:c5:8b:d3:12:ec:97:2b: 8f:43:5f:65:cf:95:a9:d9:ec:65:1f:cb:ed:70:97:a1:93:23: b3:bf:87:53:b4:01:f5:e9:41:64:59:d7:91:a0:bd:3e:17:40: 20:85:da:bc:ce:dc:54:0f:6d:3b:68:00:45:dd:f2:d5:0c:e3: 48:8e:94:5b:82:77:f0:db:4e:97:c6:16:0d:5b:43:75:4f:6a: 8a:2c:98:cc:ba:b2:07:f2:cc:d0:de:a8:97:5e:96:5f:26:be: 3d:66:8e:89:00:91:09:1c:12:e1:6a:a2:97:8e:98:69:79:c6: 3f:64:3a:10:f8:14:da:18:0b:4d:96:29:7a:93:88:31:1f:a1: 96:ed:22:25:68:49:be:f8:08:9d:c8:a8:5e:ab:2e:8a:aa:22: f2:61:34:2a:a5:d1:66:dc:e6:19:31:9f:7b:2f:75:43:b1:f9: 9b:0b:e8:aa:bc:e7:b5:80:c8:04:d6:c5:ac:13:01:7f:cd:3e: 7a:5d:f4:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUwODIzMDUxOTQxWhcNMjUwODMwMDUxOTQxWjAYMRYwFAYD VQQDEw02OGE5NGY2ZS04MzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TBj5oFIb2kX6ORyHsMVmugprEDEffIbmXlYNVnKBhlUioQFYoRoP26Zi3f7 J50RCu4z/nHPrfudqYalul3EPTJhCmLZrhxUmCPFH++Gkgwt39fpA2kFzAKEKrwE V/unhXn4dcqThpHhfKlUMvZYQnw4uCJlUCzanuN/Fau2jWt3SHj626h/NORV+wC9 Mt7/V33YEnKVDJgOoHi1zbIjZG3JEv8mp/sWlABDcc4mI5lI8T39QQjHa+GR/9Zl 0EbChaY0wS4CoiZ1uOAiSc452Pv+9hugersZP62wDv3/uio4zr8xlQZrQAMDSprg MoqE1avtRTs5O4I44Zc3InNcdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxvIiYC ErJB0jWlylV4AuXBaThyMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB3wqpg46MUB0pJENpljBUI5fFTrHUDaCmzoGz6fVpYTar4RR5dTMg H8BsSeaxrgYgQyRm9Cw6b4M3FQkVjBao1sWL0xLslyuPQ19lz5Wp2exlH8vtcJeh kyOzv4dTtAH16UFkWdeRoL0+F0Aghdq8ztxUD207aABF3fLVDONIjpRbgnfw206X xhYNW0N1T2qKLJjMurIH8szQ3qiXXpZfJr49Zo6JAJEJHBLhaqKXjphpecY/ZDoQ +BTaGAtNlil6k4gxH6GW7SIlaEm++AidyKheqy6KqiLyYTQqpdFm3OYZMZ97L3VD sfmbC+iqvOe1gMgE1sWsEwF/zT56XfSD -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:06 2025 by rpki-client