$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json) Hash identifier: eCFkknHzDft5nOizUIpcfj/e7r0z2OZbRAizQ838LG4= Subject key identifier: DD:1E:4A:4B:BA:49:A8:45:B8:14:82:6E:04:15:25:F6:16:32:4B:6A Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft Manifest number: 0AD3 Signing time: Fri 22 Aug 2025 19:36:25 +0000 Manifest this update: Fri 22 Aug 2025 19:36:25 +0000 Manifest next update: Fri 29 Aug 2025 19:36:25 +0000 Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: qwIDuZ64e1Sz8gO80KUL8I3QJIQWYKGFFQ+enfvDUis=) 2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: kRz4OHfhPxe5EPvefvMi3Xao6izuUxMq6U5mJJMpf2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Validity Not Before: Aug 22 19:36:25 2025 GMT Not After : Aug 29 19:36:25 2025 GMT Subject: CN=68a8c6b9-fb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:2a:ac:5b:c3:12:48:a8:e0:3e:87:91:a0: 96:41:a1:c8:59:e2:b0:88:d6:3e:fe:51:bd:80:f1: ee:ef:c8:ea:47:e7:6b:54:d2:34:f4:3c:0f:f7:cb: 9d:1b:aa:27:95:81:52:71:0e:2c:7e:46:dd:0e:3d: 26:77:b1:2a:6a:49:13:69:ea:67:cd:be:93:31:27: 4f:90:e6:48:f5:cb:5e:2e:1b:04:82:54:ac:22:56: c7:3c:ad:2f:2d:15:44:5d:0a:e6:f1:be:ae:d5:53: c7:92:e3:a7:5d:56:54:ce:85:ef:ce:f1:f4:0d:ef: 6c:3c:f5:86:bb:41:4a:43:60:77:e6:b8:63:1f:ed: 7a:6d:73:ce:14:3c:58:ab:73:bc:03:3a:53:83:60: 10:83:ff:5e:ef:a3:9c:9e:2c:0d:a6:a1:29:4b:7f: ea:16:08:25:a8:90:1a:38:e8:60:de:83:01:10:34: b7:ab:83:47:2c:3f:30:93:d5:d3:aa:ed:f4:cd:8e: c6:8c:cd:25:7d:ca:4c:14:57:38:8b:46:dc:bf:22: 31:54:4a:7f:dd:56:0f:da:d2:06:b3:cf:6d:7d:68: 41:25:47:9a:a9:3d:11:7b:83:cf:35:05:f3:39:94: 7d:91:ad:41:7e:fc:98:62:3a:69:92:b4:2d:1f:d8: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1E:4A:4B:BA:49:A8:45:B8:14:82:6E:04:15:25:F6:16:32:4B:6A X509v3 Authority Key Identifier: keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ab:77:bb:d6:71:ff:29:5c:4a:5d:18:1b:d6:65:f6:00:35: 7e:cc:5b:ae:a9:42:5e:21:60:3b:b4:be:4d:41:1f:93:5e:dc: 1a:f0:7c:9b:8b:b8:9b:5e:02:90:3e:87:19:8a:7c:f7:0e:fa: f4:42:a6:6a:5e:77:b3:2b:0f:01:25:c0:25:62:67:6e:13:b3: a9:3d:30:a2:5a:d6:28:78:6b:92:74:06:14:72:37:76:86:31: b5:c1:56:9f:9d:4c:26:d9:f6:99:f2:e4:44:98:e9:00:ed:99: 40:cc:4a:f2:0a:03:9f:a8:8e:51:cf:4e:0e:12:84:10:cb:ee: cf:2a:e4:a9:5b:1b:22:a9:8e:be:54:12:92:ce:1b:32:f9:a9: 16:b1:1c:22:84:43:61:78:74:9d:ef:f0:2f:ee:2c:98:31:5d: 42:aa:5c:29:3b:13:d6:82:81:50:21:5b:79:9c:a4:61:61:85: 6f:40:ad:6f:2b:6d:a7:2f:cf:6f:ae:51:39:47:fb:a1:f4:89: 9e:47:1d:cb:ff:cc:a1:d3:60:83:42:45:37:a5:89:4f:20:77: 9d:c6:1a:a6:d0:f2:70:60:8b:50:c3:f1:db:9c:88:1b:6f:7d: e1:57:87:a8:d2:9b:a0:3f:5c:a8:76:d5:7c:86:6f:98:7a:f4: 7a:0f:10:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2 QTQyMjBGRDAwHhcNMjUwODIyMTkzNjI1WhcNMjUwODI5MTkzNjI1WjAYMRYwFAYD VQQDEw02OGE4YzZiOS1mYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXwqrFvDEkio4D6HkaCWQaHIWeKwiNY+/lG9gPHu78jqR+drVNI09DwP98ud G6onlYFScQ4sfkbdDj0md7EqakkTaepnzb6TMSdPkOZI9cteLhsEglSsIlbHPK0v LRVEXQrm8b6u1VPHkuOnXVZUzoXvzvH0De9sPPWGu0FKQ2B35rhjH+16bXPOFDxY q3O8AzpTg2AQg/9e76OcniwNpqEpS3/qFgglqJAaOOhg3oMBEDS3q4NHLD8wk9XT qu30zY7GjM0lfcpMFFc4i0bcvyIxVEp/3VYP2tIGs89tfWhBJUeaqT0Re4PPNQXz OZR9ka1BfvyYYjppkrQtH9hy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0eSku6 SahFuBSCbgQVJfYWMktqMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3 QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi VzZOWXlrQnUyV0pxUWlEOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzq3e71nH/KVxKXRgb1mX2ADV+zFuuqUJeIWA7tL5NQR+TXtwa8Hyb i7ibXgKQPocZinz3Dvr0QqZqXnezKw8BJcAlYmduE7OpPTCiWtYoeGuSdAYUcjd2 hjG1wVafnUwm2faZ8uREmOkA7ZlAzEryCgOfqI5Rz04OEoQQy+7PKuSpWxsiqY6+ VBKSzhsy+akWsRwihENheHSd7/Av7iyYMV1CqlwpOxPWgoFQIVt5nKRhYYVvQK1v K22nL89vrlE5R/uh9ImeRx3L/8yh02CDQkU3pYlPIHedxhqm0PJwYItQw/HbnIgb b33hV4eo0pugP1yodtV8hm+YevR6DxAg -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:46 2025 by rpki-client