$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: YO0rVU6Hd37K/bOgdLp1woVmpBedOtlPv/iPEpPWHiQ= Subject key identifier: CF:F9:C6:BD:28:3A:AE:90:E2:5E:6D:B5:85:AE:BA:FD:0A:F6:40:74 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0134 Signing time: Sat 23 Aug 2025 04:38:20 +0000 Manifest this update: Sat 23 Aug 2025 04:38:19 +0000 Manifest next update: Sat 30 Aug 2025 04:38:19 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: bEw+MTCT0YO8OoLlLBZp5a0MxgpIdWgyV3/pxIXxP6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Aug 23 04:38:19 2025 GMT Not After : Aug 30 04:38:19 2025 GMT Subject: CN=68a945bc-a34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:e2:69:53:ca:ef:0c:b5:45:af:99:63:0c: 1b:f7:bc:ae:d0:13:28:f9:f1:31:b6:ab:a6:de:1c: 43:e2:b3:ae:19:bb:81:02:f7:1a:8a:a1:3c:03:65: ec:7a:70:c6:fc:4b:36:89:49:84:cb:12:87:c7:02: 0c:d0:9e:e2:5a:53:b7:95:39:58:64:d2:b5:ec:a1: bf:2a:b6:e5:9a:79:b5:b7:46:2f:c5:d0:f0:64:d3: d3:54:76:c6:41:11:3b:4e:ac:8b:b5:aa:41:20:7b: 6c:4d:6c:c3:c2:0c:bd:70:59:70:9b:f6:34:cf:7c: ce:4d:92:96:a7:5c:a1:6e:98:d1:c2:bd:4e:95:73: 7e:b5:08:7d:23:44:a0:78:e3:9b:58:de:72:5b:34: d2:35:29:86:a3:97:20:28:27:67:42:4b:ef:66:3e: d5:84:a3:dd:bd:85:bc:2d:44:e4:39:7d:d9:0c:74: ae:21:ad:e4:ab:92:a9:c7:23:55:39:fb:4a:a6:c3: 9f:fd:5e:62:9f:62:1b:25:b8:83:e9:4c:50:b5:f5: 31:f5:2a:2f:cb:74:6a:bd:9f:ad:84:50:15:f3:0c: 28:c6:36:4c:eb:6f:64:8b:0e:70:be:fc:22:af:42: e8:39:44:11:f5:55:d6:22:43:d2:e5:9f:7b:59:e0: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F9:C6:BD:28:3A:AE:90:E2:5E:6D:B5:85:AE:BA:FD:0A:F6:40:74 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a4:6d:be:ca:e7:1c:9f:6c:a7:f1:0f:a8:07:9b:63:81:5e: 11:e4:b2:6a:a1:de:32:38:22:22:45:af:47:43:98:20:24:75: 47:f2:57:71:88:27:9f:a9:57:c3:17:d1:23:46:bf:e0:c7:19: df:92:d9:87:df:f7:1a:e8:dc:b4:c8:13:8a:f5:04:1d:2b:fb: 17:2a:b1:06:bc:e1:77:41:d2:38:9e:ce:6c:cd:78:3b:ff:69: c6:1a:0a:6f:92:91:af:fb:04:ae:23:ed:6d:b5:cb:eb:4c:78: 91:ac:e0:ca:73:dc:fa:42:5b:da:e6:02:44:c1:5c:ef:09:a9: 5c:c3:3e:c1:4b:74:02:91:52:c4:c9:e5:c5:08:90:ac:a0:58: 1a:4e:cb:65:ab:aa:27:9d:74:52:ce:f6:05:6b:d8:c3:be:2c: a8:1a:92:ff:b7:7e:4a:b9:7c:c2:73:05:04:d6:8c:f9:cd:f2: 0f:cb:ee:30:86:cb:7c:de:13:1d:b8:9e:f7:3f:08:be:09:da: b8:98:4b:27:65:c4:e7:b0:c4:b8:ba:07:80:78:fb:3b:84:ab: 48:5f:d8:17:4c:da:63:2d:63:3f:e6:f0:85:e0:4c:74:73:96: 75:3a:ae:4e:c8:44:a3:3b:63:fc:47:d9:f0:5a:ce:45:3d:7e: 77:97:a3:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwODIzMDQzODE5WhcNMjUwODMwMDQzODE5WjAYMRYwFAYD VQQDEw02OGE5NDViYy1hMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8biaVPK7wy1Ra+ZYwwb97yu0BMo+fExtqum3hxD4rOuGbuBAvcaiqE8A2Xs enDG/Es2iUmEyxKHxwIM0J7iWlO3lTlYZNK17KG/Krblmnm1t0YvxdDwZNPTVHbG QRE7TqyLtapBIHtsTWzDwgy9cFlwm/Y0z3zOTZKWp1yhbpjRwr1OlXN+tQh9I0Sg eOObWN5yWzTSNSmGo5cgKCdnQkvvZj7VhKPdvYW8LUTkOX3ZDHSuIa3kq5KpxyNV OftKpsOf/V5in2IbJbiD6UxQtfUx9Sovy3RqvZ+thFAV8wwoxjZM629kiw5wvvwi r0LoOUQR9VXWIkPS5Z97WeBQEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/5xr0o Oq6Q4l5ttYWuuv0K9kB0MB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7pG2+yuccn2yn8Q+oB5tjgV4R5LJqod4yOCIiRa9HQ5ggJHVH8ldx iCefqVfDF9EjRr/gxxnfktmH3/ca6Ny0yBOK9QQdK/sXKrEGvOF3QdI4ns5szXg7 /2nGGgpvkpGv+wSuI+1ttcvrTHiRrODKc9z6Qlva5gJEwVzvCalcwz7BS3QCkVLE yeXFCJCsoFgaTstlq6onnXRSzvYFa9jDviyoGpL/t35KuXzCcwUE1oz5zfIPy+4w hst83hMduJ73Pwi+Cdq4mEsnZcTnsMS4ugeAePs7hKtIX9gXTNpjLWM/5vCF4Ex0 c5Z1Oq5OyESjO2P8R9nwWs5FPX53l6NT -----END CERTIFICATE-----Generated at Sat Aug 23 16:18:50 2025 by rpki-client