$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft File: quimiBHXcVavSOB4FMqP1mI9mL4.mft (raw, json) Hash identifier: Q4GZ/dZjXDjGG5AEVF1qTnyxD3FNhmJFwkRYR4Dh7jg= Subject key identifier: 9B:39:77:2D:AB:FE:42:B6:09:6F:9B:B4:5B:13:B3:C5:28:EE:56:76 Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:47:42 +0000 Manifest this update: Sat 23 Aug 2025 07:47:42 +0000 Manifest next update: Sat 30 Aug 2025 07:47:42 +0000 Files and hashes: 1: quimiBHXcVavSOB4FMqP1mI9mL4.crl (hash: pUkRmiT+ezuIKttZevgqCnvXGSfOGxhCUL/b8sx/xKI=) 2: E45745342AC411F0B2B1822CC4F9AE02.roa (hash: vV4viCWjAxoxyHSeBD7Bmq6t4EgnYb1F/xaDHHxFuCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Validity Not Before: Aug 23 07:47:42 2025 GMT Not After : Aug 30 07:47:42 2025 GMT Subject: CN=68a9721e-0728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:d1:4a:56:f7:53:99:2b:0b:e4:f6:75:a0: bd:2e:df:ff:54:4a:3a:0a:e5:2b:52:4b:34:e5:1b: c8:f1:23:46:39:46:85:97:35:1e:ff:a5:2b:58:1f: 63:04:b2:e1:86:22:b0:28:58:27:c3:b3:f1:0d:69: 20:b1:4d:dc:0a:79:8b:48:fb:38:bf:6d:ab:77:64: 6f:f9:f3:15:56:c8:81:a8:e4:92:f9:fc:9f:98:4e: 2d:6a:8d:3c:bb:b5:09:09:49:56:9c:3d:c4:17:3b: a4:78:6d:f9:14:c8:a5:89:81:34:8c:03:27:fd:5b: 98:27:c1:22:48:9e:2f:ab:00:7b:95:15:a6:07:c0: 1d:8e:df:e1:29:8b:ca:35:08:8e:78:65:61:b2:18: c9:8a:10:92:eb:a3:0a:58:78:b1:4d:ab:ef:29:f8: 16:fc:7d:28:01:e8:68:c2:4f:74:ab:b4:2f:7c:03: 4f:63:34:a0:75:f3:db:e8:0b:9b:85:b5:96:39:fd: b4:db:a2:d5:20:93:c6:15:0f:37:09:0c:49:25:4d: c4:06:82:fe:97:d7:84:5f:aa:a4:e6:4e:ae:02:69: d7:c1:f9:36:b0:d5:09:59:0e:af:70:8d:4d:1a:3b: ed:d3:14:a1:8b:7e:46:63:df:9d:50:4a:02:00:1e: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:77:2D:AB:FE:42:B6:09:6F:9B:B4:5B:13:B3:C5:28:EE:56:76 X509v3 Authority Key Identifier: keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0b:84:1c:d9:f2:96:da:d3:b0:9f:e3:d3:fd:96:a1:cf:d2: e3:f2:a2:aa:5b:0e:99:ee:35:a0:fc:ed:e9:88:f0:4b:fd:6c: 95:f5:92:b4:e7:5a:19:c5:7c:89:4b:df:49:6f:e5:bb:31:62: 6a:cc:52:f7:ce:86:2f:ca:14:b3:4b:98:4c:ca:6b:0e:6f:53: a6:e0:89:36:56:7e:bd:7f:05:1b:d8:c5:39:8a:d0:5f:44:f6: e1:ea:99:c1:1b:db:79:46:de:18:44:45:85:7d:2a:2c:60:78: 4e:2f:0f:3b:1e:eb:bc:a7:af:53:bc:ea:db:5b:69:24:cd:0b: 4d:2d:ae:b3:dc:1b:8d:34:b4:d4:18:dd:53:39:0c:d3:b4:03: 8e:7e:24:cb:7d:63:c1:d8:06:c8:3d:6a:3f:f0:4d:20:43:a9: 82:0a:01:15:44:b7:d0:ad:02:4a:4f:94:fa:50:2e:97:8e:dd: e3:96:b1:36:09:cf:60:ae:1f:10:a9:95:71:92:77:bc:85:64: 1e:a9:fb:c5:87:31:e6:c2:a2:fb:d4:63:3c:e7:79:84:5a:bd: e8:73:57:c6:57:b2:b4:b8:99:12:30:1c:02:7b:f0:a1:c6:5c: 48:83:c2:ca:b3:6f:33:51:5b:48:e9:d2:a1:36:ba:51:6d:01: 35:bf:fc:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0RGOTExMC8GA1UEBRMoQUFFOEE2ODgxMUQ3NzE1NkFGNDhFMDc4MTRDQThGRDY2 MjNEOThCRTAeFw0yNTA4MjMwNzQ3NDJaFw0yNTA4MzAwNzQ3NDJaMBgxFjAUBgNV BAMTDTY4YTk3MjFlLTA3MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqJ9FKVvdTmSsL5PZ1oL0u3/9USjoK5StSSzTlG8jxI0Y5RoWXNR7/pStYH2ME suGGIrAoWCfDs/ENaSCxTdwKeYtI+zi/bat3ZG/58xVWyIGo5JL5/J+YTi1qjTy7 tQkJSVacPcQXO6R4bfkUyKWJgTSMAyf9W5gnwSJIni+rAHuVFaYHwB2O3+Epi8o1 CI54ZWGyGMmKEJLrowpYeLFNq+8p+Bb8fSgB6GjCT3SrtC98A09jNKB189voC5uF tZY5/bTbotUgk8YVDzcJDEklTcQGgv6X14RfqqTmTq4CadfB+Taw1QlZDq9wjU0a O+3TFKGLfkZj351QSgIAHoodAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmzl3Lav+ QrYJb5u0WxOzxSjuVnYwHwYDVR0jBBgwFoAUquimiBHXcVavSOB4FMqP1mI9mL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDREY5LzAxNjQ5NzM2MkFD NDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1ZhdlNPQjRGTXFQMW1JOW1M NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVpbWlCSFhjVmF2U09CNEZNcVAxbUk5bUw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD REY5LzAxNjQ5NzM2MkFDNDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1Zh dlNPQjRGTXFQMW1JOW1MNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKILhBzZ8pba07Cf49P9lqHP0uPyoqpbDpnuNaD87emI8Ev9bJX1krTn WhnFfIlL30lv5bsxYmrMUvfOhi/KFLNLmEzKaw5vU6bgiTZWfr1/BRvYxTmK0F9E 9uHqmcEb23lG3hhERYV9KixgeE4vDzse67ynr1O86ttbaSTNC00trrPcG400tNQY 3VM5DNO0A45+JMt9Y8HYBsg9aj/wTSBDqYIKARVEt9CtAkpPlPpQLpeO3eOWsTYJ z2CuHxCplXGSd7yFZB6p+8WHMebCovvUYzzneYRavehzV8ZXsrS4mRIwHAJ78KHG XEiDwsqzbzNRW0jp0qE2ulFtATW//HM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:43 2025 by rpki-client