$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: cLMpCBLSyb3zv5jJby/kinYVxX8dnDkxOye9BtUpoUc= Subject key identifier: FB:EA:E7:47:88:57:B8:A7:47:44:C7:FD:61:E2:1D:3A:01:4A:55:7B Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 0226 Signing time: Sat 23 Aug 2025 02:10:46 +0000 Manifest this update: Sat 23 Aug 2025 02:10:45 +0000 Manifest next update: Sat 30 Aug 2025 02:10:45 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: J/K90j+1ocqGCLXIKdaHZg7axuzS2CLI0yKBd9xBZOA=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: H0AJqEiGAywgjMNh/B1Rg0QqAknxodzCmkcexEm/7aU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Aug 23 02:10:45 2025 GMT Not After : Aug 30 02:10:45 2025 GMT Subject: CN=68a92326-c27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:b2:83:29:ab:16:d5:1f:12:b2:e2:cb:c0: e1:29:16:85:67:74:59:7b:96:f0:83:c3:d3:0c:63: 26:4d:7c:ea:32:34:3d:eb:e1:cf:0b:65:71:9b:11: fd:f0:88:5c:ef:ca:3d:b3:30:79:be:3a:f4:2e:5f: 71:2f:d9:e5:47:c7:70:75:56:ba:5a:13:69:66:64: 49:24:93:10:d0:d1:a9:6b:c9:94:b9:16:8d:ff:c9: 1f:25:9e:36:5a:d8:b5:a2:23:01:bc:a7:90:d3:25: 6d:09:8e:ad:d3:fa:80:79:cd:2a:d1:7e:83:9e:a8: 20:76:eb:90:a9:b0:09:d2:8a:db:7c:2e:9e:7a:25: 91:f0:4b:f1:e5:9e:33:c2:03:0b:8e:87:8f:28:bc: 77:13:b5:2b:a9:d6:dc:a7:9b:38:1a:8d:1a:1f:a5: 05:32:44:ac:1c:e9:0c:87:2f:23:db:63:b7:6e:9a: 92:be:17:4a:4e:b6:05:50:ff:f7:79:98:38:9c:bf: 35:f3:05:d9:67:c4:93:60:70:78:cd:e4:8c:10:6b: d0:45:b7:69:f6:1c:af:68:42:3f:a0:33:0e:c7:50: b1:4f:ed:bd:a1:01:35:c7:54:17:10:87:f0:6b:7c: 8d:a8:7a:f2:7f:1f:00:57:29:8f:ed:fe:7b:68:b0: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EA:E7:47:88:57:B8:A7:47:44:C7:FD:61:E2:1D:3A:01:4A:55:7B X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d2:d8:be:4d:c8:05:a0:b8:3c:52:c7:b3:64:4d:e9:72:de: 94:41:d6:9e:d6:5c:02:9f:0b:e0:34:c4:cc:79:ec:7e:75:91: 42:8c:ab:45:79:f7:7b:36:ba:52:a8:a6:11:14:b0:00:87:92: af:d5:99:be:79:e2:76:d0:43:a3:b9:2e:b3:7f:80:cb:89:0e: 6b:36:31:65:a2:39:52:c2:da:b7:b9:16:5f:a5:37:ea:a0:6e: 74:59:f7:53:99:42:f9:73:a7:ec:99:f9:f7:1a:64:89:dd:89: 5c:8f:0e:92:f4:c2:a2:17:76:ed:62:b0:3b:62:4c:84:6f:ce: d6:be:71:8a:9f:2f:d2:48:41:59:87:6c:25:14:0f:1c:bb:58: 1f:c1:30:79:fd:60:92:27:77:7a:5c:34:3d:a7:cc:ad:e8:7c: 2f:09:e7:09:b3:dd:09:8d:9a:79:8f:55:c2:4c:97:b1:aa:16: 7b:d1:dd:ae:c8:5e:28:2a:b9:5b:35:18:3b:5f:1c:9c:bb:ad: cd:c1:ec:72:c8:d4:5b:81:8c:54:5a:29:4c:67:43:14:f1:7c: e2:85:69:f0:fb:88:ff:a1:7b:a6:97:0f:e5:55:87:50:8f:d2: 14:d9:f7:9a:93:4a:6f:7f:3a:af:66:1f:09:5e:91:89:59:d8: eb:0b:7c:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUwODIzMDIxMDQ1WhcNMjUwODMwMDIxMDQ1WjAYMRYwFAYD VQQDEw02OGE5MjMyNi1jMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKCygymrFtUfErLiy8DhKRaFZ3RZe5bwg8PTDGMmTXzqMjQ96+HPC2VxmxH9 8Ihc78o9szB5vjr0Ll9xL9nlR8dwdVa6WhNpZmRJJJMQ0NGpa8mUuRaN/8kfJZ42 Wti1oiMBvKeQ0yVtCY6t0/qAec0q0X6DnqggduuQqbAJ0orbfC6eeiWR8Evx5Z4z wgMLjoePKLx3E7Urqdbcp5s4Go0aH6UFMkSsHOkMhy8j22O3bpqSvhdKTrYFUP/3 eZg4nL818wXZZ8STYHB4zeSMEGvQRbdp9hyvaEI/oDMOx1CxT+29oQE1x1QXEIfw a3yNqHryfx8AVymP7f57aLDeIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvq50eI V7inR0TH/WHiHToBSlV7MB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF0ti+TcgFoLg8UsezZE3pct6UQdae1lwCnwvgNMTMeex+dZFCjKtF efd7NrpSqKYRFLAAh5Kv1Zm+eeJ20EOjuS6zf4DLiQ5rNjFlojlSwtq3uRZfpTfq oG50WfdTmUL5c6fsmfn3GmSJ3Ylcjw6S9MKiF3btYrA7YkyEb87WvnGKny/SSEFZ h2wlFA8cu1gfwTB5/WCSJ3d6XDQ9p8yt6HwvCecJs90JjZp5j1XCTJexqhZ70d2u yF4oKrlbNRg7Xxycu63NwexyyNRbgYxUWilMZ0MU8XzihWnw+4j/oXumlw/lVYdQ j9IU2feak0pvfzqvZh8JXpGJWdjrC3zL -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:54 2025 by rpki-client