$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json) Hash identifier: e12Bs8u8c1bTHMoweGAabhXV3YknfbZCyn72XYVZHTM= Subject key identifier: D4:E5:89:41:EA:64:95:02:79:AF:AC:5D:AB:0C:C8:BD:B5:9E:AE:F5 Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 323C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft Manifest number: 3233 Signing time: Fri 22 Aug 2025 15:28:00 +0000 Manifest this update: Fri 22 Aug 2025 15:28:00 +0000 Manifest next update: Fri 29 Aug 2025 15:28:00 +0000 Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: MAnU/WLOefRTDHMYev7Vrb26FsfxcT5OMOn8g5t2weY=) 2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12860 (0x323c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: Aug 22 15:28:00 2025 GMT Not After : Aug 29 15:28:00 2025 GMT Subject: CN=68a88c80-b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:04:9e:ee:b2:48:9f:f3:b9:92:e4:ca:9c: 76:99:24:58:45:39:ce:42:b7:42:21:7a:c0:47:ef: 4c:07:1b:20:07:d5:b6:2a:eb:49:0a:4b:3d:8e:88: 3a:7a:d2:0c:60:9f:e3:e4:cd:1c:2a:b6:40:3b:c2: 04:e3:8a:8a:19:b5:68:2f:3e:66:a4:8b:d6:25:70: a7:c2:b7:4c:c1:70:e9:75:d5:2e:c5:c8:6d:27:f8: c0:12:31:af:df:c4:ac:84:f0:89:b5:c4:5b:45:1e: 74:2a:83:fa:95:91:81:b4:c3:d2:0c:a7:3e:96:e5: 77:46:a2:63:1f:de:38:7e:11:00:98:3f:f2:22:29: a9:e6:1f:fe:8a:72:a9:bd:ca:23:e6:64:1c:92:d7: b4:8a:6b:fc:dd:70:53:06:48:3a:88:57:a4:a8:bc: fc:13:40:f3:de:ff:9e:d6:c7:6f:a4:7d:ea:f2:af: 0d:23:d8:69:08:a2:c2:3c:9c:aa:c6:42:eb:67:27: c0:ac:ba:f4:c1:f8:c6:54:ef:73:94:03:f2:7b:43: d0:ed:d4:8c:64:40:f6:59:a4:5c:05:65:e7:0f:35: 3d:09:74:43:be:5f:12:00:37:0e:48:69:38:6a:1f: 95:31:71:f1:8e:28:10:05:fa:b4:1e:4a:85:68:9e: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E5:89:41:EA:64:95:02:79:AF:AC:5D:AB:0C:C8:BD:B5:9E:AE:F5 X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:93:22:24:ea:6b:e2:bb:dc:bf:a0:5d:84:77:ec:28:7c:a3: df:02:2f:3b:0a:f1:45:7e:67:bb:18:ff:1c:58:80:75:3f:54: 20:cb:e5:b8:8f:23:aa:17:2f:2b:6f:7d:b7:ae:38:ae:d5:32: ad:70:27:b9:9b:89:3d:81:5f:59:0f:a3:29:e1:43:03:80:ef: d3:b6:87:44:62:4e:c1:e8:fb:27:23:c6:ab:c8:15:3a:ba:c0: fd:bc:cb:c6:dc:72:c4:5a:2d:29:fe:8d:89:84:09:c1:a9:b9: 02:f2:d0:91:6f:a1:70:ec:fe:e4:d6:86:ef:48:a3:c5:15:8f: 5a:59:da:72:03:47:10:9b:85:be:da:01:87:d2:e0:d8:3e:ce: 88:70:5e:2c:00:8a:aa:9e:97:c0:d7:01:bd:11:ac:22:ec:b6: 83:09:86:c3:8c:a2:19:3b:c1:d5:3b:25:cf:66:c1:e3:bb:ca: 7a:74:db:a2:62:1c:6e:00:e7:75:3a:01:dd:83:17:1d:ae:a9: ed:00:72:41:bf:95:08:94:f7:68:33:d1:15:3e:33:36:36:19: d1:ba:d5:3e:41:03:c9:c4:98:79:7a:1c:c0:03:1d:c1:e7:a3: 8f:4d:b3:f2:ae:40:de:bb:e3:d0:23:d6:aa:a6:8e:2b:12:47: e8:78:89:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjUwODIyMTUyODAwWhcNMjUwODI5MTUyODAwWjAYMRYwFAYD VQQDEw02OGE4OGM4MC1iMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kgEnu6ySJ/zuZLkypx2mSRYRTnOQrdCIXrAR+9MBxsgB9W2KutJCks9jog6 etIMYJ/j5M0cKrZAO8IE44qKGbVoLz5mpIvWJXCnwrdMwXDpddUuxchtJ/jAEjGv 38SshPCJtcRbRR50KoP6lZGBtMPSDKc+luV3RqJjH944fhEAmD/yIimp5h/+inKp vcoj5mQckte0imv83XBTBkg6iFekqLz8E0Dz3v+e1sdvpH3q8q8NI9hpCKLCPJyq xkLrZyfArLr0wfjGVO9zlAPye0PQ7dSMZED2WaRcBWXnDzU9CXRDvl8SADcOSGk4 ah+VMXHxjigQBfq0HkqFaJ60DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTliUHq ZJUCea+sXasMyL21nq71MB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqkyIk6mviu9y/oF2Ed+wofKPfAi87CvFFfme7GP8cWIB1P1Qgy+W4 jyOqFy8rb323rjiu1TKtcCe5m4k9gV9ZD6Mp4UMDgO/TtodEYk7B6PsnI8aryBU6 usD9vMvG3HLEWi0p/o2JhAnBqbkC8tCRb6Fw7P7k1obvSKPFFY9aWdpyA0cQm4W+ 2gGH0uDYPs6IcF4sAIqqnpfA1wG9Eawi7LaDCYbDjKIZO8HVOyXPZsHju8p6dNui YhxuAOd1OgHdgxcdrqntAHJBv5UIlPdoM9EVPjM2NhnRutU+QQPJxJh5ehzAAx3B 56OPTbPyrkDeu+PQI9aqpo4rEkfoeIn0 -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:52 2025 by rpki-client