$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json) Hash identifier: 4GKFpa8jA/iQ+p/fXYyFTvn4uWX24FlDE/nWurGpRk0= Subject key identifier: E0:24:F4:02:59:94:75:27:29:D1:14:46:B7:D5:96:39:EF:0C:04:D2 Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft Manifest number: 019F Signing time: Sat 23 Aug 2025 03:27:43 +0000 Manifest this update: Sat 23 Aug 2025 03:27:42 +0000 Manifest next update: Sat 30 Aug 2025 03:27:42 +0000 Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: pPI51y3OLO/16AycoIiAB4IbWSUk++1se5Rc50B7NPE=) 2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: 7McDM53x18516IO6Lyt3v+d1E7mua3h325oyeNt73ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Validity Not Before: Aug 23 03:27:42 2025 GMT Not After : Aug 30 03:27:42 2025 GMT Subject: CN=68a9352e-1141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:b0:94:68:9e:0f:8b:45:e8:62:fe:c7:94: 12:18:13:c0:83:c9:18:89:fe:76:3f:16:46:41:13: 64:20:6e:e9:cb:81:b3:80:0a:56:ec:7e:5e:b4:97: e8:fd:6d:f6:e9:bd:8d:4d:c8:78:8e:29:a7:97:1d: 17:e9:90:bb:9e:da:a0:d8:6c:1a:70:81:71:eb:4b: 8d:ab:fc:70:f3:80:8c:81:91:8c:32:91:3b:f2:c2: 3d:d4:61:a1:cb:01:b0:f7:4c:94:15:f4:37:31:e1: 06:c5:69:df:c8:ed:7b:e3:19:3a:ef:11:6d:fa:56: bf:5d:5f:20:02:47:9b:25:e0:b5:00:71:d4:87:a9: 94:a2:ec:f8:bf:25:fd:3c:8a:d7:f8:2e:88:e0:32: 1a:05:e4:98:bf:06:9b:30:07:d7:ab:1b:d1:49:97: 82:e2:9d:cf:57:73:ed:c9:5e:2f:c4:24:69:eb:33: 46:8e:b7:64:3e:c0:c9:ac:d4:04:67:22:ae:80:b5: 29:7d:84:da:2b:6f:f9:41:e5:7c:e0:24:1b:cb:03: d3:e4:8a:7b:5d:0a:3d:4e:d4:7c:b8:22:b3:70:96: 09:9b:f1:08:02:2f:14:bd:b5:f4:cf:55:14:b3:6a: ec:ac:7b:2b:4f:ab:41:c1:2d:66:91:41:4e:5d:b0: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:F4:02:59:94:75:27:29:D1:14:46:B7:D5:96:39:EF:0C:04:D2 X509v3 Authority Key Identifier: keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:78:d9:a0:77:71:22:51:f2:d7:c7:9f:6c:38:39:53:94:09: 5a:d3:dc:1c:a9:d2:a9:7c:ac:da:93:a1:78:d3:a3:09:fe:fb: 81:36:42:26:01:17:3c:15:73:27:ab:88:35:4d:98:86:96:9e: 3f:9f:39:ae:97:d6:3f:46:43:3f:9e:f8:cf:ca:d6:5b:94:bc: 0f:3e:1d:ea:41:74:c9:d9:ae:0f:83:42:c1:00:17:1a:aa:1b: 98:7d:0b:a0:ce:22:54:b2:eb:dd:fa:ca:e8:ac:62:9d:6d:ce: 43:c4:14:66:01:bd:47:3c:82:b9:66:22:f9:0a:98:d1:5d:98: a8:67:50:dd:01:13:b1:0d:31:6f:d4:1f:c5:40:50:49:3a:b5: 31:35:07:3d:da:63:21:e6:d5:3c:34:a7:27:d9:8e:24:f2:6c: d1:62:b8:23:d9:2c:2a:5d:d1:b8:ed:b2:34:88:cd:30:47:cb: 27:63:c8:3c:2b:eb:39:ca:58:cf:58:de:db:77:82:28:71:90: cf:70:70:b1:c1:2b:bc:b4:f9:58:03:a0:6b:55:6a:d1:01:79: 7d:de:14:96:2e:d9:af:f8:0c:80:c5:cb:df:c5:c8:34:38:0c: 70:ab:7e:5f:4a:34:42:b0:ce:6e:7b:34:ef:6d:81:6f:b8:f4: 0a:a2:85:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKEFBM0JCQUFBMDlENUQzODMzNDA4OTlENkQ1M0E5NkQ1 NDA1MzlDMDEwHhcNMjUwODIzMDMyNzQyWhcNMjUwODMwMDMyNzQyWjAYMRYwFAYD VQQDEw02OGE5MzUyZS0xMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSOwlGieD4tF6GL+x5QSGBPAg8kYif52PxZGQRNkIG7py4GzgApW7H5etJfo /W326b2NTch4jimnlx0X6ZC7ntqg2GwacIFx60uNq/xw84CMgZGMMpE78sI91GGh ywGw90yUFfQ3MeEGxWnfyO174xk67xFt+la/XV8gAkebJeC1AHHUh6mUouz4vyX9 PIrX+C6I4DIaBeSYvwabMAfXqxvRSZeC4p3PV3PtyV4vxCRp6zNGjrdkPsDJrNQE ZyKugLUpfYTaK2/5QeV84CQbywPT5Ip7XQo9TtR8uCKzcJYJm/EIAi8UvbX0z1UU s2rsrHsrT6tBwS1mkUFOXbB3PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAk9AJZ lHUnKdEURrfVljnvDATSMB8GA1UdIwQYMBaAFKo7uqoJ1dODNAiZ1tU6ltVAU5wB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80MzVDM0VFMDA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0TTBDSm5XMVRxVzFVQlRu QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FqdTZxZ25WMDRNMENKblcxVHFXMVVCVG5BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS80MzVDM0VFMDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0 TTBDSm5XMVRxVzFVQlRuQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQeNmgd3EiUfLXx59sODlTlAla09wcqdKpfKzak6F406MJ/vuBNkIm ARc8FXMnq4g1TZiGlp4/nzmul9Y/RkM/nvjPytZblLwPPh3qQXTJ2a4Pg0LBABca qhuYfQugziJUsuvd+srorGKdbc5DxBRmAb1HPIK5ZiL5CpjRXZioZ1DdAROxDTFv 1B/FQFBJOrUxNQc92mMh5tU8NKcn2Y4k8mzRYrgj2SwqXdG47bI0iM0wR8snY8g8 K+s5yljPWN7bd4IocZDPcHCxwSu8tPlYA6BrVWrRAXl93hSWLtmv+AyAxcvfxcg0 OAxwq35fSjRCsM5uezTvbYFvuPQKooVV -----END CERTIFICATE-----Generated at Sun Aug 24 02:41:24 2025 by rpki-client