$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft File: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft (raw, json) Hash identifier: Re0nHaQ3BM7moR6JLrUSefMLQFjyM7kQJvJ6CjhgQHM= Subject key identifier: A6:54:DE:8F:16:C0:FC:A0:AA:A5:45:67:E1:13:12:77:0E:4F:A1:7D Authority key identifier: AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84 Certificate issuer: /CN=A916DFDD/serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft Manifest number: 25 Signing time: Sat 23 Aug 2025 08:02:37 +0000 Manifest this update: Sat 23 Aug 2025 08:02:37 +0000 Manifest next update: Sat 30 Aug 2025 08:02:37 +0000 Files and hashes: 1: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl (hash: IM2n4kUOTlVBMkNTVCE5YdSU7um14fPOk4mb3kj+4pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884 Validity Not Before: Aug 23 08:02:37 2025 GMT Not After : Aug 30 08:02:37 2025 GMT Subject: CN=68a9759d-1815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:0b:d8:a8:ec:7e:dd:fb:ae:14:0c:e7:26: da:ef:1e:87:b3:2e:7a:74:da:86:3d:5b:d2:b1:fa: 35:57:2c:c5:e9:31:80:46:05:fd:63:31:ab:5e:07: 6e:12:94:0c:2d:e7:1f:3b:ce:78:cc:0b:42:cc:f9: fb:0c:80:9f:e2:98:a9:21:1c:66:5a:e8:58:11:4c: 3d:12:8c:ca:c3:46:a7:34:92:fa:70:cd:65:1a:8e: 65:12:64:af:7a:6e:3e:ae:a1:37:9c:4d:6c:84:50: 96:0a:5e:39:cb:7d:e9:2a:72:ad:65:c2:f8:fc:e7: 51:22:43:3b:db:75:c1:50:46:8c:bf:14:7c:1a:f7: bb:92:49:9b:5f:80:f7:c8:3d:59:f5:20:eb:b9:84: ef:34:1b:33:3b:3a:b5:bb:39:de:1c:c7:f8:c2:93: ef:22:4f:b6:d5:be:c3:8c:95:87:ca:92:c4:a2:f0: b0:8b:26:72:9b:82:24:c2:b5:ed:09:89:f0:f9:88: 69:e5:a6:82:70:14:f1:00:d3:03:ca:d0:f6:3f:84: 9a:03:7b:d6:9b:55:41:20:b1:10:9a:1b:ac:e0:23: af:8b:6b:a9:07:b5:e4:7f:4c:9c:60:f0:d9:35:46: c8:2c:e1:7e:33:45:ef:b9:ce:82:6e:89:df:d2:c3: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:54:DE:8F:16:C0:FC:A0:AA:A5:45:67:E1:13:12:77:0E:4F:A1:7D X509v3 Authority Key Identifier: keyid:AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e8:18:a6:62:45:1a:ce:f1:b1:3d:f0:9f:84:b6:7c:00:36: 34:ec:61:05:5c:d8:9a:9f:0b:46:c4:59:a3:d4:c2:7a:b4:f5: 71:db:06:af:3f:4b:31:43:f5:db:f3:cd:b6:a2:f2:1b:f1:55: f9:f9:5c:c8:3d:57:02:6a:2d:c6:b6:08:76:f6:28:ad:a0:04: 8c:89:5f:6c:34:47:bd:90:04:6c:3a:ec:19:86:16:32:9e:23: 01:e8:cb:07:e1:ec:67:d2:c9:b4:47:45:c6:fa:8d:e6:63:b4: 09:df:b0:15:98:8a:83:8e:ab:ea:42:33:38:b8:df:83:69:f0: be:d6:70:48:10:ee:66:63:2b:8f:8e:4b:50:89:c8:07:5f:52: 85:ec:89:f5:1f:eb:26:24:75:ba:21:cb:ca:3d:a7:e8:e8:3e: 23:db:91:31:fb:92:4d:5b:42:32:4a:5f:ef:c6:cf:79:e5:c1: 8d:91:ee:8c:86:d9:73:c4:73:1e:ba:ab:1c:0f:8b:b8:7b:c9: 55:c4:ac:77:71:bc:49:22:15:a5:5a:da:94:fc:f1:0f:74:d1: 26:8f:cc:6f:0d:28:3a:87:a7:86:c4:64:fe:1e:67:87:79:3c: 44:ed:59:8e:0a:e7:fe:8d:46:32:66:fe:a1:16:61:a4:02:c0: 89:1d:c4:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoQUEyQ0FGNEU0RjE2QUJCMzM5QzFFNUQwRjA1OUY0MTNB RTVDRTg4NDAeFw0yNTA4MjMwODAyMzdaFw0yNTA4MzAwODAyMzdaMBgxFjAUBgNV BAMTDTY4YTk3NTlkLTE4MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNSwvYqOx+3fuuFAznJtrvHoezLnp02oY9W9Kx+jVXLMXpMYBGBf1jMateB24S lAwt5x87znjMC0LM+fsMgJ/imKkhHGZa6FgRTD0SjMrDRqc0kvpwzWUajmUSZK96 bj6uoTecTWyEUJYKXjnLfekqcq1lwvj851EiQzvbdcFQRoy/FHwa97uSSZtfgPfI PVn1IOu5hO80GzM7OrW7Od4cx/jCk+8iT7bVvsOMlYfKksSi8LCLJnKbgiTCte0J ifD5iGnlpoJwFPEA0wPK0PY/hJoDe9abVUEgsRCaG6zgI6+La6kHteR/TJxg8Nk1 Rsgs4X4zRe+5zoJuid/Sw24PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUplTejxbA /KCqpUVn4RMSdw5PoX0wHwYDVR0jBBgwFoAUqiyvTk8Wq7M5weXQ8Fn0E65c6IQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkREL0EwRDQyQTJBNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL3FpeXZUazhXcTdNNXdlWFE4Rm4wRTY1YzZJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWl5dlRrOFdxN001d2VYUThGbjBFNjVjNklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkREL0EwRDQyQTJBNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL3FpeXZUazhXcTdN NXdlWFE4Rm4wRTY1YzZJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzoGKZiRRrO8bE98J+EtnwANjTsYQVc2JqfC0bEWaPUwnq09XHbBq8/ SzFD9dvzzbai8hvxVfn5XMg9VwJqLca2CHb2KK2gBIyJX2w0R72QBGw67BmGFjKe IwHoywfh7GfSybRHRcb6jeZjtAnfsBWYioOOq+pCMzi434Np8L7WcEgQ7mZjK4+O S1CJyAdfUoXsifUf6yYkdbohy8o9p+joPiPbkTH7kk1bQjJKX+/Gz3nlwY2R7oyG 2XPEcx66qxwPi7h7yVXErHdxvEkiFaVa2pT88Q900SaPzG8NKDqHp4bEZP4eZ4d5 PETtWY4K5/6NRjJm/qEWYaQCwIkdxFs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:53:26 2025 by rpki-client