$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json) Hash identifier: v3mTHvxrIGtMW2DF4ITgtzurPcO3uNRlm0SHM5yVFMQ= Subject key identifier: 72:59:CD:A8:04:17:E8:29:B3:F3:08:02:22:0D:D5:D7:E7:A0:CE:5A Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Certificate serial: 0FF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft Manifest number: 263D Signing time: Fri 22 Aug 2025 16:48:47 +0000 Manifest this update: Fri 22 Aug 2025 16:48:46 +0000 Manifest next update: Fri 29 Aug 2025 16:48:46 +0000 Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: b3kF4uoshK7t50F7MUdAS41Ue0IyR+bIvTHH7/5sKD8=) 2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: gR4VIke3wzcLlwcHX1MfRQDB5DCCZYAeVJopuxrfT0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4086 (0xff6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Validity Not Before: Aug 22 16:48:46 2025 GMT Not After : Aug 29 16:48:46 2025 GMT Subject: CN=68a89f6f-cdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:d2:5a:a2:c4:7c:8d:16:95:4d:e5:d9:70: 9e:4e:ae:b9:f8:70:5a:90:ec:dc:88:53:51:85:ee: 10:11:48:99:2b:4e:80:5e:5f:3b:41:0a:7f:c6:65: 24:15:e9:dc:e5:f3:b7:a9:4d:55:b1:3e:80:07:e0: bf:3a:63:3f:8e:24:3f:3d:2f:9d:48:d1:a9:70:45: 2b:be:13:5d:9e:25:e1:ed:db:f8:90:4f:c8:0b:83: 91:27:76:89:02:33:7a:a4:6a:d8:18:65:15:77:95: 23:4e:74:7c:9d:86:fc:40:11:78:41:a5:34:0b:08: 29:83:be:7c:af:13:81:55:d3:06:07:96:ea:9f:65: be:14:3a:37:64:77:39:92:c9:95:bd:8b:f7:bd:99: c4:24:20:8f:a5:50:8f:67:a0:62:1c:c4:e3:9e:b3: da:70:f3:34:5c:87:8c:7a:f3:65:f4:53:6c:9d:87: 1d:df:ca:ae:82:33:8c:da:f4:33:42:09:3c:2f:98: d4:6c:e9:3e:78:e6:ff:80:51:c4:62:95:78:84:09: 18:ec:c7:5b:64:a8:25:9a:54:42:e2:6b:b7:c9:d1: 65:60:2c:61:37:64:de:7b:6a:0a:10:38:19:86:da: 21:f2:ef:41:4c:5e:fb:c5:88:02:8f:1f:a2:f4:bc: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:59:CD:A8:04:17:E8:29:B3:F3:08:02:22:0D:D5:D7:E7:A0:CE:5A X509v3 Authority Key Identifier: keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b1:ce:66:f7:51:2d:79:3e:62:62:44:20:ab:ff:dc:d6:25: c9:1d:29:70:0a:f3:c4:13:f8:08:0f:15:f7:2d:0e:d1:af:a1: 02:0d:a5:44:16:00:bf:b0:a4:4f:d8:ee:7a:2e:fd:ff:9b:cc: 77:e3:13:4b:0b:2a:ab:ed:30:c2:a0:5c:1d:62:bb:fb:0b:ef: 20:af:5d:2b:c0:65:9e:1b:f5:fb:51:36:51:71:aa:fd:09:02: fe:3c:e3:a0:89:ab:d3:48:4a:c8:37:26:dc:30:21:82:01:fc: 8e:ab:23:04:7a:18:bb:43:77:f1:4f:40:36:f8:c2:49:98:a1: 2a:e7:e0:40:e5:89:6b:ba:14:45:f4:9e:4c:b0:f5:0c:94:11: a7:23:38:99:4e:c7:3d:e3:5c:63:c7:f8:af:e3:68:3a:16:58: 0f:ba:d7:80:cb:33:61:2f:71:ec:45:7a:de:93:8c:1d:a0:01: 61:1f:c1:3d:e0:64:51:37:4f:3f:c6:c2:d4:63:49:5a:22:de: 08:b7:4c:bb:0a:28:41:15:bf:75:e6:c7:24:f0:ba:bb:c3:9a: ce:6c:08:01:ae:73:0f:dc:a3:30:91:41:34:3b:a0:94:1e:4f: 49:5d:85:ec:10:66:aa:84:7b:75:74:71:ce:2e:2c:7b:5f:df: 7c:7c:75:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlBRTYwQTRDQUNB NzNGRTgzNjEwHhcNMjUwODIyMTY0ODQ2WhcNMjUwODI5MTY0ODQ2WjAYMRYwFAYD VQQDEw02OGE4OWY2Zi1jZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc3SWqLEfI0WlU3l2XCeTq65+HBakOzciFNRhe4QEUiZK06AXl87QQp/xmUk Fenc5fO3qU1VsT6AB+C/OmM/jiQ/PS+dSNGpcEUrvhNdniXh7dv4kE/IC4ORJ3aJ AjN6pGrYGGUVd5UjTnR8nYb8QBF4QaU0Cwgpg758rxOBVdMGB5bqn2W+FDo3ZHc5 ksmVvYv3vZnEJCCPpVCPZ6BiHMTjnrPacPM0XIeMevNl9FNsnYcd38qugjOM2vQz Qgk8L5jUbOk+eOb/gFHEYpV4hAkY7MdbZKglmlRC4mu3ydFlYCxhN2Tee2oKEDgZ htoh8u9BTF77xYgCjx+i9LyE5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJZzagE F+gps/MIAiIN1dfnoM5aMB8GA1UdIwQYMBaAFEIYL19xpYmEzohZrmCkyspz/oNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZVE9pRm11WUtUS3luUC1n MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FoZ3ZYM0dsaVlUT2lGbXVZS1RLeW5QLWcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZ VE9pRm11WUtUS3luUC1nMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApsc5m91EteT5iYkQgq//c1iXJHSlwCvPEE/gIDxX3LQ7Rr6ECDaVE FgC/sKRP2O56Lv3/m8x34xNLCyqr7TDCoFwdYrv7C+8gr10rwGWeG/X7UTZRcar9 CQL+POOgiavTSErINybcMCGCAfyOqyMEehi7Q3fxT0A2+MJJmKEq5+BA5YlruhRF 9J5MsPUMlBGnIziZTsc941xjx/iv42g6FlgPuteAyzNhL3HsRXrek4wdoAFhH8E9 4GRRN08/xsLUY0laIt4It0y7CihBFb915sck8Lq7w5rObAgBrnMP3KMwkUE0O6CU Hk9JXYXsEGaqhHt1dHHOLix7X998fHVP -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:45 2025 by rpki-client