$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: /yvg7qmoAA77KJ7uLlCj4mJyEjhuEifs4MnFMB8rvS4= Subject key identifier: 58:F2:F4:10:12:72:29:BA:F3:2E:E5:57:98:2A:45:7E:4C:B9:4A:B6 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 12D7 Signing time: Fri 22 Aug 2025 17:11:07 +0000 Manifest this update: Fri 22 Aug 2025 17:11:07 +0000 Manifest next update: Fri 29 Aug 2025 17:11:07 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: 6sV4fOvZdoZYVIWdwsW3kujR8hTJ0G33ynUhU+xgDfw=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: AtIY01QzRR0A54d2DL/Ntfs13u3zmiVedAjhi5vQD2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4833 (0x12e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Aug 22 17:11:07 2025 GMT Not After : Aug 29 17:11:07 2025 GMT Subject: CN=68a8a4ab-f787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:ab:4b:9f:4b:8e:cb:6e:b8:f5:1a:c6:1f: f7:c5:d1:e1:60:59:32:54:0e:de:14:2c:66:ad:d1: 46:30:7a:fc:04:4c:97:58:98:3b:67:a1:f7:b7:78: ca:74:12:b7:93:c4:52:76:fb:1c:58:d7:31:00:1e: 70:94:d6:e6:6b:e9:e9:d4:24:c6:73:50:29:ba:7d: f7:bd:f0:23:15:80:40:93:00:d1:0e:aa:4d:8e:f9: 13:6e:ce:70:a6:7f:9e:87:e5:ec:0b:c0:f9:29:6e: 7e:bf:b3:10:22:4c:7a:09:d2:44:f2:74:3e:c4:c1: ec:51:c0:b5:0d:3e:8a:f5:8f:a0:c8:56:da:27:1c: bc:ce:62:39:c7:d5:0b:3c:df:49:86:a4:8a:1a:53: 31:8e:76:a9:39:b7:16:2b:f1:f5:84:5a:a3:14:b8: c6:c7:7b:ab:64:ba:f9:65:2e:c3:a5:82:63:10:0a: 76:87:38:0b:14:1e:68:5f:65:f5:dc:17:1c:81:71: c8:86:90:e5:04:15:12:29:a7:27:4b:b7:82:71:f1: ab:11:ac:3d:5b:b7:08:c9:b6:94:7a:76:95:61:07: 3e:19:64:85:98:73:1e:47:3b:de:65:2b:ca:d8:ee: 72:08:06:1e:06:6c:51:fa:b8:4a:16:a9:4b:08:1a: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F2:F4:10:12:72:29:BA:F3:2E:E5:57:98:2A:45:7E:4C:B9:4A:B6 X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d5:fe:25:21:58:06:09:8f:39:12:c0:17:38:20:ed:49:10: 15:81:40:4e:ac:56:9d:3d:72:bc:35:8d:10:ed:c1:28:67:cb: 6a:49:2c:c9:1e:72:de:9e:0e:52:6d:90:82:ed:4e:aa:51:c3: a1:ea:ac:27:e2:7c:1e:dc:87:d8:ca:b0:b2:41:06:28:ac:18: 5e:3a:15:b9:e4:3f:be:85:eb:0a:26:63:bf:66:d8:31:e4:d4: e3:d8:b4:75:29:95:04:52:f6:c0:07:4c:b6:ed:1e:ec:11:74: 08:7d:cb:5d:a5:82:32:ae:ce:18:40:6b:0d:1e:93:91:2f:30: d3:5a:c7:48:7c:95:1e:94:c3:20:e2:b2:83:72:ed:f7:69:cf: 5a:49:13:02:4a:16:9f:53:45:cc:e5:ae:f7:12:f5:fc:90:72: 1e:62:cf:ee:23:a9:cc:a3:91:ee:9a:6b:00:5f:33:a4:72:03: bc:79:9d:d6:8b:16:4e:e9:8f:75:f5:43:83:14:39:a6:2e:b2: fa:5c:3f:f3:2c:00:97:b2:b0:a3:d1:9c:8b:0f:52:56:ef:26: 57:a5:de:e3:c3:cb:1f:34:08:dd:08:7d:12:80:e9:25:af:ab: ba:09:b9:c7:c1:d1:37:14:3e:24:26:1d:f7:cc:26:59:25:29: a9:31:e8:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwODIyMTcxMTA3WhcNMjUwODI5MTcxMTA3WjAYMRYwFAYD VQQDEw02OGE4YTRhYi1mNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnarS59LjstuuPUaxh/3xdHhYFkyVA7eFCxmrdFGMHr8BEyXWJg7Z6H3t3jK dBK3k8RSdvscWNcxAB5wlNbma+np1CTGc1Apun33vfAjFYBAkwDRDqpNjvkTbs5w pn+eh+XsC8D5KW5+v7MQIkx6CdJE8nQ+xMHsUcC1DT6K9Y+gyFbaJxy8zmI5x9UL PN9JhqSKGlMxjnapObcWK/H1hFqjFLjGx3urZLr5ZS7DpYJjEAp2hzgLFB5oX2X1 3BccgXHIhpDlBBUSKacnS7eCcfGrEaw9W7cIybaUenaVYQc+GWSFmHMeRzveZSvK 2O5yCAYeBmxR+rhKFqlLCBrF7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjy9BAS cim68y7lV5gqRX5MuUq2MB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ1f4lIVgGCY85EsAXOCDtSRAVgUBOrFadPXK8NY0Q7cEoZ8tqSSzJ HnLeng5SbZCC7U6qUcOh6qwn4nwe3IfYyrCyQQYorBheOhW55D++hesKJmO/Ztgx 5NTj2LR1KZUEUvbAB0y27R7sEXQIfctdpYIyrs4YQGsNHpORLzDTWsdIfJUelMMg 4rKDcu33ac9aSRMCShafU0XM5a73EvX8kHIeYs/uI6nMo5HummsAXzOkcgO8eZ3W ixZO6Y919UODFDmmLrL6XD/zLACXsrCj0ZyLD1JW7yZXpd7jw8sfNAjdCH0SgOkl r6u6CbnHwdE3FD4kJh33zCZZJSmpMegd -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:09 2025 by rpki-client