$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: QL8AJRvT5QHLa9uc5FvIEQnE3mxGuSQPWPO0D89mf9c= Subject key identifier: 89:8A:C9:C7:38:57:39:11:50:00:C4:7E:39:AE:F9:EB:A3:C4:29:91 Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 4C Signing time: Sat 23 Aug 2025 07:35:57 +0000 Manifest this update: Sat 23 Aug 2025 07:35:57 +0000 Manifest next update: Sat 30 Aug 2025 07:35:57 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: IC0VyCAtdzhcTtcaz+oSghXqPIe1FPM3XBko6e0vauM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Aug 23 07:35:57 2025 GMT Not After : Aug 30 07:35:57 2025 GMT Subject: CN=68a96f5d-6dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:51:87:91:2a:53:66:81:5c:31:a3:3f:f4: 8b:2b:39:d1:aa:e2:2d:39:ed:69:ef:b8:fb:d5:af: 6c:6b:80:91:63:53:1f:65:b4:07:9d:5b:28:26:02: fd:f9:88:b0:ae:30:62:91:37:91:0c:3d:f0:1a:7c: e6:29:8a:c1:7f:39:0b:e5:ed:3d:1b:5f:2c:95:c9: c1:2b:a1:7b:83:df:47:da:7b:26:ee:fa:50:03:53: e3:ed:3f:b7:2a:df:90:dc:c6:29:dd:e3:8d:78:ca: 8a:82:b0:e3:26:54:13:ba:08:d4:6f:d5:07:b8:db: 4a:08:67:02:6b:1b:4a:33:4b:45:7e:d9:58:58:d9: 10:89:d8:ae:9f:ab:ad:44:c3:71:79:b8:63:31:5f: c4:b2:79:f3:0b:84:ef:99:d6:da:3e:89:16:1e:4b: e3:28:ff:5d:e1:13:58:09:f7:71:4b:c4:f6:09:b1: 12:a6:9e:94:de:d4:51:f8:64:61:69:bb:5b:fe:79: ea:c0:a8:66:1f:aa:48:2c:03:cc:82:f0:b1:cb:03: 50:a8:17:61:b3:b7:b1:11:30:8f:af:14:17:3b:56: 66:2e:a7:1e:5a:60:64:df:2c:a2:e3:6a:a4:33:6f: 7a:9a:85:24:d5:0f:77:1b:66:12:09:18:87:db:6e: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:C9:C7:38:57:39:11:50:00:C4:7E:39:AE:F9:EB:A3:C4:29:91 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:52:04:c0:31:cc:95:53:34:f3:9a:8a:3e:d3:39:2d:73:36: ed:1e:52:fc:14:3a:10:8a:76:b6:4a:5e:cb:4b:ff:67:d3:f2: 41:f9:33:19:76:bd:c9:ed:7e:fb:11:f9:7e:16:ac:07:04:ac: 4c:ad:fa:ef:cb:19:0f:6b:21:11:df:fc:ce:79:93:ba:b4:06: 1d:0a:a2:c3:f2:0a:13:30:36:9a:19:b7:77:40:39:58:d7:68: e4:ff:13:f3:e0:54:31:a2:c5:b3:1b:49:0a:2a:d1:06:58:27: 4d:b6:39:0a:05:bd:24:f3:b6:95:78:61:94:3d:08:b7:c1:84: b0:b3:ea:04:d3:60:fb:c5:a5:b0:69:a2:4c:35:41:87:21:4c: 59:33:e7:59:f7:67:ef:e5:a0:5f:ec:a8:fb:ce:a0:95:34:a2: 4e:21:52:6c:f9:6a:8b:70:fb:f4:63:53:76:a5:1a:f7:32:f1: 6a:15:31:ee:50:62:47:ab:9b:e2:fc:2f:5f:c8:4f:89:07:d7: b3:ee:41:8a:84:f6:b0:36:4e:83:95:b7:37:c1:f7:2e:13:7e: a0:c2:fb:7f:cc:ac:6f:bf:7f:94:82:73:d2:8b:75:c6:b0:e5: d1:fe:0b:c5:01:74:9d:30:08:ed:be:02:c3:f5:7a:cd:2c:a7: f1:66:6a:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTA4MjMwNzM1NTdaFw0yNTA4MzAwNzM1NTdaMBgxFjAUBgNV BAMTDTY4YTk2ZjVkLTZkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvd1GHkSpTZoFcMaM/9IsrOdGq4i057WnvuPvVr2xrgJFjUx9ltAedWygmAv35 iLCuMGKRN5EMPfAafOYpisF/OQvl7T0bXyyVycEroXuD30faeybu+lADU+PtP7cq 35Dcxind4414yoqCsOMmVBO6CNRv1Qe420oIZwJrG0ozS0V+2VhY2RCJ2K6fq61E w3F5uGMxX8SyefMLhO+Z1to+iRYeS+Mo/13hE1gJ93FLxPYJsRKmnpTe1FH4ZGFp u1v+eerAqGYfqkgsA8yC8LHLA1CoF2Gzt7ERMI+vFBc7VmYupx5aYGTfLKLjaqQz b3qahSTVD3cbZhIJGIfbbqdNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiYrJxzhX ORFQAMR+Oa7566PEKZEwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5SBMAxzJVTNPOaij7TOS1zNu0eUvwUOhCKdrZKXstL/2fT8kH5Mxl2 vcntfvsR+X4WrAcErEyt+u/LGQ9rIRHf/M55k7q0Bh0KosPyChMwNpoZt3dAOVjX aOT/E/PgVDGixbMbSQoq0QZYJ022OQoFvSTztpV4YZQ9CLfBhLCz6gTTYPvFpbBp okw1QYchTFkz51n3Z+/loF/sqPvOoJU0ok4hUmz5aotw+/RjU3alGvcy8WoVMe5Q Ykerm+L8L1/IT4kH17PuQYqE9rA2ToOVtzfB9y4TfqDC+3/MrG+/f5SCc9KLdcaw 5dH+C8UBdJ0wCO2+AsP1es0sp/FmauE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:45 2025 by rpki-client