$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: y/Bs5DDR7HW9YSVo/TCSGYYZeBkQlteC8c03atxmVow= Subject key identifier: 88:24:F5:5F:73:90:11:E7:61:26:EF:3C:5C:EB:8D:07:E3:81:CC:9A Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 0453 Signing time: Sat 23 Aug 2025 00:29:09 +0000 Manifest this update: Sat 23 Aug 2025 00:29:08 +0000 Manifest next update: Sat 30 Aug 2025 00:29:08 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: onCeELcmDmwrs3ZXD9kdQBhOr/LdAp285CYlvYepSD8=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: Aug 23 00:29:08 2025 GMT Not After : Aug 30 00:29:08 2025 GMT Subject: CN=68a90b54-9e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:b6:14:e5:ec:7d:71:07:15:25:b3:cb:58: 7e:c9:68:7e:f0:d7:b1:58:6e:8b:5b:89:be:36:d3: 20:a2:42:b8:f8:01:2d:9c:d7:cc:b5:fc:10:74:f5: bf:f5:fd:57:6d:e1:2f:07:bf:d7:d6:93:1d:05:c2: d1:62:d3:4d:0b:ab:f8:cd:23:fd:9a:60:04:db:19: 07:0a:82:ad:fd:8a:6e:c0:86:9e:24:8a:63:64:0c: d2:65:6a:ad:d8:71:63:04:6a:91:5f:c4:6a:75:27: eb:bb:d0:30:cd:78:05:97:61:27:d5:4f:b3:2f:d8: d1:18:44:36:1e:9b:41:93:7e:99:73:20:f7:2d:26: cd:a6:b6:8d:66:84:38:6a:a2:9f:82:a4:87:9f:d5: 29:4b:0b:36:1a:b2:9a:4c:a3:21:8d:bf:18:fd:ca: 9f:5e:c2:28:a9:1e:8b:b9:46:a7:6e:99:b5:5c:53: 78:0f:1b:6e:75:d1:ef:3c:10:62:9f:25:a1:3f:8d: 34:8a:68:08:a9:8c:da:95:5c:c9:da:f7:a1:b4:2f: 1d:a2:92:40:25:57:cd:fd:f4:8f:de:2e:b1:68:21: b7:d9:39:11:c7:d8:d5:65:37:40:48:97:b1:2d:b0: d0:67:28:c5:a6:60:91:e6:ff:f4:88:de:5e:12:2e: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:F5:5F:73:90:11:E7:61:26:EF:3C:5C:EB:8D:07:E3:81:CC:9A X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:84:ad:aa:ad:4d:f7:6c:1b:93:86:32:3d:90:ac:7a:d0:01: f2:e1:e7:4c:02:75:c4:e5:8c:10:1d:bd:14:76:72:88:6a:e9: e0:a5:3f:97:32:bb:57:f2:10:f9:d5:99:f3:d2:45:af:30:78: f8:88:c3:74:82:c1:1d:cb:b4:c5:85:00:3a:22:0a:06:f5:49: 50:98:5b:0e:f0:27:93:41:17:84:54:c8:01:ab:c7:a9:84:93: 4f:04:bf:2a:8c:90:22:63:7c:b1:11:97:ef:56:8f:09:02:f0: c0:08:2b:bd:23:55:4c:05:e6:47:2e:6d:f6:8c:5b:c0:0f:a8: 61:57:69:4d:3f:62:cc:24:ef:c1:5a:fc:0a:89:77:b6:9c:f9: e8:27:59:7e:dd:e0:c3:a4:46:1c:c4:f7:c5:28:01:93:02:ef: ea:0b:c7:50:2d:17:f3:ee:75:d6:92:ac:29:c6:82:a4:b4:53: 49:07:ee:e1:a3:52:65:5c:fb:da:bc:da:b8:7e:dc:69:7c:28: 1d:01:0c:05:fb:ee:c2:46:e2:2d:57:85:3c:3e:f0:7f:b0:fd: 88:25:b4:35:19:50:61:79:2c:a0:af:c5:92:d3:e8:d3:a8:54: f9:fa:5a:e0:5b:09:da:86:9d:59:ec:bf:65:04:ba:42:7d:60: f5:d8:99:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjUwODIzMDAyOTA4WhcNMjUwODMwMDAyOTA4WjAYMRYwFAYD VQQDEw02OGE5MGI1NC05ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydm2FOXsfXEHFSWzy1h+yWh+8NexWG6LW4m+NtMgokK4+AEtnNfMtfwQdPW/ 9f1XbeEvB7/X1pMdBcLRYtNNC6v4zSP9mmAE2xkHCoKt/YpuwIaeJIpjZAzSZWqt 2HFjBGqRX8RqdSfru9AwzXgFl2En1U+zL9jRGEQ2HptBk36ZcyD3LSbNpraNZoQ4 aqKfgqSHn9UpSws2GrKaTKMhjb8Y/cqfXsIoqR6LuUanbpm1XFN4DxtuddHvPBBi nyWhP400imgIqYzalVzJ2vehtC8dopJAJVfN/fSP3i6xaCG32TkRx9jVZTdASJex LbDQZyjFpmCR5v/0iN5eEi4Z2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgk9V9z kBHnYSbvPFzrjQfjgcyaMB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjhK2qrU33bBuThjI9kKx60AHy4edMAnXE5YwQHb0UdnKIaungpT+X MrtX8hD51Znz0kWvMHj4iMN0gsEdy7TFhQA6IgoG9UlQmFsO8CeTQReEVMgBq8ep hJNPBL8qjJAiY3yxEZfvVo8JAvDACCu9I1VMBeZHLm32jFvAD6hhV2lNP2LMJO/B WvwKiXe2nPnoJ1l+3eDDpEYcxPfFKAGTAu/qC8dQLRfz7nXWkqwpxoKktFNJB+7h o1JlXPvavNq4ftxpfCgdAQwF++7CRuItV4U8PvB/sP2IJbQ1GVBheSygr8WS0+jT qFT5+lrgWwnahp1Z7L9lBLpCfWD12Jng -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:47 2025 by rpki-client