$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: QOsupCzEWTvzF2XEEzDp4rkPbgLrU5lejg4DrTkuZGw= Subject key identifier: 10:94:CF:E9:DE:62:2A:21:E8:6D:72:B2:9A:95:99:BD:D3:A9:79:65 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 20E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 5580 Signing time: Fri 22 Aug 2025 14:55:01 +0000 Manifest this update: Fri 22 Aug 2025 14:55:00 +0000 Manifest next update: Fri 29 Aug 2025 14:55:00 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: lzgN4I0YFhlvyZ1Jr1tETJIIaJ54p9QnWoalm6YHb48=) 2: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g=) 3: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: wW6HtygaJuqa+MnCVL4XlwdsV1VvmruGQrlj4oWNX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8418 (0x20e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: Aug 22 14:55:00 2025 GMT Not After : Aug 29 14:55:00 2025 GMT Subject: CN=68a884c4-4f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b8:fb:1e:65:5a:25:8c:79:f1:92:d1:48:0c: 9d:c4:e4:79:12:95:f6:36:72:26:f7:38:01:7a:fa: 44:73:8c:5e:6b:35:47:3e:26:8e:a1:7d:99:6f:3f: 5d:b1:2b:f1:6c:11:e2:38:87:3c:e6:6b:d4:0d:85: f7:c5:b5:5c:23:0e:d4:5c:20:fd:7a:c2:c7:2f:5c: 1a:b4:5d:c1:83:4f:a7:78:e5:a2:90:4c:ea:5e:f1: e4:f5:18:d2:ba:b5:4f:72:e9:65:36:fd:f5:68:67: ef:58:b4:7e:89:b2:86:84:6d:4a:d4:ea:1d:f2:74: e2:a7:45:d2:a3:dd:aa:19:b3:87:47:03:19:7e:8d: 99:10:a6:a4:c8:59:ab:34:ab:13:f9:88:a0:74:34: e9:49:f7:bb:77:44:b7:0e:43:4d:37:bd:d5:66:65: d3:a7:ea:d9:61:d2:58:27:33:bc:f8:ef:01:10:4a: 5b:69:43:08:be:90:69:56:5e:a0:88:1d:66:a1:4f: e2:0c:c4:82:39:54:6e:3f:11:4a:62:e7:37:a0:a3: 44:e7:a2:48:da:6f:d1:1a:85:06:82:66:63:5e:e5: b9:99:a0:e1:f1:54:e2:e0:d7:39:16:08:67:4f:11: 0d:75:4b:ee:d5:b5:9a:6e:17:51:b8:e8:ee:51:19: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:94:CF:E9:DE:62:2A:21:E8:6D:72:B2:9A:95:99:BD:D3:A9:79:65 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6b:ba:8d:b9:74:ff:2e:42:50:97:c2:50:30:cd:f3:23:c2: 66:ae:d8:ec:c2:23:95:73:0b:e5:7a:07:d2:df:a2:1f:93:01: 36:6b:37:95:45:31:e5:d5:1d:b9:88:45:4b:9c:0f:10:fd:e6: 30:f9:19:51:a0:80:24:c4:b3:83:31:d1:8a:eb:d6:fa:be:23: cf:11:c6:b8:e6:d3:30:3e:40:fa:04:bd:e0:7a:52:f7:f1:af: a2:e3:fa:8c:df:d2:5c:2d:e8:66:84:6d:5c:2d:a2:12:37:7a: b3:fd:df:01:e7:0b:1e:0a:bb:bd:20:dd:c2:f6:16:00:c3:d5: 89:13:37:b9:ad:83:6f:45:85:8b:54:e7:bd:c9:7d:e4:a4:b4: d2:8c:55:63:78:ba:e9:9b:7c:42:6c:d9:b0:f5:4d:72:b3:a1: b4:3b:99:71:bb:4b:ad:d5:18:05:4e:3b:4a:c8:2b:ad:5b:25: ab:b4:ba:3c:81:f9:1a:a0:5d:2b:f3:2a:66:12:45:52:32:ce: 7c:46:58:b4:4b:33:f6:5d:d4:7a:04:a6:49:82:4b:04:62:00: 2e:6f:1f:a8:37:c3:2c:a8:b2:39:42:08:3a:de:74:64:bd:6b: 96:09:07:7c:f2:72:ed:ea:85:f1:ce:de:15:6b:53:85:2e:be: 2f:84:37:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjUwODIyMTQ1NTAwWhcNMjUwODI5MTQ1NTAwWjAYMRYwFAYD VQQDEw02OGE4ODRjNC00Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rj7HmVaJYx58ZLRSAydxOR5EpX2NnIm9zgBevpEc4xeazVHPiaOoX2Zbz9d sSvxbBHiOIc85mvUDYX3xbVcIw7UXCD9esLHL1watF3Bg0+neOWikEzqXvHk9RjS urVPcullNv31aGfvWLR+ibKGhG1K1Ood8nTip0XSo92qGbOHRwMZfo2ZEKakyFmr NKsT+YigdDTpSfe7d0S3DkNNN73VZmXTp+rZYdJYJzO8+O8BEEpbaUMIvpBpVl6g iB1moU/iDMSCOVRuPxFKYuc3oKNE56JI2m/RGoUGgmZjXuW5maDh8VTi4Nc5Fghn TxENdUvu1bWabhdRuOjuURldwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCUz+ne Yioh6G1yspqVmb3TqXllMB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYa7qNuXT/LkJQl8JQMM3zI8JmrtjswiOVcwvlegfS36IfkwE2azeV RTHl1R25iEVLnA8Q/eYw+RlRoIAkxLODMdGK69b6viPPEca45tMwPkD6BL3gelL3 8a+i4/qM39JcLehmhG1cLaISN3qz/d8B5wseCru9IN3C9hYAw9WJEze5rYNvRYWL VOe9yX3kpLTSjFVjeLrpm3xCbNmw9U1ys6G0O5lxu0ut1RgFTjtKyCutWyWrtLo8 gfkaoF0r8ypmEkVSMs58Rli0SzP2XdR6BKZJgksEYgAubx+oN8MsqLI5Qgg63nRk vWuWCQd88nLt6oXxzt4Va1OFLr4vhDcM -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:15 2025 by rpki-client