$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: hmGy3cFZXvataDtcnXlWP0EnxSRspLT5UAEicUrneaw= Subject key identifier: 3F:A9:28:E4:30:39:55:C5:FC:D9:07:AC:7F:E9:DE:C5:AC:6D:C0:C8 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0C8A Signing time: Fri 22 Aug 2025 18:21:05 +0000 Manifest this update: Fri 22 Aug 2025 18:21:05 +0000 Manifest next update: Fri 29 Aug 2025 18:21:05 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: byJa8ErRn5cmHIhAG25CtO3P44GM2xyPDIPWbsysMrc=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Aug 22 18:21:05 2025 GMT Not After : Aug 29 18:21:05 2025 GMT Subject: CN=68a8b511-f7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:09:dd:b2:a5:9e:ef:e6:8c:5e:46:10:80: 28:25:8a:c7:68:e7:22:69:61:44:0c:19:a0:48:e8: 04:ed:55:10:d2:b6:a5:d6:02:65:b6:f1:5f:31:f3: 9f:62:f7:02:56:28:df:50:80:96:33:84:0e:42:0d: c6:31:5a:87:37:ee:84:af:ca:3b:a5:95:46:81:d0: 93:30:f6:27:87:44:6e:41:24:2c:52:b5:00:82:c9: ec:a6:10:5b:d6:9b:e6:1f:e9:7b:cb:7b:ba:c0:32: c2:24:fb:9a:a2:37:b9:b9:d8:18:f5:51:1d:33:98: 19:0c:94:54:da:8d:6b:f1:d1:72:8f:fc:0b:ef:d3: 8c:99:14:26:33:0c:59:eb:e7:6a:4d:d2:1a:a6:9a: 71:69:b0:45:c8:19:09:9e:b7:cb:4c:04:25:fc:bd: 54:0e:26:b2:34:1f:74:bd:ef:94:b3:e4:3d:8a:e5: 6e:8d:34:3b:c6:d6:03:ee:1f:98:ad:1d:a8:32:04: 42:b3:7e:a3:de:1b:15:53:c8:59:92:3a:a5:77:40: 05:a6:c0:b6:8f:3c:d0:3a:9c:ee:c0:a4:9c:64:86: 24:67:14:e8:4a:c2:b4:21:bb:b4:fb:c5:18:5d:a9: df:06:29:3b:a9:61:89:50:a3:0e:5d:1b:d1:af:12: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A9:28:E4:30:39:55:C5:FC:D9:07:AC:7F:E9:DE:C5:AC:6D:C0:C8 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:af:37:0b:5d:9a:35:28:27:0f:39:79:c7:22:e2:de:b1:df: da:ac:50:65:ab:3e:8d:de:27:6d:cf:7b:47:45:03:78:22:d0: 64:b6:4c:b9:6a:fb:2d:b3:54:64:04:bd:e9:12:dc:dc:80:a6: 94:5e:8b:44:28:05:c3:19:44:48:d0:31:38:b3:09:b6:bb:12: 7f:ef:12:bd:b7:c0:63:20:ae:f8:4b:68:fd:9a:37:ef:7a:82: 9e:0b:1a:35:d4:dd:d8:d5:35:34:36:37:27:4f:f1:a2:1d:aa: a5:89:d8:06:fb:3f:cc:1c:50:02:cf:a6:70:89:8a:1a:40:c0: a7:7c:4a:0d:9a:d2:99:b6:ff:44:01:d3:aa:3d:30:3c:c7:2a: f8:c4:aa:6c:1b:b7:e9:96:f3:4d:43:d7:4f:8e:d7:30:91:76: c0:0f:c3:5f:36:28:4c:64:aa:b5:1f:fc:b9:f4:05:f7:a5:09: f7:72:d0:b3:cd:39:66:33:12:71:9a:9a:31:c5:6d:68:6c:90: 66:34:36:4b:1c:5c:cf:6d:7b:c5:e6:f9:8b:91:00:6c:73:e5: 2b:0b:dd:d3:54:1e:f7:61:34:c8:dd:0a:30:6d:53:74:56:5f: 93:fc:61:2b:3d:27:bf:bd:e4:aa:b0:b4:84:f5:c0:30:3c:ae: b1:64:1c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUwODIyMTgyMTA1WhcNMjUwODI5MTgyMTA1WjAYMRYwFAYD VQQDEw02OGE4YjUxMS1mN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI4J3bKlnu/mjF5GEIAoJYrHaOciaWFEDBmgSOgE7VUQ0ral1gJltvFfMfOf YvcCVijfUICWM4QOQg3GMVqHN+6Er8o7pZVGgdCTMPYnh0RuQSQsUrUAgsnsphBb 1pvmH+l7y3u6wDLCJPuaoje5udgY9VEdM5gZDJRU2o1r8dFyj/wL79OMmRQmMwxZ 6+dqTdIapppxabBFyBkJnrfLTAQl/L1UDiayNB90ve+Us+Q9iuVujTQ7xtYD7h+Y rR2oMgRCs36j3hsVU8hZkjqld0AFpsC2jzzQOpzuwKScZIYkZxToSsK0Ibu0+8UY XanfBik7qWGJUKMOXRvRrxLMXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+pKOQw OVXF/NkHrH/p3sWsbcDIMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6rzcLXZo1KCcPOXnHIuLesd/arFBlqz6N3idtz3tHRQN4ItBktky5 avsts1RkBL3pEtzcgKaUXotEKAXDGURI0DE4swm2uxJ/7xK9t8BjIK74S2j9mjfv eoKeCxo11N3Y1TU0NjcnT/GiHaqlidgG+z/MHFACz6ZwiYoaQMCnfEoNmtKZtv9E AdOqPTA8xyr4xKpsG7fplvNNQ9dPjtcwkXbAD8NfNihMZKq1H/y59AX3pQn3ctCz zTlmMxJxmpoxxW1obJBmNDZLHFzPbXvF5vmLkQBsc+UrC93TVB73YTTI3QowbVN0 Vl+T/GErPSe/veSqsLSE9cAwPK6xZBww -----END CERTIFICATE-----Generated at Sat Aug 23 19:00:53 2025 by rpki-client