$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json) Hash identifier: HGMlaloxpRyh0SCzKq+7VfEQ+OTtTw40U5ynCfR2Evc= Subject key identifier: 1E:91:6E:CF:4A:3A:9B:55:1D:91:45:83:06:37:34:AA:AE:BE:70:2E Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft Manifest number: 0DDD Signing time: Fri 22 Aug 2025 18:00:43 +0000 Manifest this update: Fri 22 Aug 2025 18:00:42 +0000 Manifest next update: Fri 29 Aug 2025 18:00:42 +0000 Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: j4BpCkRxmA13LIL2fAYX9ohf++TUQgbjMH+G0VdXwow=) 2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: /hGH0Pm/VcL/t48Buv7bSF4xPC6xqGHOH5JeW2XnqTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: Aug 22 18:00:42 2025 GMT Not After : Aug 29 18:00:42 2025 GMT Subject: CN=68a8b04b-9380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:ff:d7:4e:70:73:04:ba:ad:66:cd:50:39: 8d:80:43:e6:9c:18:6d:bc:58:b1:90:4b:74:82:dd: d9:16:20:17:73:d1:d6:5a:67:28:46:a8:12:e3:6b: 28:69:50:88:46:d0:0b:44:91:1b:3e:5e:73:22:54: 44:93:81:b0:e1:e8:a0:72:3e:62:23:d9:64:e4:95: 4b:f3:33:78:87:53:8f:a9:65:2b:be:f3:0a:9c:0c: a2:f8:b6:ef:b4:29:df:59:bd:b4:05:c8:b1:b3:f4: 62:26:9f:24:0e:e5:c7:d0:ac:2b:8e:f3:c1:f7:2a: 51:d6:c8:10:19:7d:e1:c8:9f:28:11:ea:b9:d3:e9: 96:1a:71:61:3c:07:0f:89:8f:69:6a:be:2f:d5:d4: 24:35:fc:e2:02:31:13:21:5e:1c:84:c6:c9:03:1e: 41:8a:fe:b7:b4:3d:a7:03:48:3b:de:b8:37:7c:46: 07:c0:fb:60:63:d4:18:a4:0a:0b:b2:d8:2d:47:da: 53:18:58:9e:2e:28:0b:81:c8:39:77:96:17:32:59: e2:49:37:13:41:ab:02:cf:de:78:1e:5d:20:96:19: bb:ef:91:36:80:67:e7:9d:cc:bf:d7:6e:4a:a0:fe: ab:2d:b5:39:4b:a2:ee:2a:23:4f:d0:1b:1a:af:3a: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:91:6E:CF:4A:3A:9B:55:1D:91:45:83:06:37:34:AA:AE:BE:70:2E X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e6:6f:f9:61:4d:7e:a6:b5:fe:47:b3:08:86:5d:cd:6f:c9: 1b:9f:8f:ba:b0:b9:8e:33:a4:67:5f:d9:02:5b:fa:44:0a:76: 27:ba:32:2d:08:f7:c4:ea:a7:9c:6e:0a:b0:23:cd:26:0b:d0: 7b:33:41:2a:eb:e0:d5:73:cc:be:19:88:14:8c:66:6f:47:03: e2:33:1c:11:84:12:2d:80:54:a0:54:6d:43:e7:29:21:9b:0a: 33:31:ec:5b:a4:ba:9f:8f:b8:77:66:75:e6:6d:2d:eb:5c:5d: 8c:ec:a2:7a:f3:3a:68:b5:3d:01:28:a5:63:d1:ee:33:3b:3e: 29:af:1a:28:0d:65:3a:fc:e9:f8:3f:e1:44:bb:52:fa:e2:32: 85:ef:26:97:80:98:6a:de:54:13:68:02:6c:35:ff:fd:10:69: 21:71:53:30:0b:16:cc:5a:03:c0:47:c2:6e:bf:92:90:4e:43: 04:69:9b:41:2a:e0:4d:be:68:3b:6a:8f:89:0b:2a:de:cd:2f: c4:79:9a:67:c5:36:22:31:60:51:d8:b9:00:3f:20:e1:91:b4: 90:bb:bc:08:16:73:b3:d2:be:4f:73:45:05:a0:35:1b:74:2c: d4:3f:48:fd:3b:8a:89:99:7b:1a:81:5e:cf:c1:c0:35:eb:12: d6:3c:7c:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjUwODIyMTgwMDQyWhcNMjUwODI5MTgwMDQyWjAYMRYwFAYD VQQDEw02OGE4YjA0Yi05MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HL/105wcwS6rWbNUDmNgEPmnBhtvFixkEt0gt3ZFiAXc9HWWmcoRqgS42so aVCIRtALRJEbPl5zIlREk4Gw4eigcj5iI9lk5JVL8zN4h1OPqWUrvvMKnAyi+Lbv tCnfWb20Bcixs/RiJp8kDuXH0KwrjvPB9ypR1sgQGX3hyJ8oEeq50+mWGnFhPAcP iY9par4v1dQkNfziAjETIV4chMbJAx5Biv63tD2nA0g73rg3fEYHwPtgY9QYpAoL stgtR9pTGFieLigLgcg5d5YXMlniSTcTQasCz954Hl0glhm775E2gGfnncy/125K oP6rLbU5S6LuKiNP0BsarzpVDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6Rbs9K OptVHZFFgwY3NKquvnAuMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH LVl1RGE4NlBiUUEyU0lISHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA5m/5YU1+prX+R7MIhl3Nb8kbn4+6sLmOM6RnX9kCW/pECnYnujIt CPfE6qecbgqwI80mC9B7M0Eq6+DVc8y+GYgUjGZvRwPiMxwRhBItgFSgVG1D5ykh mwozMexbpLqfj7h3ZnXmbS3rXF2M7KJ68zpotT0BKKVj0e4zOz4prxooDWU6/On4 P+FEu1L64jKF7yaXgJhq3lQTaAJsNf/9EGkhcVMwCxbMWgPAR8Juv5KQTkMEaZtB KuBNvmg7ao+JCyrezS/EeZpnxTYiMWBR2LkAPyDhkbSQu7wIFnOz0r5Pc0UFoDUb dCzUP0j9O4qJmXsagV7PwcA16xLWPHz3 -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:09 2025 by rpki-client