$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json) Hash identifier: /41ZleMwOI6Aumf8mqfSN0z4a3AQtvGuVdZIGGEL0Hs= Subject key identifier: EB:27:F2:84:49:42:29:9A:E0:B9:90:54:9A:7C:66:17:89:5F:52:4E Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft Manifest number: 0A33 Signing time: Fri 08 Aug 2025 20:18:08 +0000 Manifest this update: Fri 08 Aug 2025 20:18:08 +0000 Manifest next update: Fri 15 Aug 2025 20:18:08 +0000 Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: TEMn2MntmrBJDvRklHaiGADxE6ozXZ89jU7bwDa4iLo=) 2: ABF4F248555511F0A341047BC4F9AE02.roa (hash: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=) 3: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=) 4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=) 5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=) 6: AD3A0F08555511F0A341047BC4F9AE02.roa (hash: 5xpPU3hf6j5Lfs11gET77ow+Y1ISxFFuuiCCR0UoJK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: Aug 8 20:18:08 2025 GMT Not After : Aug 15 20:18:08 2025 GMT Subject: CN=68965b80-217a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:12:29:76:19:58:a5:5c:b4:67:48:76:23:ab: 19:7d:cb:4a:11:a0:21:7c:9d:08:3e:56:ba:ea:72: b9:dc:4f:c4:52:2a:6f:8a:9a:40:6f:bd:b9:f8:0f: 9c:58:30:46:9d:99:ba:be:31:ce:8c:f5:1c:00:82: 43:8e:1d:67:7b:a5:aa:d8:ae:d1:67:e4:81:39:4d: e5:5d:fb:80:01:15:38:db:52:c2:bf:bd:68:92:1c: 77:26:1f:9d:fe:98:4a:3e:27:94:29:9c:cf:60:d3: d4:f5:9e:4f:4c:fe:2d:87:72:57:ac:71:5f:fa:d3: a9:cf:48:57:07:8b:47:71:b5:65:a4:7d:a4:4f:dc: 86:a3:53:be:25:4e:86:f5:f6:97:dd:57:86:d4:20: f3:ba:56:bc:84:6a:2d:52:5b:66:06:6f:0f:cc:af: 36:66:38:7d:38:d7:4f:2e:86:e6:ca:6c:d6:60:42: 8d:c0:8c:8b:57:62:62:60:44:00:6c:95:ce:cd:2a: 75:c0:c0:bb:31:b1:55:df:d4:35:39:6b:39:a4:14: 23:5e:56:fd:1e:56:06:47:0f:73:bf:8a:2f:5c:bc: 0b:41:78:d3:17:ec:6f:bc:bd:88:64:10:37:4e:f4: 83:2c:f6:6c:3e:19:35:61:40:c2:e5:83:56:62:d3: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:27:F2:84:49:42:29:9A:E0:B9:90:54:9A:7C:66:17:89:5F:52:4E X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e8:a5:3b:4c:5b:15:e0:a4:f9:10:f5:d1:1f:c2:2c:06:94: 80:f8:f7:e7:76:f0:7d:9d:af:8e:fb:f0:a6:e2:36:df:63:43: e0:0e:84:29:93:61:de:f4:71:29:f6:51:99:70:f2:65:0a:6a: db:07:76:81:9f:7e:84:2d:ad:fc:b9:c4:6a:10:10:72:01:3d: 13:ed:22:36:85:3a:1b:38:d6:60:ab:8a:3e:43:96:48:93:80: 4b:97:44:a8:37:cd:f2:3b:e0:46:40:9f:82:81:7e:6c:4a:84: 1a:55:c3:68:63:2e:21:37:88:88:2f:0c:c9:41:6e:27:2d:01: 46:1c:15:be:8e:fa:69:90:53:12:88:1b:69:2b:54:c1:69:cf: 4c:46:31:97:d3:13:2e:a6:a6:46:a7:27:2f:6f:a9:f0:d7:6b: 0d:fe:6f:22:d3:3f:d1:ee:bc:3b:f1:a8:0a:17:da:42:fa:74: e6:53:ef:80:13:1f:9e:a7:94:9a:50:87:5d:f8:5b:0f:2d:4c: 8d:08:18:6b:6b:57:a3:91:f5:76:85:fe:25:56:d1:5f:b3:cd: d7:a5:d2:45:a9:47:69:51:0a:6f:cd:9c:c6:a3:99:d0:b0:bf: 40:e0:82:59:ce:2c:17:79:b6:d8:5d:ef:61:fd:8f:be:6d:9f: 5e:0c:f7:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjUwODA4MjAxODA4WhcNMjUwODE1MjAxODA4WjAYMRYwFAYD VQQDEw02ODk2NWI4MC0yMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RIpdhlYpVy0Z0h2I6sZfctKEaAhfJ0IPla66nK53E/EUipvippAb725+A+c WDBGnZm6vjHOjPUcAIJDjh1ne6Wq2K7RZ+SBOU3lXfuAARU421LCv71okhx3Jh+d /phKPieUKZzPYNPU9Z5PTP4th3JXrHFf+tOpz0hXB4tHcbVlpH2kT9yGo1O+JU6G 9faX3VeG1CDzula8hGotUltmBm8PzK82Zjh9ONdPLobmymzWYEKNwIyLV2JiYEQA bJXOzSp1wMC7MbFV39Q1OWs5pBQjXlb9HlYGRw9zv4ovXLwLQXjTF+xvvL2IZBA3 TvSDLPZsPhk1YUDC5YNWYtOolQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsn8oRJ Qima4LmQVJp8ZheJX1JOMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5 ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq6KU7TFsV4KT5EPXRH8IsBpSA+PfndvB9na+O+/Cm4jbfY0PgDoQp k2He9HEp9lGZcPJlCmrbB3aBn36ELa38ucRqEBByAT0T7SI2hTobONZgq4o+Q5ZI k4BLl0SoN83yO+BGQJ+CgX5sSoQaVcNoYy4hN4iILwzJQW4nLQFGHBW+jvppkFMS iBtpK1TBac9MRjGX0xMupqZGpycvb6nw12sN/m8i0z/R7rw78agKF9pC+nTmU++A Ex+ep5SaUIdd+FsPLUyNCBhra1ejkfV2hf4lVtFfs83XpdJFqUdpUQpvzZzGo5nQ sL9A4IJZziwXebbYXe9h/Y++bZ9eDPeA -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:25 2025 by rpki-client