$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: S4tom4ts59Lx3JLApDMVC1LKOvr5LYzPmRxcHEJT1bs= Subject key identifier: 2D:3D:17:B5:1B:26:A6:F1:58:84:A6:44:8F:42:1A:86:D0:AF:06:F2 Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 0160 Signing time: Sat 09 Aug 2025 04:20:27 +0000 Manifest this update: Sat 09 Aug 2025 04:20:26 +0000 Manifest next update: Sat 16 Aug 2025 04:20:26 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: mCG8FRg5aF7wfR3wMn35iFgH5OKSFhEbDXivms7dWkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Aug 9 04:20:26 2025 GMT Not After : Aug 16 04:20:26 2025 GMT Subject: CN=6896cc8a-d8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:33:e1:64:76:4b:5a:6b:55:ed:8f:54:ab: 42:e3:fa:1c:3b:57:57:22:15:7d:95:c6:8f:ef:70: 80:ae:d3:4f:46:28:04:4d:f5:4e:bb:d7:35:39:a3: d4:d6:de:48:77:b1:b7:6b:de:88:db:83:6d:18:7d: 8a:48:d1:05:b0:5c:be:b8:af:85:a6:77:c4:86:c8: a6:bf:58:cd:71:6e:0d:72:4a:f7:72:b0:59:bc:fe: d5:c0:0c:79:af:1e:a9:72:c1:b9:8b:e1:bc:96:21: b5:c4:12:fb:7a:c6:5b:43:57:a9:aa:86:04:a0:ff: 75:ca:cb:7f:24:84:86:e4:ee:ff:1a:14:56:54:41: 8f:69:7e:20:b9:c9:7f:d3:d8:b7:06:be:ae:dc:59: 26:50:00:e6:26:17:05:ee:76:1b:e3:dc:2a:45:1d: a5:a0:cd:0e:69:ce:8f:fa:ab:95:46:31:f1:d7:5b: 6e:01:e4:92:23:91:92:4c:76:62:76:50:18:ed:36: 8b:10:3f:12:cf:0e:b6:70:3c:6f:92:57:45:66:46: cc:8a:7c:3a:25:2d:4b:3c:37:91:09:64:da:a3:46: 2f:4f:f2:3c:dd:30:00:8a:14:6c:df:9d:a1:2b:2e: 13:8c:5a:42:d1:36:78:4a:9b:bc:a1:af:ac:69:35: 8b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3D:17:B5:1B:26:A6:F1:58:84:A6:44:8F:42:1A:86:D0:AF:06:F2 X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:96:a4:a9:26:17:ee:50:9b:e7:7a:09:8a:21:43:ce:a6:8a: 2c:78:38:61:d6:bb:24:2d:a3:db:09:c3:a0:7c:4d:78:e9:a5: c1:6b:10:61:ac:ef:49:bb:24:47:3f:24:08:84:7b:2a:8a:dc: 57:21:c0:7f:20:a5:22:87:73:a6:cf:63:c6:7e:79:0b:56:2b: 9d:eb:61:3b:f6:60:a8:3c:72:fe:df:cf:95:8b:d9:dd:4c:04: a7:10:02:61:c8:6d:51:65:d9:34:50:ae:95:88:27:48:95:89: 5e:77:d1:d7:cc:8e:89:59:81:79:46:dc:88:1d:57:e3:d2:b8: 65:69:c8:83:46:3b:eb:99:ee:d9:64:ca:65:2a:64:f3:54:64: 54:0c:ae:f3:46:73:09:50:3b:b8:66:f1:26:87:72:7f:8a:8b: 84:ca:8c:52:38:4e:01:61:33:68:c6:cb:71:20:0f:28:91:35: 49:b8:eb:2f:42:48:ef:cb:d4:9b:93:a4:a1:a7:2a:a8:28:a1: dc:42:e0:d6:b2:5b:d6:26:0d:84:93:6a:ab:18:99:0d:80:b0: b7:21:29:45:fd:92:11:23:42:dd:fb:92:4a:76:06:b6:fb:1a: 2e:ee:22:70:45:d3:45:29:a9:e5:73:e6:44:67:39:d8:bd:59: 91:60:37:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUwODA5MDQyMDI2WhcNMjUwODE2MDQyMDI2WjAYMRYwFAYD VQQDEw02ODk2Y2M4YS1kOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGAz4WR2S1prVe2PVKtC4/ocO1dXIhV9lcaP73CArtNPRigETfVOu9c1OaPU 1t5Id7G3a96I24NtGH2KSNEFsFy+uK+FpnfEhsimv1jNcW4Nckr3crBZvP7VwAx5 rx6pcsG5i+G8liG1xBL7esZbQ1epqoYEoP91yst/JISG5O7/GhRWVEGPaX4gucl/ 09i3Br6u3FkmUADmJhcF7nYb49wqRR2loM0Oac6P+quVRjHx11tuAeSSI5GSTHZi dlAY7TaLED8Szw62cDxvkldFZkbMinw6JS1LPDeRCWTao0YvT/I83TAAihRs352h Ky4TjFpC0TZ4Spu8oa+saTWLRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC09F7Ub JqbxWISmRI9CGobQrwbyMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAllqSpJhfuUJvnegmKIUPOpooseDhh1rskLaPbCcOgfE146aXBaxBh rO9JuyRHPyQIhHsqitxXIcB/IKUih3Omz2PGfnkLViud62E79mCoPHL+38+Vi9nd TASnEAJhyG1RZdk0UK6ViCdIlYled9HXzI6JWYF5RtyIHVfj0rhlaciDRjvrme7Z ZMplKmTzVGRUDK7zRnMJUDu4ZvEmh3J/iouEyoxSOE4BYTNoxstxIA8okTVJuOsv Qkjvy9Sbk6ShpyqoKKHcQuDWslvWJg2Ek2qrGJkNgLC3ISlF/ZIRI0Ld+5JKdga2 +xou7iJwRdNFKanlc+ZEZznYvVmRYDeY -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:48 2025 by rpki-client