$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: GdtZ7Ahs8NTdgiqcXvivAEAFOLFVY9B86TeUEszvvNM= Subject key identifier: BD:B4:0F:C0:47:D8:18:B2:8F:98:D6:BD:6B:DA:29:06:0B:83:AB:42 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 0167 Signing time: Sat 09 Aug 2025 04:20:41 +0000 Manifest this update: Sat 09 Aug 2025 04:20:41 +0000 Manifest next update: Sat 16 Aug 2025 04:20:41 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: XTzneaSyVaxvOnXYrRANtTf/RPai6/i2UHXpwcMCP64=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Aug 9 04:20:41 2025 GMT Not After : Aug 16 04:20:41 2025 GMT Subject: CN=6896cc99-86f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:27:5a:0b:90:43:ba:68:a4:6d:1f:42:35: 49:fd:31:3f:99:5f:ec:bd:1f:7c:b6:6d:94:74:cb: 86:7b:46:07:5e:9e:fe:9a:9e:f6:6a:9c:3f:0a:a4: ff:dd:7b:04:5d:f1:00:c8:db:a4:a5:da:dd:19:94: b1:81:84:53:8b:a6:65:b3:9a:f6:50:8d:38:e2:3b: 79:bb:ef:f7:20:16:65:6d:eb:94:42:0f:fb:0e:68: 0c:e4:e3:ca:79:88:6f:f3:9c:8b:93:dd:ba:9c:8b: 5e:ea:d9:3d:89:07:c3:34:3e:69:93:13:67:f4:25: ca:50:9a:65:9f:81:79:96:36:a7:fd:90:59:a6:ab: 0e:75:e5:0b:23:83:85:bb:c4:da:f8:05:2a:b4:4d: 19:e0:5d:18:03:a4:fb:21:f6:c6:e1:d7:32:e8:c3: 89:48:56:34:43:ef:34:0d:9f:69:be:eb:be:cd:be: b7:a6:0d:82:bd:af:08:f7:d1:49:96:ea:50:09:00: fc:b7:0e:0a:9f:fd:96:90:0f:a5:b8:15:a5:8f:8c: 51:28:1c:61:b2:39:bd:d6:04:58:52:67:35:96:61: 42:0a:8e:8f:fb:0f:2c:11:f3:b8:86:15:c0:6b:a0: 03:13:0a:85:68:e3:82:30:15:3a:a7:ce:e1:7d:2b: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:0F:C0:47:D8:18:B2:8F:98:D6:BD:6B:DA:29:06:0B:83:AB:42 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1a:5d:07:29:e7:6b:b5:ef:94:d9:36:73:01:c1:2e:d8:d8: 8a:a3:72:32:5f:9e:8e:3e:2e:29:1c:0a:2a:9c:6b:fa:d7:d2: 53:4e:3a:97:d9:16:de:67:69:34:8b:46:2e:5e:ff:65:6e:67: f1:f2:20:ba:12:a4:73:62:46:6d:46:7b:f5:91:48:64:8f:59: cd:d5:14:bb:03:08:f9:5a:2c:0d:d6:1e:b0:a6:ad:22:89:ca: 08:92:a1:c9:cc:d4:d9:6d:6d:97:b7:7d:bf:dc:1f:2a:49:95: 45:4b:e9:4c:8a:df:00:13:e1:23:09:df:e5:6d:a6:fd:7f:34: e5:7c:c9:a7:12:78:88:b3:53:e5:58:71:8e:95:49:a0:55:c2: c0:cb:d8:e4:db:a0:1e:22:59:db:bc:53:fd:f4:3e:f2:91:36: 0e:16:63:58:41:47:db:d2:e6:a2:ea:9c:7e:5a:df:25:7e:06: ff:22:0c:0f:e0:d0:5c:06:f5:65:7c:e0:40:3d:61:79:77:89: 1e:bc:85:36:96:21:db:d5:bd:79:45:43:42:34:c4:1c:bd:ac: e3:71:cd:1d:b8:bd:81:82:de:e5:d4:8a:59:fa:e4:70:5e:32: c7:4b:06:d3:84:76:25:32:63:4c:d5:15:70:03:fb:2f:23:96: 21:e3:40:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwODA5MDQyMDQxWhcNMjUwODE2MDQyMDQxWjAYMRYwFAYD VQQDEw02ODk2Y2M5OS04NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGcnWguQQ7popG0fQjVJ/TE/mV/svR98tm2UdMuGe0YHXp7+mp72apw/CqT/ 3XsEXfEAyNukpdrdGZSxgYRTi6Zls5r2UI044jt5u+/3IBZlbeuUQg/7DmgM5OPK eYhv85yLk926nIte6tk9iQfDND5pkxNn9CXKUJpln4F5ljan/ZBZpqsOdeULI4OF u8Ta+AUqtE0Z4F0YA6T7IfbG4dcy6MOJSFY0Q+80DZ9pvuu+zb63pg2Cva8I99FJ lupQCQD8tw4Kn/2WkA+luBWlj4xRKBxhsjm91gRYUmc1lmFCCo6P+w8sEfO4hhXA a6ADEwqFaOOCMBU6p87hfSv10QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL20D8BH 2Biyj5jWvWvaKQYLg6tCMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqGl0HKedrte+U2TZzAcEu2NiKo3IyX56OPi4pHAoqnGv619JTTjqX 2RbeZ2k0i0YuXv9lbmfx8iC6EqRzYkZtRnv1kUhkj1nN1RS7Awj5WiwN1h6wpq0i icoIkqHJzNTZbW2Xt32/3B8qSZVFS+lMit8AE+EjCd/lbab9fzTlfMmnEniIs1Pl WHGOlUmgVcLAy9jk26AeIlnbvFP99D7ykTYOFmNYQUfb0uai6px+Wt8lfgb/IgwP 4NBcBvVlfOBAPWF5d4kevIU2liHb1b15RUNCNMQcvazjcc0duL2Bgt7l1IpZ+uRw XjLHSwbThHYlMmNM1RVwA/svI5Yh40Ca -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:17 2025 by rpki-client