$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: lgoTGF3K1aUehqupb1Sjtjl3ubqtuxyXWmz29kpVJzM= Subject key identifier: 25:F0:58:5F:D3:71:F1:87:57:86:EB:0E:D0:DE:C8:CD:01:04:76:DD Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: D2 Signing time: Tue 05 Aug 2025 06:07:42 +0000 Manifest this update: Tue 05 Aug 2025 06:07:42 +0000 Manifest next update: Tue 12 Aug 2025 06:07:42 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: xse3zvW/2WD3y2YA9vASvPDU2DA+a5xIONkuyMiXLmU=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Aug 5 06:07:42 2025 GMT Not After : Aug 12 06:07:42 2025 GMT Subject: CN=68919fae-686e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:de:49:11:48:07:7f:9d:ea:54:fe:49:93:64: e3:6f:49:59:7a:ff:f2:83:46:8d:82:58:fd:64:19: a5:9f:64:2b:77:38:7f:68:67:3b:37:fd:8e:fb:40: 3a:2a:40:40:2b:74:f6:08:14:58:c0:3e:b9:22:54: b5:e3:79:98:3b:e7:47:23:87:3c:36:b1:53:12:24: bd:3f:c0:2f:12:e5:b6:4c:c5:42:06:e2:8e:ba:45: 28:ac:e6:4a:50:fe:f6:cf:94:84:f5:c2:11:a5:21: 10:74:4c:10:e1:51:c8:7c:2e:75:8b:f9:c8:d5:d2: fe:0a:94:40:22:d7:dc:14:4b:c3:f1:dc:d5:17:fc: cc:fe:18:11:de:77:2d:a1:26:d3:a0:69:27:79:03: 37:68:4c:5a:b5:e0:8d:0d:65:1f:c3:01:69:e2:78: 43:a4:17:c7:90:61:d7:62:1f:2e:82:2a:84:b7:cb: eb:a8:7f:fd:d5:a7:d3:15:e9:20:0b:1d:90:77:c4: 90:0a:07:ae:b4:04:af:f6:6c:54:68:63:98:11:72: 8d:df:70:79:26:54:f6:a0:a2:ec:89:0b:29:e8:5b: 9c:69:9b:ab:29:b4:f2:e1:62:f5:42:1a:6b:52:61: 59:2d:06:4e:31:86:82:38:49:94:ec:b3:47:8b:d6: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:58:5F:D3:71:F1:87:57:86:EB:0E:D0:DE:C8:CD:01:04:76:DD X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:27:be:ad:cb:63:7c:0f:84:f2:ba:2a:be:a1:af:f7:f3:77: 6a:01:c6:b7:d6:7f:ba:fb:88:b3:40:50:18:7e:9c:f4:0a:59: 80:e7:14:4f:f6:29:e7:ff:c8:f7:73:bc:57:1f:3b:8e:7c:93: ad:a5:94:39:38:be:b7:ea:21:72:c1:db:4c:39:fc:8a:27:f8: 70:f4:2f:5b:33:f9:99:a7:2a:0c:58:60:3a:bd:b7:6d:22:a5: 25:de:6a:ec:bf:fb:4f:65:9f:b0:ce:e6:cc:21:b5:ea:37:ec: 10:60:51:31:49:bc:5e:b4:bf:12:75:41:32:4e:a0:15:5d:a1: 41:5d:d7:54:65:80:ff:7e:bd:de:1b:da:33:5e:b8:d0:5b:ed: 9b:a5:c4:d1:80:16:f2:5a:4b:44:8a:a5:44:0e:73:c7:22:1f: fb:30:a6:4e:aa:98:33:6d:28:1f:ea:41:7f:21:7a:3b:1a:80: 7c:86:0e:1d:81:77:a1:c2:91:cc:6d:d8:2f:da:07:b8:c5:fe: 89:ef:e9:59:28:3c:4e:87:58:60:e9:15:b1:ee:aa:f0:37:9a: e1:f9:4f:a9:54:ca:68:0e:97:0d:8a:ed:18:9f:df:2c:d3:13: d9:3d:ef:f1:d6:ae:20:05:ee:b0:13:fb:7a:d1:8c:8c:e1:72: 55:8b:be:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC RkZENENDQjYwHhcNMjUwODA1MDYwNzQyWhcNMjUwODEyMDYwNzQyWjAYMRYwFAYD VQQDEw02ODkxOWZhZS02ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7d5JEUgHf53qVP5Jk2Tjb0lZev/yg0aNglj9ZBmln2Qrdzh/aGc7N/2O+0A6 KkBAK3T2CBRYwD65IlS143mYO+dHI4c8NrFTEiS9P8AvEuW2TMVCBuKOukUorOZK UP72z5SE9cIRpSEQdEwQ4VHIfC51i/nI1dL+CpRAItfcFEvD8dzVF/zM/hgR3nct oSbToGkneQM3aExateCNDWUfwwFp4nhDpBfHkGHXYh8ugiqEt8vrqH/91afTFekg Cx2Qd8SQCgeutASv9mxUaGOYEXKN33B5JlT2oKLsiQsp6FucaZurKbTy4WL1Qhpr UmFZLQZOMYaCOEmU7LNHi9YoMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXwWF/T cfGHV4brDtDeyM0BBHbdMB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6 TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZJ76ty2N8D4Tyuiq+oa/383dqAca31n+6+4izQFAYfpz0ClmA5xRP 9inn/8j3c7xXHzuOfJOtpZQ5OL636iFywdtMOfyKJ/hw9C9bM/mZpyoMWGA6vbdt IqUl3mrsv/tPZZ+wzubMIbXqN+wQYFExSbxetL8SdUEyTqAVXaFBXddUZYD/fr3e G9ozXrjQW+2bpcTRgBbyWktEiqVEDnPHIh/7MKZOqpgzbSgf6kF/IXo7GoB8hg4d gXehwpHMbdgv2ge4xf6J7+lZKDxOh1hg6RWx7qrwN5rh+U+pVMpoDpcNiu0Yn98s 0xPZPe/x1q4gBe6wE/t60YyM4XJVi741 -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:57 2025 by rpki-client