$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: iMoR1Fi2tRVHs9vnJPSceBvWgwBghTLPJ0HDZHm6le4= Subject key identifier: 43:9B:11:18:C5:57:AC:0A:5B:A3:B1:F4:F2:B1:92:2B:D3:49:B3:C7 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 03F6 Signing time: Fri 13 Jun 2025 00:05:07 +0000 Manifest this update: Fri 13 Jun 2025 00:05:06 +0000 Manifest next update: Fri 20 Jun 2025 00:05:06 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: RbPb1tAM6PNNfN8zEHBjvTWKSPWQcX2pq0jqt+hfalg=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Jun 13 00:05:06 2025 GMT Not After : Jun 20 00:05:06 2025 GMT Subject: CN=684b6b32-0e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:91:e2:ac:6e:d8:21:f8:a2:15:ff:e8:b6: a5:fa:b7:83:18:17:e0:9b:bf:14:0a:3c:73:3a:4f: 17:7c:78:59:28:08:81:9b:3d:4f:b1:46:2c:fe:5b: da:4f:b1:b2:8e:75:4f:7b:a8:7b:4a:88:07:ab:f0: 91:c1:f4:3d:07:cd:af:cd:4d:89:d7:03:b9:bd:b0: 1e:f2:e3:44:da:bc:c4:fe:0f:b6:6e:4b:95:b2:92: 3e:6e:f8:16:ab:d8:de:8d:d3:c2:00:e2:03:99:c8: a1:6e:34:6f:45:74:ee:ba:64:82:07:d1:f8:af:7e: 42:eb:fe:92:87:8b:b7:8d:f9:51:79:ff:7f:b1:aa: 13:b1:92:56:5b:52:0f:ab:7a:b0:c0:93:5f:d6:ac: d7:54:40:9f:f6:d2:5f:02:5b:44:c8:ca:75:04:6e: 3d:06:ce:28:93:03:5b:6a:d3:51:af:1d:f8:ef:81: 79:d6:33:43:de:3a:e0:13:35:05:dd:11:92:fc:35: 3d:58:fe:ad:13:99:cc:72:a3:0f:aa:33:eb:61:24: ef:98:43:2d:91:f2:7b:e7:db:bc:6b:23:07:d0:6d: 82:19:2c:5e:d0:27:32:cc:55:b1:84:2d:d2:90:9e: a3:8e:2b:7f:2f:d8:92:e2:0a:f2:3d:28:38:3f:82: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9B:11:18:C5:57:AC:0A:5B:A3:B1:F4:F2:B1:92:2B:D3:49:B3:C7 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0b:55:0f:fc:ce:c9:d7:f6:9d:7c:98:3b:c1:89:4a:b0:35: 16:db:ec:31:f4:ae:4a:30:2b:1f:b7:0b:60:2c:a6:27:58:12: fa:2e:39:e8:31:b8:39:a4:94:b1:99:3d:44:69:88:27:71:08: 9b:41:ad:dc:f5:98:9f:6b:17:4b:59:53:1d:96:84:9c:20:44: 1c:cd:f2:50:a5:f1:ec:d0:ec:82:6b:99:b2:5c:a1:74:41:4e: f6:8d:79:90:af:5c:36:85:b7:aa:3c:3c:a5:57:f8:18:64:5c: f7:49:2f:10:75:29:a9:84:89:07:bb:1a:55:1d:17:25:4b:f0: ff:29:b9:5f:74:f3:53:cc:49:fa:6d:c5:d4:79:82:9d:00:84: f2:5d:b7:f9:20:30:7a:b5:9b:ae:b3:f1:0e:0c:84:cb:8b:cb: 32:2f:ba:39:7b:5a:18:b8:4c:01:ad:1d:3d:ce:ce:28:87:f4: 4e:8b:18:67:ec:f0:a9:2e:a6:19:e7:67:66:7d:8c:6c:fe:dd: ea:05:80:3d:75:56:b6:c1:52:4b:c4:ef:c6:94:dc:ff:0c:4a: bc:19:22:35:a3:21:25:24:79:2a:0a:1d:83:ec:e7:90:d6:55: ad:74:f9:59:43:65:90:74:10:2b:0b:f7:dd:8e:88:55:d8:02: 2d:08:a3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwNjEzMDAwNTA2WhcNMjUwNjIwMDAwNTA2WjAYMRYwFAYD VQQDEw02ODRiNmIzMi0wZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2WR4qxu2CH4ohX/6Lal+reDGBfgm78UCjxzOk8XfHhZKAiBmz1PsUYs/lva T7GyjnVPe6h7SogHq/CRwfQ9B82vzU2J1wO5vbAe8uNE2rzE/g+2bkuVspI+bvgW q9jejdPCAOIDmcihbjRvRXTuumSCB9H4r35C6/6Sh4u3jflRef9/saoTsZJWW1IP q3qwwJNf1qzXVECf9tJfAltEyMp1BG49Bs4okwNbatNRrx3474F51jND3jrgEzUF 3RGS/DU9WP6tE5nMcqMPqjPrYSTvmEMtkfJ759u8ayMH0G2CGSxe0CcyzFWxhC3S kJ6jjit/L9iS4gryPSg4P4KjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEObERjF V6wKW6Ox9PKxkivTSbPHMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjC1UP/M7J1/adfJg7wYlKsDUW2+wx9K5KMCsftwtgLKYnWBL6Ljno Mbg5pJSxmT1EaYgncQibQa3c9ZifaxdLWVMdloScIEQczfJQpfHs0OyCa5myXKF0 QU72jXmQr1w2hbeqPDylV/gYZFz3SS8QdSmphIkHuxpVHRclS/D/KblfdPNTzEn6 bcXUeYKdAITyXbf5IDB6tZuus/EODITLi8syL7o5e1oYuEwBrR09zs4oh/ROixhn 7PCpLqYZ52dmfYxs/t3qBYA9dVa2wVJLxO/GlNz/DEq8GSI1oyElJHkqCh2D7OeQ 1lWtdPlZQ2WQdBArC/fdjohV2AItCKNY -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:43 2025 by rpki-client