$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: aOMcawoV4CW4v1h9aEio4aL3Y/f/4KSgJZt+ZhiNJTM= Subject key identifier: AE:9A:F2:F1:78:B7:82:A7:42:CA:D4:25:48:09:E7:C1:7D:D4:8D:98 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 0415 Signing time: Wed 13 Aug 2025 00:56:47 +0000 Manifest this update: Wed 13 Aug 2025 00:56:46 +0000 Manifest next update: Wed 20 Aug 2025 00:56:46 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: xTuYik59sTx+L16YEAcfi/ee+hBl1Ae4q3r+IS4ICgE=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Aug 13 00:56:46 2025 GMT Not After : Aug 20 00:56:46 2025 GMT Subject: CN=689be2cf-fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:26:ec:60:b5:0e:61:4c:e3:45:e4:97:14: fc:32:52:dd:a8:eb:09:70:62:1d:26:65:f3:66:94: 71:94:74:d5:56:8b:26:ef:1b:db:42:a5:a5:94:47: 6d:26:c9:05:fb:d2:84:53:93:0c:08:69:70:c4:97: 9b:ac:96:f4:22:ae:77:7e:63:1f:c9:d8:4f:78:2d: df:2d:a5:b8:44:b4:47:35:be:49:3c:b8:aa:e8:ca: 38:5f:de:49:1e:5a:35:1d:fe:99:7f:d0:3f:56:e4: f6:8f:42:c6:c0:0c:8c:ff:d4:eb:3c:f0:ec:d0:41: 74:05:d8:02:6c:b4:b5:39:34:f5:02:97:a6:34:c4: 65:b2:9a:6e:fa:89:e0:2a:93:20:59:c9:9e:d5:09: 1e:0c:44:a7:78:ea:85:58:21:fa:20:4c:b8:b4:06: 61:44:d7:6d:41:5d:f8:bf:64:61:9b:85:03:db:6d: bb:b2:39:6a:4b:99:eb:56:6c:ae:33:b3:14:7b:9c: ac:c7:02:04:85:d5:da:f7:b8:b8:66:80:81:d1:9f: 78:67:10:b4:00:61:53:7e:64:23:28:d3:35:77:ec: 99:75:6e:5f:f9:61:8d:68:51:99:22:4b:95:14:0a: bf:59:05:9b:b2:e7:cb:74:02:c8:f7:52:8a:86:7a: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:F2:F1:78:B7:82:A7:42:CA:D4:25:48:09:E7:C1:7D:D4:8D:98 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:12:2a:10:39:2f:d5:84:2d:47:9d:37:84:9c:60:1a:a6:47: 7f:89:5c:f4:54:f7:4a:78:83:cb:78:ba:37:21:5f:c4:0c:e7: d7:00:44:b1:03:83:ae:3c:ce:f0:5f:e5:9c:b5:82:79:06:65: cd:bd:6b:71:73:9e:4e:8a:35:71:80:1f:6e:95:06:b0:0f:a3: 94:4c:56:80:30:47:20:ed:0a:e3:55:99:0e:86:bc:7a:63:d5: 38:28:cc:bb:81:90:20:a8:90:ed:7c:48:db:8c:96:5e:21:0d: 1a:a2:94:92:0a:3f:e9:3f:ac:eb:21:29:10:7a:04:ec:57:69: 63:5a:f0:cf:a6:22:d1:30:99:e4:00:e0:40:fe:58:c0:ae:cf: 7d:f9:5a:9a:8b:97:e7:65:4b:3e:98:5b:f4:18:a3:c5:a0:00: a2:64:45:be:e8:9e:2c:f1:a8:e0:24:5c:46:d9:38:47:5b:60: a7:03:3c:3f:75:7e:e7:e1:02:e5:57:91:c4:d4:14:76:e6:3f: b2:6d:04:88:47:07:cb:74:77:de:bf:c5:ea:87:c9:18:74:f0: 56:2c:11:bd:32:54:6a:ea:a3:d4:1e:47:2c:6e:50:2a:c3:5c: 46:8c:39:47:e2:3b:00:60:07:3e:84:5e:d9:d8:75:5e:0b:28: c7:af:69:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwODEzMDA1NjQ2WhcNMjUwODIwMDA1NjQ2WjAYMRYwFAYD VQQDEw02ODliZTJjZi1mYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJYm7GC1DmFM40XklxT8MlLdqOsJcGIdJmXzZpRxlHTVVosm7xvbQqWllEdt JskF+9KEU5MMCGlwxJebrJb0Iq53fmMfydhPeC3fLaW4RLRHNb5JPLiq6Mo4X95J Hlo1Hf6Zf9A/VuT2j0LGwAyM/9TrPPDs0EF0BdgCbLS1OTT1ApemNMRlsppu+ong KpMgWcme1QkeDESneOqFWCH6IEy4tAZhRNdtQV34v2Rhm4UD2227sjlqS5nrVmyu M7MUe5ysxwIEhdXa97i4ZoCB0Z94ZxC0AGFTfmQjKNM1d+yZdW5f+WGNaFGZIkuV FAq/WQWbsufLdALI91KKhnrP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6a8vF4 t4KnQsrUJUgJ58F91I2YMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/EioQOS/VhC1HnTeEnGAapkd/iVz0VPdKeIPLeLo3IV/EDOfXAESx A4OuPM7wX+WctYJ5BmXNvWtxc55OijVxgB9ulQawD6OUTFaAMEcg7QrjVZkOhrx6 Y9U4KMy7gZAgqJDtfEjbjJZeIQ0aopSSCj/pP6zrISkQegTsV2ljWvDPpiLRMJnk AOBA/ljArs99+Vqai5fnZUs+mFv0GKPFoACiZEW+6J4s8ajgJFxG2ThHW2CnAzw/ dX7n4QLlV5HE1BR25j+ybQSIRwfLdHfev8Xqh8kYdPBWLBG9MlRq6qPUHkcsblAq w1xGjDlH4jsAYAc+hF7Z2HVeCyjHr2kP -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:47 2025 by rpki-client