$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: BNQGtgCnrbIK4Ga/Dik2tkBnniazA4C4jF2+erMvNIo= Subject key identifier: EB:F0:45:C7:B1:B8:5D:0B:16:93:26:64:69:98:09:38:F6:C3:8F:D6 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: D8 Signing time: Sat 09 Aug 2025 05:58:20 +0000 Manifest this update: Sat 09 Aug 2025 05:58:20 +0000 Manifest next update: Sat 16 Aug 2025 05:58:20 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: HxAlHivzd1DCO3UCPEIhSHzMQJgRk3TBWCqtv1CqBP8=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Aug 9 05:58:20 2025 GMT Not After : Aug 16 05:58:20 2025 GMT Subject: CN=6896e37c-7396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:c9:51:c6:f1:23:4d:57:d0:b1:7f:44:a6: a3:0f:e3:b6:a4:29:ac:47:ab:9e:67:c2:d9:64:f8: 93:f4:f9:cc:f1:ba:5b:ae:ea:27:ec:38:bf:cd:4c: a7:d9:d8:e8:31:29:21:d6:0e:18:c3:d5:38:cc:b3: 9a:2d:a3:2c:98:1d:f3:d8:93:b7:8c:03:d8:42:5f: be:29:32:b5:e4:6b:13:5a:57:1f:63:ca:67:b3:b8: ec:ec:83:d2:ff:8e:42:b2:44:d6:62:c1:0d:ae:89: 4c:55:c5:4d:e0:a8:b6:64:24:0d:37:7f:0a:dc:e6: 7d:39:8d:e2:b5:6a:8d:dd:8f:42:da:30:26:e5:29: ed:f1:ea:09:3d:5b:b0:98:8a:e5:a6:8b:f9:87:80: 6f:78:c1:23:a2:be:e1:bb:6e:98:d5:5d:f2:68:ab: 02:40:12:ae:64:44:aa:0b:96:d9:29:a3:b8:bd:5b: a3:48:62:22:a8:66:d3:fd:f7:b7:d3:30:77:3a:44: 6a:a2:0d:42:82:14:cd:8f:f5:91:48:8b:44:3b:67: 14:2f:b3:09:d0:c2:70:b0:fa:a5:96:0f:04:39:d1: 6e:56:86:a2:4b:6e:85:f1:d7:50:c0:b7:56:aa:bd: 4e:5f:f9:35:31:b2:dd:28:49:0e:10:44:f8:fa:d1: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F0:45:C7:B1:B8:5D:0B:16:93:26:64:69:98:09:38:F6:C3:8F:D6 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b8:b4:19:b5:60:0e:fe:7e:06:9f:2c:37:35:f3:8e:98:e4: 45:fd:40:9d:1a:a4:21:da:8d:0b:61:2d:26:34:e5:22:9b:82: d0:fa:cc:ed:23:cc:b3:f5:2e:64:53:9d:fe:e0:00:a9:8e:c7: 1f:9f:14:06:99:90:67:02:10:50:42:5a:57:5f:5f:e8:72:16: 09:15:23:fd:97:e1:ac:d3:f5:d5:53:7f:b5:a3:a8:35:36:3b: b0:75:ee:88:b4:b3:a6:0c:9f:da:69:e8:a1:c3:b6:98:cc:a5: 72:b0:91:46:45:bb:35:10:b5:10:a8:7b:59:f7:53:b5:6e:c8: 7e:54:7a:11:74:8d:67:d5:e1:22:41:a5:bb:43:59:13:1d:14: ae:1c:e1:c8:2c:8c:69:58:88:ae:09:ad:6c:a7:9b:ee:ef:0c: 7a:25:1e:9a:68:08:d8:ca:d5:f3:33:4b:b2:1d:bf:29:81:e5: 96:73:88:ac:d7:b8:ab:6c:af:7e:31:db:cf:81:77:ea:3a:7a: e6:7d:05:df:d4:93:6d:4b:cb:77:d3:db:49:78:e4:75:24:cb: 20:51:55:ac:53:6f:5f:9a:1c:8b:6c:18:8f:b1:b4:2f:e7:f3: 26:32:5b:d8:7c:7a:ad:16:8d:98:a8:b5:69:c3:b4:f2:29:5b: b1:7b:64:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwODA5MDU1ODIwWhcNMjUwODE2MDU1ODIwWjAYMRYwFAYD VQQDEw02ODk2ZTM3Yy03Mzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNXJUcbxI01X0LF/RKajD+O2pCmsR6ueZ8LZZPiT9PnM8bpbruon7Di/zUyn 2djoMSkh1g4Yw9U4zLOaLaMsmB3z2JO3jAPYQl++KTK15GsTWlcfY8pns7js7IPS /45CskTWYsENrolMVcVN4Ki2ZCQNN38K3OZ9OY3itWqN3Y9C2jAm5Snt8eoJPVuw mIrlpov5h4BveMEjor7hu26Y1V3yaKsCQBKuZESqC5bZKaO4vVujSGIiqGbT/fe3 0zB3OkRqog1CghTNj/WRSItEO2cUL7MJ0MJwsPqllg8EOdFuVoaiS26F8ddQwLdW qr1OX/k1MbLdKEkOEET4+tE2zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvwRcex uF0LFpMmZGmYCTj2w4/WMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2uLQZtWAO/n4Gnyw3NfOOmORF/UCdGqQh2o0LYS0mNOUim4LQ+szt I8yz9S5kU53+4ACpjscfnxQGmZBnAhBQQlpXX1/ochYJFSP9l+Gs0/XVU3+1o6g1 Njuwde6ItLOmDJ/aaeihw7aYzKVysJFGRbs1ELUQqHtZ91O1bsh+VHoRdI1n1eEi QaW7Q1kTHRSuHOHILIxpWIiuCa1sp5vu7wx6JR6aaAjYytXzM0uyHb8pgeWWc4is 17irbK9+MdvPgXfqOnrmfQXf1JNtS8t309tJeOR1JMsgUVWsU29fmhyLbBiPsbQv 5/MmMlvYfHqtFo2YqLVpw7TyKVuxe2Sq -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:04 2025 by rpki-client