$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: iei5zQkte++BQfT+SKof6lsj+6NcoBJ1JQpauDKA2rg= Subject key identifier: 13:4E:AF:21:CF:7A:1C:8C:F8:7E:72:B9:D0:55:28:B8:F5:28:22:C1 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: BC Signing time: Thu 19 Jun 2025 05:13:18 +0000 Manifest this update: Thu 19 Jun 2025 05:13:17 +0000 Manifest next update: Thu 26 Jun 2025 05:13:17 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: yHykc9wsnn+5MYJfMuijOwrC0M5xlwTVxiOpqp+bw3M=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: sflqoJJiQSUE3/D/FoYHXfA8MjGPanF4iuCvuWOV/9c=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Jun 19 05:13:17 2025 GMT Not After : Jun 26 05:13:17 2025 GMT Subject: CN=68539c6d-a437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:8c:3d:6d:b5:dd:77:0f:3e:33:0e:71:08: f1:8e:bd:96:7a:8d:3b:e0:36:82:c4:58:c8:4b:2a: 45:93:88:d0:67:84:09:9f:99:0f:8a:95:88:19:d3: 9e:22:a7:81:72:4c:cc:2c:d2:f1:f0:5d:6d:57:0c: 64:c0:88:06:23:25:e0:d8:f7:9c:41:77:f1:66:ae: 76:06:c9:d5:e2:96:94:42:36:a1:6b:52:fa:bf:42: f1:63:d4:8b:af:bd:56:57:47:79:f6:a4:fc:0d:40: f0:38:e0:cb:49:31:a7:21:90:2a:43:ac:9a:eb:c2: f9:a5:55:72:22:b7:97:5f:7b:6d:4c:da:ee:30:df: 6b:46:9f:20:c1:d5:62:e0:cd:62:c5:80:6f:05:e8: 97:67:2d:09:b2:95:3e:f4:c7:e9:d1:d9:98:59:a6: 24:e2:64:85:d5:75:a4:eb:4e:b6:21:83:f9:75:58: 19:4c:6e:1d:38:28:0e:dd:75:1d:99:7a:b5:3c:42: 2a:09:2e:3d:3b:bb:67:aa:40:fa:5c:ac:2d:f5:ae: 42:0d:7b:f5:40:5b:b7:4a:0c:f4:18:1a:2d:4f:4e: 11:f9:de:06:12:e3:b7:8c:b3:82:42:81:d3:91:76: fc:1f:62:af:7c:9e:60:04:b6:b1:8b:b4:dd:51:7c: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4E:AF:21:CF:7A:1C:8C:F8:7E:72:B9:D0:55:28:B8:F5:28:22:C1 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:88:b8:cd:91:c9:a2:c6:5d:73:11:fe:c9:04:54:78:7a: 9f:37:13:96:4c:db:7c:ba:ce:8f:54:b9:d5:08:cb:2f:7e:25: 67:c8:8e:b9:dc:c9:b8:a0:3e:e2:93:2a:7a:d3:b9:5d:93:c5: 35:dc:44:eb:c6:4c:5d:2e:9d:70:71:e4:a2:1d:ad:45:45:2d: ab:07:a2:37:ad:03:6b:2e:26:1d:9b:ec:72:7f:e0:b7:d5:b7: 78:f0:4d:5a:b0:27:e0:80:d6:56:de:b1:44:cb:c1:79:61:b4: ba:82:78:9b:c6:a4:67:cd:83:d6:4d:0d:b7:e5:63:27:60:89: 4c:29:d4:12:9c:27:b1:fa:ef:e7:31:50:fd:1c:58:d3:71:db: 46:1f:4f:84:21:09:db:1c:25:19:d7:ca:60:69:c5:27:0f:92: af:30:4c:8f:6e:d3:7a:b4:57:77:1d:cf:3e:be:a2:96:4a:9b: cb:1d:8e:71:5a:ab:4b:18:3a:2e:18:84:c7:19:d4:ee:ab:26: f6:36:46:88:1a:57:95:dc:f4:d6:07:32:61:41:05:31:da:ce: ac:0a:35:53:a7:ba:32:eb:94:95:94:c6:1d:0e:fc:ec:61:f9: e2:8d:11:65:43:88:97:0c:fb:5a:37:b5:32:48:8e:ab:53:d1: b3:f2:39:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwNjE5MDUxMzE3WhcNMjUwNjI2MDUxMzE3WjAYMRYwFAYD VQQDEw02ODUzOWM2ZC1hNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbCMPW213XcPPjMOcQjxjr2Weo074DaCxFjISypFk4jQZ4QJn5kPipWIGdOe IqeBckzMLNLx8F1tVwxkwIgGIyXg2PecQXfxZq52BsnV4paUQjaha1L6v0LxY9SL r71WV0d59qT8DUDwOODLSTGnIZAqQ6ya68L5pVVyIreXX3ttTNruMN9rRp8gwdVi 4M1ixYBvBeiXZy0JspU+9Mfp0dmYWaYk4mSF1XWk6062IYP5dVgZTG4dOCgO3XUd mXq1PEIqCS49O7tnqkD6XKwt9a5CDXv1QFu3Sgz0GBotT04R+d4GEuO3jLOCQoHT kXb8H2KvfJ5gBLaxi7TdUXzK8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNOryHP ehyM+H5yudBVKLj1KCLBMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3K4i4zZHJosZdcxH+yQRUeHqfNxOWTNt8us6PVLnVCMsvfiVnyI65 3Mm4oD7ikyp607ldk8U13ETrxkxdLp1wceSiHa1FRS2rB6I3rQNrLiYdm+xyf+C3 1bd48E1asCfggNZW3rFEy8F5YbS6gnibxqRnzYPWTQ235WMnYIlMKdQSnCex+u/n MVD9HFjTcdtGH0+EIQnbHCUZ18pgacUnD5KvMEyPbtN6tFd3Hc8+vqKWSpvLHY5x WqtLGDouGITHGdTuqyb2NkaIGleV3PTWBzJhQQUx2s6sCjVTp7oy65SVlMYdDvzs YfnijRFlQ4iXDPtaN7UySI6rU9Gz8jlW -----END CERTIFICATE-----Generated at Fri Jun 20 22:16:57 2025 by rpki-client