$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: ZrqZearcAVi8QFWSh5x1dwqtTaTGZy2d4eiX6FwqyYU= Subject key identifier: 80:74:B0:52:C5:82:34:06:24:0A:E6:45:48:4F:13:E6:B9:5D:28:A4 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 07B0 Signing time: Sun 10 Aug 2025 21:40:33 +0000 Manifest this update: Sun 10 Aug 2025 21:40:33 +0000 Manifest next update: Sun 17 Aug 2025 21:40:33 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: xraNsZKy2ScJN27Vy84GJjaGcmTsOuTvAxmBmu+vuoc=) 2: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (hash: +ewFxwgws96qZb42iktranHuo6xk0cnwygWmXyUhbEc=) 3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) 4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: zJAHsR5vMmBId4rgQblkmv5dzmrkfUHqapxlAFUK3IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Aug 10 21:40:33 2025 GMT Not After : Aug 17 21:40:33 2025 GMT Subject: CN=689911d1-a307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:f9:10:5e:94:38:72:73:bb:db:12:73:a9: 87:d9:c9:66:ed:94:e7:c9:80:c9:69:f9:78:3d:cc: 28:40:6b:7a:a6:df:5f:0a:b4:b1:e0:b4:18:39:ac: 1e:3e:c7:bf:63:c7:03:0b:2a:cf:f8:d4:72:6a:47: da:34:1d:7a:72:5c:2b:7a:12:d6:d6:91:28:62:b3: 24:53:c9:01:42:73:d3:bc:ad:e0:48:1d:d8:9e:a9: 92:c0:84:17:c2:68:fb:58:9b:cf:e1:07:24:42:88: 32:cb:b3:53:a8:ed:04:32:5c:d5:22:e5:ee:67:c1: ae:d7:68:36:ea:c2:15:82:7b:6e:7d:6c:e9:10:b6: 8e:75:e9:16:6f:ca:42:dc:cd:fd:6b:2f:4f:60:95: ef:a8:92:b9:68:4e:6b:52:89:d4:24:c8:d3:8b:95: df:c5:70:bd:dd:8b:8d:40:ed:1d:ac:22:00:6e:33: 9c:c1:e7:34:c5:2d:fb:ff:66:56:78:f2:4f:da:f4: d5:f4:97:46:2b:46:85:b4:96:57:56:b9:15:43:db: 2a:a4:44:9f:6c:07:58:4f:ed:7d:73:13:de:c0:20: d9:b5:3b:dc:d7:ee:97:a3:c3:84:d0:64:ee:cf:44: f5:d1:b8:cf:20:ec:ba:da:62:b3:90:4b:c9:d8:83: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:74:B0:52:C5:82:34:06:24:0A:E6:45:48:4F:13:E6:B9:5D:28:A4 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:aa:9f:3d:14:c8:22:2b:36:ee:b4:98:ba:1b:3e:3b:a8:fa: 4d:6e:41:57:ee:1b:e3:79:c3:60:f8:9f:02:7d:e6:03:e5:b0: 13:8c:81:52:1a:14:15:71:b1:b3:28:36:f2:2d:d8:9c:80:82: e5:b3:00:48:61:01:b7:22:12:9c:f1:2e:70:ba:27:77:d4:96: 67:a4:bd:bd:2c:a9:2f:48:c2:29:22:2d:d9:5b:35:52:bc:d0: 61:f3:ff:5c:14:12:8a:85:38:33:0a:bf:6f:70:a8:14:1e:03: ae:cb:6d:6f:c9:63:81:0b:38:6b:3b:c2:38:33:87:24:2f:74: 45:11:02:69:4c:83:9f:ed:dd:6c:3c:0e:bc:42:ea:31:7b:08: ae:49:04:f5:88:5c:cb:8b:dc:54:7f:75:95:bf:5c:ce:5c:dd: 44:40:7e:70:96:42:4e:9e:a1:ed:fa:4a:b9:9f:5a:09:e5:07: 3e:34:44:d0:28:09:75:cc:96:a9:02:ef:08:33:d3:14:84:0e: 37:71:fb:69:25:6f:2e:78:bc:de:64:c8:fa:5a:36:e8:77:44: 87:50:c7:de:df:a2:ed:b0:b6:14:bb:bc:bb:a3:62:e0:69:71: 5b:b8:82:f1:81:a8:4a:f2:ff:3a:08:6c:05:4e:ef:26:12:23: 4c:61:2c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwODEwMjE0MDMzWhcNMjUwODE3MjE0MDMzWjAYMRYwFAYD VQQDEw02ODk5MTFkMS1hMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4H5EF6UOHJzu9sSc6mH2clm7ZTnyYDJafl4PcwoQGt6pt9fCrSx4LQYOawe Pse/Y8cDCyrP+NRyakfaNB16clwrehLW1pEoYrMkU8kBQnPTvK3gSB3YnqmSwIQX wmj7WJvP4QckQogyy7NTqO0EMlzVIuXuZ8Gu12g26sIVgntufWzpELaOdekWb8pC 3M39ay9PYJXvqJK5aE5rUonUJMjTi5XfxXC93YuNQO0drCIAbjOcwec0xS37/2ZW ePJP2vTV9JdGK0aFtJZXVrkVQ9sqpESfbAdYT+19cxPewCDZtTvc1+6Xo8OE0GTu z0T10bjPIOy62mKzkEvJ2IMdxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB0sFLF gjQGJArmRUhPE+a5XSikMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTqp89FMgiKzbutJi6Gz47qPpNbkFX7hvjecNg+J8CfeYD5bATjIFS GhQVcbGzKDbyLdicgILlswBIYQG3IhKc8S5wuid31JZnpL29LKkvSMIpIi3ZWzVS vNBh8/9cFBKKhTgzCr9vcKgUHgOuy21vyWOBCzhrO8I4M4ckL3RFEQJpTIOf7d1s PA68QuoxewiuSQT1iFzLi9xUf3WVv1zOXN1EQH5wlkJOnqHt+kq5n1oJ5Qc+NETQ KAl1zJapAu8IM9MUhA43cftpJW8ueLzeZMj6Wjbod0SHUMfe36LtsLYUu7y7o2Lg aXFbuILxgahK8v86CGwFTu8mEiNMYSxm -----END CERTIFICATE-----Generated at Mon Aug 11 06:22:16 2025 by rpki-client