$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: dY+R+ysanNeOQEODFJPaU1H2CVEkGMEQZIZz6/5kfzs= Subject key identifier: A3:BF:C0:43:4F:DF:D4:84:A4:4E:FF:78:16:FC:90:6F:B9:51:CA:7B Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 0182 Signing time: Sat 09 Aug 2025 04:00:46 +0000 Manifest this update: Sat 09 Aug 2025 04:00:46 +0000 Manifest next update: Sat 16 Aug 2025 04:00:46 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: 4FTNrgcAt5yBoetYKoopmzCQRPtxHSHn5uUcG27jcLg=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: 1i3jxewXcc2DZR9rHs9xsLpB1uq+KSefHPQwMlW+krU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Aug 9 04:00:46 2025 GMT Not After : Aug 16 04:00:46 2025 GMT Subject: CN=6896c7ee-5d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:e6:23:ef:a4:ef:93:72:99:80:0e:53:cf: 04:16:27:f6:86:32:90:c3:07:4a:87:c2:2a:54:c3: cf:ae:a7:01:f8:a4:95:51:8a:98:5d:df:22:92:40: 11:fb:0e:52:3b:44:d2:00:97:80:ed:4d:67:65:61: 0d:0e:aa:66:ed:92:e4:8f:50:06:a9:25:9a:33:24: 4e:43:20:59:3b:74:67:0d:81:e5:1f:bd:e3:bf:75: 58:52:fb:02:bb:c7:bf:5a:5e:12:c5:5a:92:56:a4: 68:74:f4:b7:c6:01:9a:63:80:22:cb:19:41:32:8e: 73:49:71:9d:7b:9b:53:34:ed:4f:4b:29:68:24:be: 33:c1:e3:fa:e0:d2:89:5c:73:e0:b2:65:45:78:d8: 14:99:b6:03:7e:85:61:49:b9:aa:82:ad:fa:71:36: 82:b5:aa:3c:49:b9:5f:5e:ba:5d:f6:e0:d3:1e:f7: bd:d2:91:70:9c:1e:ac:3d:de:b8:0f:af:84:05:d9: ad:c1:ec:f9:7a:77:7f:a9:b5:2e:66:2b:4f:ec:3e: dc:01:9e:e8:f8:f9:09:af:28:63:81:fd:0e:89:bb: 2b:38:90:dc:a3:e1:1e:0d:4b:d6:de:c1:0c:0f:59: 12:00:d1:c8:36:70:df:e6:79:e8:57:0f:da:ca:1d: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BF:C0:43:4F:DF:D4:84:A4:4E:FF:78:16:FC:90:6F:B9:51:CA:7B X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:9f:d0:40:5a:39:c1:d4:30:77:11:01:08:c2:9b:a1:89: df:64:23:43:8b:5e:83:a8:aa:79:30:c7:23:54:fe:97:93:c2: 44:e8:a9:ba:6b:b8:9e:6b:2a:50:75:f0:ce:73:b4:ee:ad:1e: 32:f3:11:ea:59:5c:19:98:c0:fa:4a:31:b9:45:19:49:c5:b5: da:d8:61:ce:c5:5d:b2:ce:8f:2d:ea:59:3c:31:b6:a3:5b:86: 19:bd:69:62:d9:c9:24:21:3f:d5:64:9a:de:b8:3a:0a:3e:72: ea:12:a7:4f:2c:56:1b:3a:58:02:6c:f1:1e:10:4a:ba:c3:5f: f2:6f:f2:55:80:31:38:1c:2b:aa:26:ab:ff:d9:a4:52:c2:cf: 75:83:c5:35:bc:43:c4:81:81:11:96:f1:f0:ca:62:5d:88:75: d5:01:67:8e:40:bb:d5:a9:83:65:64:9f:bd:14:d1:9a:4c:90: b3:40:d7:21:f8:88:e3:6d:72:09:fa:83:e5:35:7b:29:99:d5: 75:48:c5:ca:f0:7f:6c:42:a6:0d:92:44:03:70:64:8c:fd:10: bf:2b:7a:de:56:73:a4:71:13:51:9a:03:26:fd:70:4a:f3:7b: e3:d5:cb:2a:86:a2:da:ee:3c:d8:00:8d:06:1a:54:50:89:aa: c2:b0:c7:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUwODA5MDQwMDQ2WhcNMjUwODE2MDQwMDQ2WjAYMRYwFAYD VQQDEw02ODk2YzdlZS01ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4/mI++k75NymYAOU88EFif2hjKQwwdKh8IqVMPPrqcB+KSVUYqYXd8ikkAR +w5SO0TSAJeA7U1nZWENDqpm7ZLkj1AGqSWaMyROQyBZO3RnDYHlH73jv3VYUvsC u8e/Wl4SxVqSVqRodPS3xgGaY4AiyxlBMo5zSXGde5tTNO1PSyloJL4zweP64NKJ XHPgsmVFeNgUmbYDfoVhSbmqgq36cTaCtao8SblfXrpd9uDTHve90pFwnB6sPd64 D6+EBdmtwez5end/qbUuZitP7D7cAZ7o+PkJryhjgf0OibsrOJDco+EeDUvW3sEM D1kSANHINnDf5nnoVw/ayh3TlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO/wENP 39SEpE7/eBb8kG+5Ucp7MB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxkZ/QQFo5wdQwdxEBCMKboYnfZCNDi16DqKp5MMcjVP6Xk8JE6Km6 a7ieaypQdfDOc7TurR4y8xHqWVwZmMD6SjG5RRlJxbXa2GHOxV2yzo8t6lk8Mbaj W4YZvWli2ckkIT/VZJreuDoKPnLqEqdPLFYbOlgCbPEeEEq6w1/yb/JVgDE4HCuq Jqv/2aRSws91g8U1vEPEgYERlvHwymJdiHXVAWeOQLvVqYNlZJ+9FNGaTJCzQNch +IjjbXIJ+oPlNXspmdV1SMXK8H9sQqYNkkQDcGSM/RC/K3reVnOkcRNRmgMm/XBK 83vj1csqhqLa7jzYAI0GGlRQiarCsMc1 -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:47 2025 by rpki-client