$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: UohJeh41JtErvVl3PJBJIylst32KplTydXMNT8al79Q= Subject key identifier: 4B:80:A6:69:82:4D:BC:52:41:67:99:7D:57:61:CB:C9:A1:7F:D1:BA Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 1758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 174F Signing time: Sun 10 Aug 2025 16:35:09 +0000 Manifest this update: Sun 10 Aug 2025 16:35:08 +0000 Manifest next update: Sun 17 Aug 2025 16:35:08 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: Ny2lnpsrZUnSDUQHQPbhO+nB3jZguEVQBhbUlPPrBEI=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5976 (0x1758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Aug 10 16:35:08 2025 GMT Not After : Aug 17 16:35:08 2025 GMT Subject: CN=6898ca3c-d2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:38:14:ff:f0:34:2b:b2:06:6c:19:87:3f: 9e:37:1f:bc:fd:e5:aa:e0:88:6b:26:58:75:16:16: 1d:fc:e2:58:ad:e5:a7:8b:b1:45:b2:9b:5f:a9:b9: 4b:20:4f:08:45:d5:65:3c:28:96:33:00:39:c0:a5: d6:cb:e4:24:f1:c2:c3:d9:a1:00:27:3d:47:c8:cc: e5:51:0c:22:6a:75:25:9d:83:1f:c0:a5:a4:88:8f: 7d:fc:ee:92:9e:37:fa:d8:03:ac:41:c1:04:51:a3: 47:7d:42:fb:ae:b1:40:2c:9e:75:02:f2:b7:7b:fb: 67:94:88:1b:44:31:f5:eb:c3:fa:96:d8:4c:e4:84: 5f:59:4f:c4:93:25:9e:19:ae:43:8c:64:08:11:c7: 77:bd:6f:03:74:54:02:3b:a8:9d:59:d6:c3:2c:8b: 9b:52:62:b7:e0:c3:d9:68:06:64:da:b1:81:48:c0: 14:cd:3f:d1:d1:e5:60:0a:cf:0b:90:32:64:0b:fe: 11:78:2c:2b:da:a4:21:80:9f:fa:a6:2e:81:c0:67: cc:a3:e2:35:02:5a:b8:f2:46:26:8e:fe:e5:5e:2b: 34:f9:ba:30:d5:65:a5:30:4b:db:94:76:73:5e:7c: 8c:d8:11:f3:77:ec:94:44:59:e1:c3:ff:04:64:38: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:80:A6:69:82:4D:BC:52:41:67:99:7D:57:61:CB:C9:A1:7F:D1:BA X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8e:04:27:76:0e:74:b0:1e:0d:d5:0a:33:4b:32:6f:4f:bd: 76:3b:5b:28:4a:1e:b8:01:96:57:7c:eb:9e:0c:38:dd:a4:6c: 13:83:d4:33:40:94:4d:70:26:bc:e8:66:ec:d5:bf:74:a1:72: 30:53:41:2e:b3:cf:b6:1d:d1:b4:4f:a4:2c:32:da:d2:6b:ea: 60:81:1d:bd:4a:24:5f:8c:2f:38:43:5a:ff:5e:18:b7:c4:d3: 3c:6e:cc:04:e2:df:48:5c:bf:06:4d:96:97:a8:d4:a0:28:28: 60:a9:33:8e:db:03:ae:03:28:33:37:0c:9d:42:92:55:51:b5: 6a:9c:e2:ee:19:b2:26:a2:68:66:21:7b:40:45:42:6b:9d:3c: 99:84:82:e3:6a:a3:c3:cc:1b:8f:cb:6b:58:62:82:61:a6:a4: ac:d8:bd:f2:98:89:dd:e3:a1:b6:58:e4:06:a2:f9:30:c5:b9: 8f:14:9e:ed:7c:cb:c8:98:b4:38:b5:76:26:ba:a8:7a:f4:20: 34:a0:28:9e:a9:5d:93:c1:86:6e:a7:c7:72:05:ef:02:7d:23: 56:b7:19:51:7a:7c:78:a7:2e:c6:7b:48:b1:4d:de:a3:fa:24: 62:49:ab:8e:01:e5:cc:3b:6f:06:84:86:de:56:c5:39:19:1e: 7b:53:c5:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjUwODEwMTYzNTA4WhcNMjUwODE3MTYzNTA4WjAYMRYwFAYD VQQDEw02ODk4Y2EzYy1kMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn944FP/wNCuyBmwZhz+eNx+8/eWq4IhrJlh1FhYd/OJYreWni7FFsptfqblL IE8IRdVlPCiWMwA5wKXWy+Qk8cLD2aEAJz1HyMzlUQwianUlnYMfwKWkiI99/O6S njf62AOsQcEEUaNHfUL7rrFALJ51AvK3e/tnlIgbRDH168P6lthM5IRfWU/EkyWe Ga5DjGQIEcd3vW8DdFQCO6idWdbDLIubUmK34MPZaAZk2rGBSMAUzT/R0eVgCs8L kDJkC/4ReCwr2qQhgJ/6pi6BwGfMo+I1Alq48kYmjv7lXis0+bow1WWlMEvblHZz XnyM2BHzd+yURFnhw/8EZDjdtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuApmmC TbxSQWeZfVdhy8mhf9G6MB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcjgQndg50sB4N1QozSzJvT712O1soSh64AZZXfOueDDjdpGwTg9Qz QJRNcCa86Gbs1b90oXIwU0Eus8+2HdG0T6QsMtrSa+pggR29SiRfjC84Q1r/Xhi3 xNM8bswE4t9IXL8GTZaXqNSgKChgqTOO2wOuAygzNwydQpJVUbVqnOLuGbImomhm IXtARUJrnTyZhILjaqPDzBuPy2tYYoJhpqSs2L3ymInd46G2WOQGovkwxbmPFJ7t fMvImLQ4tXYmuqh69CA0oCieqV2TwYZup8dyBe8CfSNWtxlRenx4py7Ge0ixTd6j +iRiSauOAeXMO28GhIbeVsU5GR57U8Xo -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:31 2025 by rpki-client