$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json) Hash identifier: qd5DRQGq0Lwe9X9+pRfRUjQiTAVd9MfWXNtPKOajqA4= Subject key identifier: DF:20:5C:6B:FA:AE:7E:96:AD:40:F8:8F:B6:A9:33:6F:4A:CE:2B:AB Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 10B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft Manifest number: 109B Signing time: Fri 08 Aug 2025 17:31:26 +0000 Manifest this update: Fri 08 Aug 2025 17:31:25 +0000 Manifest next update: Fri 15 Aug 2025 17:31:25 +0000 Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: y9LX+VVGTjjoXTOAIxDo145+Yj4RtxzrGmWoHTtEjKw=) 2: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=) 3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=) 4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4276 (0x10b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Aug 8 17:31:25 2025 GMT Not After : Aug 15 17:31:25 2025 GMT Subject: CN=6896346d-bf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:3b:69:4d:a2:d1:10:19:48:ba:2e:6b:f9: 81:b4:9b:f9:c6:9f:70:e7:c2:fa:36:c7:a1:48:53: b4:d4:89:5b:f3:90:14:45:b4:6d:d5:fa:86:4a:10: ad:f6:44:c4:65:19:5c:b7:8b:3a:fe:ca:1b:cd:f0: f5:fa:fc:8d:28:f6:76:be:92:27:7b:16:d3:9d:a0: 47:27:1b:7b:47:cc:47:f4:94:ea:8d:1f:6f:18:5e: 63:f9:be:2b:ff:43:e0:60:59:4c:78:bb:d3:6f:49: f6:03:6c:ac:dd:7c:68:18:38:1a:6b:71:38:fb:10: e2:96:03:85:66:42:89:a7:59:cc:30:02:69:81:98: bf:c1:88:22:4b:ef:49:f9:ba:1a:36:a2:42:56:9a: 45:33:3f:db:8a:d2:05:ed:52:23:07:55:a4:e7:fc: 26:74:14:1d:11:86:66:ad:ad:5d:af:20:ad:1f:33: df:22:ae:23:1c:bd:8c:60:23:be:38:0d:88:07:72: 16:22:ab:0d:7e:d0:83:23:ac:e2:95:76:78:41:d8: b2:35:80:19:37:74:bd:53:34:9a:90:fa:79:3d:a9: 9a:ce:be:3f:c8:6b:f1:0a:49:a1:ec:3a:f0:2b:a2: 6e:bf:59:3d:aa:dc:14:2e:98:02:14:cb:f9:13:8a: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:20:5C:6B:FA:AE:7E:96:AD:40:F8:8F:B6:A9:33:6F:4A:CE:2B:AB X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:44:a6:fe:a3:d7:a2:7b:b7:66:1c:be:fd:4e:61:39:f5:e4: 6d:d7:9b:26:f1:87:63:ae:88:43:12:15:d6:f1:93:b6:a4:2a: e8:a7:af:28:63:8a:bf:9e:d4:b6:0f:34:ac:a7:4a:e6:95:32: 4c:fd:66:fa:41:2d:85:57:8d:89:c2:61:77:46:7b:0c:a9:ad: 3b:c1:a4:c7:7f:8c:08:c0:1e:24:a2:a5:93:6e:25:36:cb:c6: 41:a3:38:5a:b6:b6:64:b8:d8:27:1a:79:06:d6:59:fd:c2:ef: 8e:df:6c:96:02:5c:93:42:8c:f4:2d:72:e3:a0:ba:5d:7b:7e: d2:df:ba:65:b0:9a:24:f9:16:2e:43:a2:9a:c5:3b:02:07:74: 45:72:7d:18:87:0f:6f:aa:d5:0f:6f:1f:d4:cf:b8:d2:c5:c9: fd:fd:11:52:f4:73:ba:d2:83:f8:9e:18:72:6a:3b:20:09:d3: b5:6d:aa:2b:9f:25:4c:ab:4b:9f:9d:d9:3c:5f:0e:6e:0f:db: 5e:f7:a0:b5:dd:e6:b9:72:11:23:cb:56:9a:04:44:03:fa:86: ec:a6:71:9e:89:1d:85:f4:d3:69:19:8f:f5:48:d8:5b:b8:3d: 50:d0:8e:b9:a6:b3:42:7a:57:4b:d3:de:3b:21:74:36:95:fb: fd:7e:4f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUwODA4MTczMTI1WhcNMjUwODE1MTczMTI1WjAYMRYwFAYD VQQDEw02ODk2MzQ2ZC1iZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8g7aU2i0RAZSLoua/mBtJv5xp9w58L6NsehSFO01Ilb85AURbRt1fqGShCt 9kTEZRlct4s6/sobzfD1+vyNKPZ2vpInexbTnaBHJxt7R8xH9JTqjR9vGF5j+b4r /0PgYFlMeLvTb0n2A2ys3XxoGDgaa3E4+xDilgOFZkKJp1nMMAJpgZi/wYgiS+9J +boaNqJCVppFMz/bitIF7VIjB1Wk5/wmdBQdEYZmra1dryCtHzPfIq4jHL2MYCO+ OA2IB3IWIqsNftCDI6zilXZ4QdiyNYAZN3S9UzSakPp5Pamazr4/yGvxCkmh7Drw K6Juv1k9qtwULpgCFMv5E4ol9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8gXGv6 rn6WrUD4j7apM29KziurMB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNFOS82Q0JCODRGNDMxRjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJO MHVkZ05MN0wwMnFJSERlSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoRKb+o9eie7dmHL79TmE59eRt15sm8YdjrohDEhXW8ZO2pCrop68o Y4q/ntS2DzSsp0rmlTJM/Wb6QS2FV42JwmF3RnsMqa07waTHf4wIwB4koqWTbiU2 y8ZBozhatrZkuNgnGnkG1ln9wu+O32yWAlyTQoz0LXLjoLpde37S37plsJok+RYu Q6KaxTsCB3RFcn0Yhw9vqtUPbx/Uz7jSxcn9/RFS9HO60oP4nhhyajsgCdO1baor nyVMq0ufndk8Xw5uD9te96C13ea5chEjy1aaBEQD+obspnGeiR2F9NNpGY/1SNhb uD1Q0I65prNCeldL0947IXQ2lfv9fk+g -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:28 2025 by rpki-client