$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: dbSVh3kZH5z3ceu3j3cpVTsJRQgvGB6PtLH+6d6SHUE= Subject key identifier: 42:93:3B:E5:70:70:5F:23:31:37:56:08:F6:33:BE:5B:D5:74:7F:9A Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2D92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2D76 Signing time: Wed 02 Jul 2025 15:36:59 +0000 Manifest this update: Wed 02 Jul 2025 15:36:59 +0000 Manifest next update: Wed 09 Jul 2025 15:36:59 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: adPkJ0VQAsQUtQjKeeMcukNmBK+UolGDQHyJRM6bmXg=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: B6weuy2U7VjqemndD9JlkjRjdvpM++iJ2EL75fmO3yk=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: H0Aul5FoePWmdJ4ws06EeBfgwjOLxYt9oVPG8uQPMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11666 (0x2d92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: Jul 2 15:36:59 2025 GMT Not After : Jul 9 15:36:59 2025 GMT Subject: CN=6865521b-1dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:8f:76:ef:a6:8b:d1:4d:e7:aa:b1:47:6f: 9d:bc:37:f3:cb:6e:74:b2:fc:ec:45:69:02:dc:42: c1:f9:98:a8:59:7f:74:71:2b:e7:1c:49:c4:ea:01: c6:c3:16:66:08:ae:54:79:01:8d:6f:a7:f9:ac:e3: 31:2d:ee:bb:e3:15:b9:22:f2:ea:a2:9c:80:88:43: b0:93:ed:16:4e:ec:a4:bf:e8:24:56:7f:89:79:1f: 1e:67:47:a5:09:27:35:f6:10:89:a7:b5:1c:13:2f: 53:58:a7:06:c3:7e:a3:57:3c:8f:09:73:db:be:25: 2d:6d:ec:ef:25:94:e0:08:a2:52:e8:b6:db:b1:da: 53:1b:8d:bb:f0:75:a7:fc:2c:dc:8e:86:fa:7b:b9: 74:f6:38:a5:2f:6d:25:38:63:9a:c7:0e:84:a8:08: f3:ea:c2:2e:f9:d5:0c:c8:52:eb:e0:fc:72:74:0d: c1:9f:7a:8a:fd:02:b6:ca:1f:a0:d8:e0:8b:5c:6d: 37:c6:16:96:e6:95:c4:67:84:d6:2e:81:66:62:a9: 1c:47:96:39:ca:d3:5d:e8:19:01:53:03:b2:d4:ea: a8:f8:44:5d:2b:7d:7c:67:ab:db:49:3d:4e:cd:e4: 81:fd:35:55:71:d8:5a:70:d7:5c:45:2d:1f:90:e7: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:3B:E5:70:70:5F:23:31:37:56:08:F6:33:BE:5B:D5:74:7F:9A X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9a:a0:d6:95:ff:d4:8c:bc:ba:cd:b0:62:7a:27:df:4f:ce: 7f:2a:39:54:b9:4c:9f:59:c9:37:66:97:66:5a:17:16:ce:d9: ad:cc:16:95:c9:f5:56:4e:d3:67:1f:0d:14:43:02:59:2d:84: bc:eb:28:8b:84:40:3e:04:19:dc:f3:1f:88:0b:77:b9:54:12: d2:e3:ed:0e:89:b3:d0:b4:78:b9:7f:fc:50:d7:e1:b6:b2:03: b9:46:1c:14:09:f5:6d:04:0e:e6:c7:63:10:65:14:87:bc:f8: 25:18:61:55:af:f5:d7:52:d5:2b:7c:ac:69:44:c9:14:a8:51: aa:d7:03:1a:b3:9a:39:c1:48:d2:60:7f:47:10:09:5a:5a:d8: 93:39:dc:6f:cb:a1:c9:bf:09:7e:11:1e:71:8b:15:76:9d:36: 0d:78:07:0b:81:36:31:17:47:1f:1c:fa:7c:18:e7:be:38:84: 98:b3:fa:88:4b:38:90:a1:ba:7e:aa:3b:68:50:21:ca:1c:4c: 71:e8:28:88:45:ca:e1:92:27:3a:8a:0d:93:5c:c9:6e:41:7e: d2:79:57:ae:33:c1:fe:67:13:75:66:84:11:c1:4d:4a:e0:1a: a4:59:ef:37:a5:db:6f:a0:b8:7c:1c:09:a5:59:60:33:2a:7d: 9b:ed:fd:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjUwNzAyMTUzNjU5WhcNMjUwNzA5MTUzNjU5WjAYMRYwFAYD VQQDEw02ODY1NTIxYi0xZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysaPdu+mi9FN56qxR2+dvDfzy250svzsRWkC3ELB+ZioWX90cSvnHEnE6gHG wxZmCK5UeQGNb6f5rOMxLe674xW5IvLqopyAiEOwk+0WTuykv+gkVn+JeR8eZ0el CSc19hCJp7UcEy9TWKcGw36jVzyPCXPbviUtbezvJZTgCKJS6LbbsdpTG4278HWn /Czcjob6e7l09jilL20lOGOaxw6EqAjz6sIu+dUMyFLr4PxydA3Bn3qK/QK2yh+g 2OCLXG03xhaW5pXEZ4TWLoFmYqkcR5Y5ytNd6BkBUwOy1Oqo+ERdK318Z6vbST1O zeSB/TVVcdhacNdcRS0fkOeENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKTO+Vw cF8jMTdWCPYzvlvVdH+aMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAymqDWlf/UjLy6zbBieiffT85/KjlUuUyfWck3ZpdmWhcWztmtzBaV yfVWTtNnHw0UQwJZLYS86yiLhEA+BBnc8x+IC3e5VBLS4+0OibPQtHi5f/xQ1+G2 sgO5RhwUCfVtBA7mx2MQZRSHvPglGGFVr/XXUtUrfKxpRMkUqFGq1wMas5o5wUjS YH9HEAlaWtiTOdxvy6HJvwl+ER5xixV2nTYNeAcLgTYxF0cfHPp8GOe+OISYs/qI SziQobp+qjtoUCHKHExx6CiIRcrhkic6ig2TXMluQX7SeVeuM8H+ZxN1ZoQRwU1K 4BqkWe83pdtvoLh8HAmlWWAzKn2b7f22 -----END CERTIFICATE-----Generated at Thu Jul 3 17:42:56 2025 by rpki-client