$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json) Hash identifier: D4cdPziMDUi8DSMh8BLYIgqBCS8FKFo4FGJOWLdNPpg= Subject key identifier: 3E:CF:93:EB:75:8A:54:90:C5:2A:63:25:20:9A:71:BA:DA:D6:DA:58 Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0AAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft Manifest number: 0A1F Signing time: Wed 02 Jul 2025 20:15:36 +0000 Manifest this update: Wed 02 Jul 2025 20:15:36 +0000 Manifest next update: Wed 09 Jul 2025 20:15:36 +0000 Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: y7TxyxE90n9CCP5qNbk4DLplDgh0obBBvidFKgPKDk8=) 2: ABF4F248555511F0A341047BC4F9AE02.roa (hash: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=) 3: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=) 4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=) 5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=) 6: AD3A0F08555511F0A341047BC4F9AE02.roa (hash: 5xpPU3hf6j5Lfs11gET77ow+Y1ISxFFuuiCCR0UoJK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: Jul 2 20:15:36 2025 GMT Not After : Jul 9 20:15:36 2025 GMT Subject: CN=68659368-fae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:ea:ea:e0:29:d0:1b:33:73:11:4d:ee:2f: 31:b6:3d:e5:74:bb:44:af:49:87:77:84:00:0b:0f: 72:70:f4:2e:ed:a1:c4:b9:27:80:37:ac:9d:bf:fc: fc:6a:d5:0f:d4:73:e6:41:f4:32:b0:eb:19:af:0d: 45:4d:9d:dc:2d:61:aa:3f:b0:7c:67:aa:20:9f:76: b4:d8:12:28:88:6e:3c:9b:a5:da:f0:ad:15:2e:73: 8e:4d:98:6b:56:91:c5:06:55:11:ce:d7:01:f9:e9: 9b:01:43:bc:f0:e1:43:8d:03:d6:cc:fe:b2:35:47: 10:b4:ed:98:b3:01:ea:cd:e4:01:92:2e:f5:78:c3: cf:56:a9:ee:49:c9:2c:ce:29:19:3d:a0:1b:c0:42: d8:35:ea:e8:bc:90:7d:16:51:41:4b:d1:32:f6:70: 1f:bb:db:24:57:f0:bf:5a:9b:38:23:4e:2e:e8:14: e4:1b:6d:4d:a7:f0:34:3f:0b:2e:0a:be:45:b3:23: eb:66:0d:16:d1:bf:b6:07:12:0d:56:92:10:d6:3b: f3:b4:75:85:85:5e:ca:98:d5:cc:e3:40:15:f3:5f: ee:f0:d9:bf:9f:45:a3:d7:be:ea:a0:3a:ce:4e:a3: 9a:73:27:98:74:d3:e4:8e:10:16:26:f5:1f:d1:72: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:93:EB:75:8A:54:90:C5:2A:63:25:20:9A:71:BA:DA:D6:DA:58 X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:6e:46:1f:c5:2e:01:d9:eb:30:64:44:96:85:79:4c:d6:13: 53:36:fe:eb:4a:d4:7c:ee:45:c4:50:2b:fe:51:a5:ea:e8:97: 8e:ed:70:50:37:2a:e3:44:5e:2e:6e:e8:94:a9:6c:c2:0b:be: 70:c3:2a:a7:64:7f:04:3c:2a:b3:e5:1e:87:08:fb:fe:ca:32: fa:1c:e2:1e:2c:20:1e:1c:cf:94:fe:cf:86:19:40:7d:37:8f: 2e:b6:86:6e:ca:04:53:4e:61:29:0a:ee:48:98:74:dc:0e:60: 58:67:dc:54:12:9a:07:28:ed:e5:03:b9:2d:9b:94:59:df:30: b1:a3:02:c3:80:02:b8:ca:5b:39:21:3b:ee:19:69:2b:93:23: 84:fb:94:c9:f0:fb:ba:87:30:cd:73:91:9a:67:e4:d3:f6:ca: 92:b1:8f:41:2f:92:fa:ac:cc:5a:3f:a1:72:60:e0:77:04:77: 9b:07:93:ec:27:fd:5a:bf:77:fb:4f:a8:7f:0d:66:25:10:d2: 57:2f:9a:83:10:db:81:3b:8f:d8:1c:ab:46:08:97:4e:39:05: e0:29:dd:e8:f5:9c:4b:5f:e5:3b:ca:02:f8:d1:ec:c6:b0:e6: f4:49:76:56:1e:2a:81:22:7e:8d:6c:e6:50:4c:70:f3:fd:63: 23:d1:12:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjUwNzAyMjAxNTM2WhcNMjUwNzA5MjAxNTM2WjAYMRYwFAYD VQQDEw02ODY1OTM2OC1mYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytvq6uAp0BszcxFN7i8xtj3ldLtEr0mHd4QACw9ycPQu7aHEuSeAN6ydv/z8 atUP1HPmQfQysOsZrw1FTZ3cLWGqP7B8Z6ogn3a02BIoiG48m6Xa8K0VLnOOTZhr VpHFBlURztcB+embAUO88OFDjQPWzP6yNUcQtO2YswHqzeQBki71eMPPVqnuScks zikZPaAbwELYNerovJB9FlFBS9Ey9nAfu9skV/C/Wps4I04u6BTkG21Np/A0Pwsu Cr5FsyPrZg0W0b+2BxINVpIQ1jvztHWFhV7KmNXM40AV81/u8Nm/n0Wj177qoDrO TqOacyeYdNPkjhAWJvUf0XKvdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7Pk+t1 ilSQxSpjJSCacbra1tpYMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5 ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSbkYfxS4B2eswZESWhXlM1hNTNv7rStR87kXEUCv+UaXq6JeO7XBQ NyrjRF4ubuiUqWzCC75wwyqnZH8EPCqz5R6HCPv+yjL6HOIeLCAeHM+U/s+GGUB9 N48utoZuygRTTmEpCu5ImHTcDmBYZ9xUEpoHKO3lA7ktm5RZ3zCxowLDgAK4yls5 ITvuGWkrkyOE+5TJ8Pu6hzDNc5GaZ+TT9sqSsY9BL5L6rMxaP6FyYOB3BHebB5Ps J/1av3f7T6h/DWYlENJXL5qDENuBO4/YHKtGCJdOOQXgKd3o9ZxLX+U7ygL40ezG sOb0SXZWHiqBIn6NbOZQTHDz/WMj0RLg -----END CERTIFICATE-----Generated at Thu Jul 3 08:57:53 2025 by rpki-client