$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json) Hash identifier: cInvWYv5DO2km+aUQ4LA9nDxLOqb984qRpg/cyQJ7z0= Subject key identifier: FE:03:E2:E6:B8:DF:82:DB:39:05:BF:CE:A0:A4:1B:23:5A:E1:D9:2E Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft Manifest number: 0A3A Signing time: Fri 22 Aug 2025 20:06:01 +0000 Manifest this update: Fri 22 Aug 2025 20:06:00 +0000 Manifest next update: Fri 29 Aug 2025 20:06:00 +0000 Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: BqUw5tBd2oSiARFoab3vkS6SvuZGKRBjXlfMFYvEzM8=) 2: ABF4F248555511F0A341047BC4F9AE02.roa (hash: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=) 3: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=) 4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=) 5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=) 6: AD3A0F08555511F0A341047BC4F9AE02.roa (hash: 5xpPU3hf6j5Lfs11gET77ow+Y1ISxFFuuiCCR0UoJK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: Aug 22 20:06:00 2025 GMT Not After : Aug 29 20:06:00 2025 GMT Subject: CN=68a8cda9-8d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:ba:5a:8d:ff:39:69:54:df:27:e2:37:94: 77:29:61:df:b6:27:ac:80:92:70:33:65:c5:9d:34: d8:71:cd:8b:e4:fb:cb:f3:a6:1e:df:5e:c0:fa:67: e1:e7:c2:7a:5b:9a:99:95:3c:af:5e:32:40:cd:2d: 19:7b:b3:e3:de:24:e5:f6:87:4e:84:54:15:da:70: 47:d2:43:1d:5a:9b:63:52:2a:d0:f0:62:fb:12:60: cb:d6:03:88:05:ef:f8:2c:a7:e8:74:85:2b:1e:fc: 34:87:51:62:4c:39:1b:a6:53:c5:e7:eb:ae:d2:53: 2e:7f:1e:33:3c:ee:d9:b6:62:41:21:4f:5f:c6:66: bb:45:9c:69:7b:5a:c0:21:ee:2e:23:21:ed:88:3f: a5:5a:01:f7:67:83:5a:05:78:62:07:41:79:2b:69: 5c:3f:9e:78:69:ec:00:04:a3:0c:11:dd:c7:1f:4d: 6b:72:f3:81:43:f3:4e:46:b4:b1:4c:b1:50:15:d1: 01:9b:bc:3b:5f:4e:64:b1:0a:b6:2a:ac:e8:1a:93: 5f:9f:9a:6f:ec:24:39:a7:4b:1c:9a:32:7c:33:0e: 1a:83:fb:b2:e6:df:71:80:88:a9:9f:da:2a:a7:13: 5d:e5:bb:c8:be:76:5f:aa:8d:7a:9e:69:bf:8c:a8: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:03:E2:E6:B8:DF:82:DB:39:05:BF:CE:A0:A4:1B:23:5A:E1:D9:2E X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:05:64:bc:e1:e5:68:d2:c1:0e:32:3f:fb:3e:cf:82:2e:86: db:82:b2:b2:0d:92:47:70:45:9d:03:45:37:c5:76:e8:4b:c0: 82:bb:43:58:04:eb:96:b9:d9:60:a2:c2:0b:84:ef:cd:c8:6a: 43:0d:06:2c:e2:b0:0c:56:23:b2:15:a8:0f:1e:ec:51:43:c2: 5b:03:d5:8f:4c:27:00:f1:a7:0b:a0:a3:d5:33:1c:53:a4:36: f6:3a:f8:05:54:bf:d2:6b:81:ab:32:41:97:7c:81:87:13:31: ec:7a:50:5f:5c:9c:ff:03:04:b1:ca:72:c5:d4:af:de:5e:25: 6f:33:77:32:57:39:a8:0f:9e:10:24:d5:e7:73:ba:81:da:95: ea:b6:0a:c8:87:aa:06:24:31:17:92:5c:0e:9b:6a:35:83:24: e3:00:3e:f3:5e:e8:38:2a:66:cc:82:7c:dd:d3:40:13:07:84: ed:aa:a1:03:e2:5e:fe:81:4f:9d:1f:c9:dd:82:24:95:b1:7c: 8c:0a:73:23:1b:7d:a5:cf:ee:47:f8:27:b7:e4:1a:e8:f6:8a: de:32:14:0c:85:4f:9c:b9:9a:ff:c6:ce:e4:c5:6f:f2:79:63: 8b:0f:ac:f9:c0:42:8b:a4:c7:b8:fc:40:88:8d:0f:02:72:18: bc:89:ba:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjUwODIyMjAwNjAwWhcNMjUwODI5MjAwNjAwWjAYMRYwFAYD VQQDEw02OGE4Y2RhOS04ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33G6Wo3/OWlU3yfiN5R3KWHftiesgJJwM2XFnTTYcc2L5PvL86Ye317A+mfh 58J6W5qZlTyvXjJAzS0Ze7Pj3iTl9odOhFQV2nBH0kMdWptjUirQ8GL7EmDL1gOI Be/4LKfodIUrHvw0h1FiTDkbplPF5+uu0lMufx4zPO7ZtmJBIU9fxma7RZxpe1rA Ie4uIyHtiD+lWgH3Z4NaBXhiB0F5K2lcP554aewABKMMEd3HH01rcvOBQ/NORrSx TLFQFdEBm7w7X05ksQq2KqzoGpNfn5pv7CQ5p0scmjJ8Mw4ag/uy5t9xgIipn9oq pxNd5bvIvnZfqo16nmm/jKhVXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4D4ua4 34LbOQW/zqCkGyNa4dkuMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5 ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKBWS84eVo0sEOMj/7Ps+CLobbgrKyDZJHcEWdA0U3xXboS8CCu0NY BOuWudlgosILhO/NyGpDDQYs4rAMViOyFagPHuxRQ8JbA9WPTCcA8acLoKPVMxxT pDb2OvgFVL/Sa4GrMkGXfIGHEzHselBfXJz/AwSxynLF1K/eXiVvM3cyVzmoD54Q JNXnc7qB2pXqtgrIh6oGJDEXklwOm2o1gyTjAD7zXug4KmbMgnzd00ATB4TtqqED 4l7+gU+dH8ndgiSVsXyMCnMjG32lz+5H+Ce35Bro9oreMhQMhU+cuZr/xs7kxW/y eWOLD6z5wEKLpMe4/ECIjQ8Cchi8ibpd -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:44 2025 by rpki-client