$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: 2yNYcHtK02kgHpPbFbqTfiu3oMke/lMc3lTH5+Aucfw= Subject key identifier: 25:98:18:C5:EA:48:51:C8:F3:F7:4C:F0:3E:60:EB:20:B8:31:54:5F Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 0167 Signing time: Sat 23 Aug 2025 04:00:57 +0000 Manifest this update: Sat 23 Aug 2025 04:00:56 +0000 Manifest next update: Sat 30 Aug 2025 04:00:56 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: 6B7Eyc0qnn8cebcrlSZo75hf2nIwODX1rNp0HNaJGP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Aug 23 04:00:56 2025 GMT Not After : Aug 30 04:00:56 2025 GMT Subject: CN=68a93cf8-921d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:ba:59:5a:c9:cc:dd:1e:08:5e:ef:53:12: 59:d7:ee:9f:90:0e:3b:df:5d:ac:e8:c7:d1:b8:9a: 49:70:48:b0:47:6b:72:5b:06:4a:be:a7:ea:03:d1: af:f2:00:2e:4a:44:a1:60:26:bd:fb:68:f8:67:3a: 78:f3:f7:ba:84:3f:a7:66:8c:7e:dc:31:02:a6:2e: a9:a4:87:80:35:a6:10:3c:5a:a4:ff:3a:ed:1f:ce: d2:d3:63:88:94:de:92:cc:fa:e8:d2:46:e8:60:73: e6:c7:9b:9d:7e:9f:fd:8e:cc:92:6d:9f:21:38:d3: 0a:60:c9:32:21:8e:4d:57:0b:63:fa:c2:33:e6:da: b9:c6:68:0c:21:3a:b0:3c:b1:14:11:e5:a4:b2:f6: 01:d1:d9:54:7d:88:0e:a2:57:a2:bd:10:2c:70:26: 9d:40:52:15:9d:6b:bd:2c:c0:cf:9a:ff:34:77:5a: bc:a3:1d:05:e3:fb:72:a7:28:c2:8e:0f:f3:a2:95: f9:a3:a5:c2:cb:ba:d5:16:c0:de:d1:d7:eb:cc:b8: ff:84:77:41:68:a8:0d:7e:99:ea:98:fe:a4:41:eb: 3d:95:4e:be:81:e8:e3:f7:ea:1c:37:84:57:eb:08: bb:c3:c5:1d:91:94:c2:3c:fd:98:7d:ec:f4:e8:4a: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:18:C5:EA:48:51:C8:F3:F7:4C:F0:3E:60:EB:20:B8:31:54:5F X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:75:08:1a:ca:df:6a:d8:bb:f3:df:9f:67:bc:7e:f9:86:55: 7e:3b:06:12:13:41:34:11:5e:c2:b2:1c:61:0f:07:08:ed:5a: bc:4e:a1:34:68:33:5a:90:83:cf:e0:31:8a:09:d9:50:cc:21: f2:6f:25:c0:0b:e2:88:f0:d8:e8:0e:38:b5:58:e5:21:6a:98: e8:42:f8:86:99:ca:da:a9:f3:d1:1f:46:9f:01:cd:f6:53:34: 72:1c:ae:9b:33:42:45:a3:d8:29:ca:f8:0a:18:55:f5:39:a3: 39:9b:a2:10:df:70:59:ca:cc:ff:99:80:60:4e:87:3b:ed:6d: 2c:45:8b:12:d2:53:d2:df:db:03:92:51:dc:78:f3:03:35:6d: 5e:36:f3:9a:0b:71:f0:47:73:e7:cc:27:38:23:3a:b3:4b:83: 22:a7:30:71:6f:57:ea:0d:7b:52:ea:71:5e:be:36:bf:26:c5: 65:80:1b:98:5d:05:85:f4:e6:2b:26:fd:5d:6f:9e:1c:44:6c: 36:f9:15:41:ae:bd:ef:ba:90:0a:c3:93:44:eb:1b:c2:e4:71: 54:9a:68:d5:cc:fa:52:ef:53:3f:85:be:81:8c:3e:f2:00:c4: e4:ab:74:d2:4a:96:05:d2:81:88:cc:8d:a8:06:81:c4:a3:16: 35:ed:86:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUwODIzMDQwMDU2WhcNMjUwODMwMDQwMDU2WjAYMRYwFAYD VQQDEw02OGE5M2NmOC05MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mi6WVrJzN0eCF7vUxJZ1+6fkA47312s6MfRuJpJcEiwR2tyWwZKvqfqA9Gv 8gAuSkShYCa9+2j4Zzp48/e6hD+nZox+3DECpi6ppIeANaYQPFqk/zrtH87S02OI lN6SzPro0kboYHPmx5udfp/9jsySbZ8hONMKYMkyIY5NVwtj+sIz5tq5xmgMITqw PLEUEeWksvYB0dlUfYgOoleivRAscCadQFIVnWu9LMDPmv80d1q8ox0F4/typyjC jg/zopX5o6XCy7rVFsDe0dfrzLj/hHdBaKgNfpnqmP6kQes9lU6+gejj9+ocN4RX 6wi7w8UdkZTCPP2Yfez06Eq2CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWYGMXq SFHI8/dM8D5g6yC4MVRfMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXdQgayt9q2Lvz359nvH75hlV+OwYSE0E0EV7CshxhDwcI7Vq8TqE0 aDNakIPP4DGKCdlQzCHybyXAC+KI8NjoDji1WOUhapjoQviGmcraqfPRH0afAc32 UzRyHK6bM0JFo9gpyvgKGFX1OaM5m6IQ33BZysz/mYBgToc77W0sRYsS0lPS39sD klHcePMDNW1eNvOaC3HwR3PnzCc4IzqzS4MipzBxb1fqDXtS6nFevja/JsVlgBuY XQWF9OYrJv1db54cRGw2+RVBrr3vupAKw5NE6xvC5HFUmmjVzPpS71M/hb6BjD7y AMTkq3TSSpYF0oGIzI2oBoHEoxY17YYH -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:48 2025 by rpki-client