$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: jMySDNyKPkYdeXNKTL6mk6A/pB53/hR8YrcYDTXDqVc= Subject key identifier: E2:16:06:17:33:6B:25:E6:1F:37:11:1F:DE:9B:84:6A:AA:A6:8C:9C Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 0154 Signing time: Thu 03 Jul 2025 04:16:34 +0000 Manifest this update: Thu 03 Jul 2025 04:16:33 +0000 Manifest next update: Thu 10 Jul 2025 04:16:33 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: OKGEonvspQkosOw9o2ZpVxFNLTxcQfDlU1xhjvOL+JY=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Jul 3 04:16:33 2025 GMT Not After : Jul 10 04:16:33 2025 GMT Subject: CN=68660421-bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:41:08:f8:ee:41:73:c2:d0:84:23:02:f0: cc:d9:21:90:2a:fb:49:92:ea:ae:9c:42:de:a9:72: d2:13:e0:05:21:8d:ae:e8:f2:ce:be:9d:23:60:86: 24:84:37:e1:8f:72:6a:88:d5:d3:df:7f:c6:13:24: 30:4b:2d:f1:02:e5:39:21:81:3f:82:a0:b7:1a:46: e8:23:44:f1:38:5b:52:80:f2:22:22:d2:2a:23:f5: d5:4f:e6:d1:33:2a:b1:7b:ae:62:12:0e:84:e2:7e: 8d:40:42:14:cc:45:3d:31:79:12:25:44:f6:3b:80: 03:2e:86:c7:55:ae:f4:5c:37:3d:a8:04:70:e7:3f: 72:ca:89:cb:8b:fc:fb:fa:15:93:8f:11:75:f8:90: 7e:c3:d4:62:f6:b5:19:4d:9a:6d:8c:46:1f:05:d6: 2e:c1:66:42:06:a7:ff:00:ae:fb:65:fe:5f:ff:b2: 39:e9:8b:5d:63:e1:0e:1f:4b:09:a6:60:5a:c6:69: e5:bf:74:1c:d1:bc:08:a0:a0:88:cb:10:de:e5:0f: a9:77:80:83:41:1b:2f:46:44:fd:16:cf:98:7e:38: 3a:30:44:9c:a0:8b:f2:2b:4e:06:75:98:a1:fe:b8: 17:53:75:13:8e:b4:09:bc:50:8e:27:25:f4:bf:fa: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:16:06:17:33:6B:25:E6:1F:37:11:1F:DE:9B:84:6A:AA:A6:8C:9C X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:fc:8e:0f:2a:b8:cc:8b:d2:71:a2:a5:c7:54:19:65:ed: 18:37:0f:74:8c:db:37:f3:0c:cf:e4:24:88:93:78:16:8b:74: 2f:69:fe:e0:2a:4d:af:39:43:c9:71:eb:12:77:10:d2:4a:20: e8:72:b5:bc:43:76:1e:eb:e5:80:e0:dd:34:f8:20:e6:90:19: 91:ec:58:2f:4e:46:22:a4:bb:89:8c:a0:15:4c:1c:7e:d9:7e: 42:eb:9e:c1:b6:5b:1e:e0:1a:d1:54:ae:74:ff:20:38:a1:b1: 6f:33:da:ef:bf:16:62:ac:11:60:2b:9c:bc:2f:0d:c7:1f:b0: bc:ad:ce:43:8a:bd:ec:2b:26:cf:2c:9c:a9:1e:6b:af:d8:7f: 18:3a:fa:e2:f3:dc:43:2b:46:64:fe:6b:34:12:b2:0c:a4:f0: ce:95:47:f1:2a:13:15:f9:ec:df:04:82:25:f1:f6:af:1c:13: 22:e2:bd:c8:68:c7:1a:9e:f0:ad:6d:58:f0:f0:f4:60:3c:7d: 3d:ba:fe:38:4b:b0:e5:e5:e2:de:7f:43:46:07:2e:a8:db:44: 92:24:48:20:4d:1c:4f:e9:69:3f:ac:26:9a:47:c9:ed:c0:1f: 24:52:43:84:64:4b:a7:04:2c:1b:92:fd:ce:95:20:f9:e3:52: 2d:dc:a2:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwNzAzMDQxNjMzWhcNMjUwNzEwMDQxNjMzWjAYMRYwFAYD VQQDEw02ODY2MDQyMS1iYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDxBCPjuQXPC0IQjAvDM2SGQKvtJkuqunELeqXLSE+AFIY2u6PLOvp0jYIYk hDfhj3JqiNXT33/GEyQwSy3xAuU5IYE/gqC3GkboI0TxOFtSgPIiItIqI/XVT+bR Myqxe65iEg6E4n6NQEIUzEU9MXkSJUT2O4ADLobHVa70XDc9qARw5z9yyonLi/z7 +hWTjxF1+JB+w9Ri9rUZTZptjEYfBdYuwWZCBqf/AK77Zf5f/7I56YtdY+EOH0sJ pmBaxmnlv3Qc0bwIoKCIyxDe5Q+pd4CDQRsvRkT9Fs+Yfjg6MEScoIvyK04GdZih /rgXU3UTjrQJvFCOJyX0v/qwIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIWBhcz ayXmHzcRH96bhGqqpoycMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDVfyODyq4zIvScaKlx1QZZe0YNw90jNs38wzP5CSIk3gWi3Qvaf7g Kk2vOUPJcesSdxDSSiDocrW8Q3Ye6+WA4N00+CDmkBmR7FgvTkYipLuJjKAVTBx+ 2X5C657Btlse4BrRVK50/yA4obFvM9rvvxZirBFgK5y8Lw3HH7C8rc5Dir3sKybP LJypHmuv2H8YOvri89xDK0Zk/ms0ErIMpPDOlUfxKhMV+ezfBIIl8favHBMi4r3I aMcanvCtbVjw8PRgPH09uv44S7Dl5eLef0NGBy6o20SSJEggTRxP6Wk/rCaaR8nt wB8kUkOEZEunBCwbkv3OlSD541It3KJp -----END CERTIFICATE-----Generated at Fri Jul 4 21:55:47 2025 by rpki-client