$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: zrOhwKTaAFLhNfElMiL71ieWRynIlr6DufUd6mjfeUE= Subject key identifier: 9F:4F:66:F7:27:E5:97:65:AC:C1:3E:B9:1E:99:D0:9D:21:6E:12:BF Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 101D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1009 Signing time: Wed 02 Jul 2025 17:39:14 +0000 Manifest this update: Wed 02 Jul 2025 17:39:14 +0000 Manifest next update: Wed 09 Jul 2025 17:39:14 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: XSEQc4far3IsG+9WXEZLSH993lkvU81R/BQjGHcnrf8=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4125 (0x101d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Jul 2 17:39:14 2025 GMT Not After : Jul 9 17:39:14 2025 GMT Subject: CN=68656ec2-ff08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:f9:62:c8:0f:44:ca:1d:f1:84:b7:05:b0: 15:3f:73:79:60:3b:31:ba:dd:ea:0f:62:0c:09:11: e2:81:cb:a9:72:2c:d7:09:e0:86:4e:c9:64:ef:03: 67:74:dc:8e:7c:f6:71:98:f7:c0:2c:28:6c:4b:01: 28:19:61:3e:93:49:ab:ff:b2:c3:7c:05:5a:4c:ca: ba:06:7d:f2:c9:b6:1b:1c:31:b3:60:b6:28:d9:da: 22:55:67:bb:4e:bd:ba:f6:fe:35:08:b8:91:bb:85: bd:b8:fe:8b:42:28:65:ea:da:3c:51:ca:ac:31:fc: 4e:b9:c1:0c:36:5e:49:d7:51:5b:8f:08:05:bb:ee: 1b:a0:86:38:ca:5e:61:0a:e9:a5:e8:b2:49:18:a3: 26:b4:1a:38:1a:d8:53:8a:16:f6:58:e5:46:71:bd: 99:00:8d:34:80:17:a1:f1:df:8f:e1:df:d0:e3:62: 2a:44:b2:c5:e4:ee:69:29:5c:f6:8b:3f:44:02:58: 7e:b9:db:3c:d0:3e:e2:bf:80:32:45:4d:a0:69:16: 83:23:1b:49:72:83:39:22:bf:b1:94:ef:5c:71:da: b3:c8:35:4b:2e:c4:9d:f7:3e:08:cc:eb:32:7d:b1: ad:58:8c:6f:db:d9:eb:85:92:2f:39:cd:9a:4b:01: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4F:66:F7:27:E5:97:65:AC:C1:3E:B9:1E:99:D0:9D:21:6E:12:BF X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:30:85:9b:76:8e:a5:b0:76:a8:13:a8:92:a7:ae:ac:39:5f: a1:57:08:a5:02:be:14:d5:c0:0c:1d:da:2b:c4:67:4d:e7:f6: 02:30:60:0a:ae:14:97:db:97:87:99:7d:dd:7b:ed:f6:32:da: 4e:01:eb:0b:52:00:8b:2b:4b:c1:e2:b2:04:ce:3a:5f:25:01: 5b:ee:72:02:84:59:d7:c5:08:cd:e1:93:92:62:63:d1:a3:86: b5:b1:40:49:a3:58:88:2d:e1:24:a1:89:93:8f:8f:24:21:60: 78:02:d4:ee:63:1b:e8:f2:98:1b:33:45:bd:38:b6:f8:e1:52: 88:21:db:c5:55:44:9c:85:e0:e4:15:96:58:1e:b2:6b:7f:f3: 6e:0e:a1:83:a4:bd:fd:56:0e:bf:c8:f0:b7:74:d1:86:15:c0: c5:2c:1e:b6:9e:0a:3e:0b:3a:fe:ce:f8:3d:aa:e7:73:e8:55: 65:2d:87:69:1f:ec:6f:77:47:32:b2:ec:c6:de:8f:95:b7:d9: 59:a4:b0:cd:33:98:2a:8d:c9:13:ef:51:b8:7a:0c:3a:c8:08: db:86:ad:4f:75:9e:ea:01:12:c3:01:ea:32:2a:fa:82:1d:21: be:bb:c1:51:ac:ab:19:0a:c0:de:06:81:38:eb:ed:71:44:e1: 5f:10:d8:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUwNzAyMTczOTE0WhcNMjUwNzA5MTczOTE0WjAYMRYwFAYD VQQDEw02ODY1NmVjMi1mZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqT5YsgPRMod8YS3BbAVP3N5YDsxut3qD2IMCRHigcupcizXCeCGTslk7wNn dNyOfPZxmPfALChsSwEoGWE+k0mr/7LDfAVaTMq6Bn3yybYbHDGzYLYo2doiVWe7 Tr269v41CLiRu4W9uP6LQihl6to8UcqsMfxOucEMNl5J11FbjwgFu+4boIY4yl5h Cuml6LJJGKMmtBo4GthTihb2WOVGcb2ZAI00gBeh8d+P4d/Q42IqRLLF5O5pKVz2 iz9EAlh+uds80D7iv4AyRU2gaRaDIxtJcoM5Ir+xlO9ccdqzyDVLLsSd9z4IzOsy fbGtWIxv29nrhZIvOc2aSwF9/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9PZvcn 5ZdlrME+uR6Z0J0hbhK/MB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMIWbdo6lsHaoE6iSp66sOV+hVwilAr4U1cAMHdorxGdN5/YCMGAK rhSX25eHmX3de+32MtpOAesLUgCLK0vB4rIEzjpfJQFb7nIChFnXxQjN4ZOSYmPR o4a1sUBJo1iILeEkoYmTj48kIWB4AtTuYxvo8pgbM0W9OLb44VKIIdvFVUScheDk FZZYHrJrf/NuDqGDpL39Vg6/yPC3dNGGFcDFLB62ngo+Czr+zvg9qudz6FVlLYdp H+xvd0cysuzG3o+Vt9lZpLDNM5gqjckT71G4egw6yAjbhq1PdZ7qARLDAeoyKvqC HSG+u8FRrKsZCsDeBoE46+1xROFfENhA -----END CERTIFICATE-----Generated at Thu Jul 3 09:43:05 2025 by rpki-client