$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json) Hash identifier: sm/bZONNd/M7wFbCAso5EhV3pBeMv3EZU9h1J1Cd/wE= Subject key identifier: 6F:F4:96:38:3E:5B:70:29:A8:C7:CA:73:BC:00:FD:84:29:33:53:87 Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft Manifest number: 0157 Signing time: Fri 22 Aug 2025 17:16:39 +0000 Manifest this update: Fri 22 Aug 2025 17:16:38 +0000 Manifest next update: Fri 29 Aug 2025 17:16:38 +0000 Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: ek7PmY5YhUHVtyV7au0APtiERDLekYaueMLJn2sB8+k=) 2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: mR7p6xLL+eywaq3IEYtE5q1FtrVRKFEpVD4lZkW4skg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Validity Not Before: Aug 22 17:16:38 2025 GMT Not After : Aug 29 17:16:38 2025 GMT Subject: CN=68a8a5f7-2f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:11:4e:93:4f:28:5b:ef:13:ec:48:73:5c: b0:ba:ae:0c:d3:64:a3:c4:6f:4b:66:94:7b:2d:55: e1:cd:17:80:fe:8b:a8:ca:f9:5f:39:c0:77:d5:b3: 30:24:f7:4c:85:9a:ac:28:c9:d7:6b:4c:96:93:29: 96:2b:71:4f:a9:1f:88:c6:16:3f:36:50:5e:6c:53: a1:5d:44:ab:c8:6a:7f:ee:17:b7:9c:87:c1:9a:2e: 42:a7:36:0a:1e:f7:93:0d:9e:ca:03:8d:92:2f:9c: 10:19:0b:28:1c:fd:ca:b2:f9:26:6a:fc:89:1b:6b: 18:11:dd:6a:aa:86:42:66:00:ec:c0:03:17:23:e8: 42:6f:a6:3f:05:40:17:a9:24:25:3e:f2:a3:c8:9a: 13:25:06:e4:50:5d:92:29:57:4d:d2:96:5c:77:da: 7b:76:29:8c:48:3c:13:26:dd:00:65:49:42:b3:91: be:ba:79:e7:2e:8e:37:c8:f8:17:e4:88:1b:7d:d2: b9:47:96:20:8b:d9:1a:30:65:3f:5b:0a:ca:db:b1: 81:37:bf:b7:71:8d:25:09:e3:53:0c:6f:8e:67:bd: 8e:3f:dc:7e:46:4b:10:75:fd:24:01:95:41:a9:e2: 48:dd:0b:22:83:f2:ce:ac:60:da:93:d7:5d:62:2e: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F4:96:38:3E:5B:70:29:A8:C7:CA:73:BC:00:FD:84:29:33:53:87 X509v3 Authority Key Identifier: keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c8:98:03:2c:f2:ea:a6:da:2b:92:99:c6:15:b8:c7:fd:4a: b1:2a:40:c1:43:00:f0:7f:a0:9d:31:e6:c9:ca:8e:df:2b:39: dc:66:23:7a:bc:15:f2:41:4d:78:9d:5d:b5:fd:cc:90:01:29: d4:2c:d2:55:7d:48:d5:6e:56:29:a6:b2:c7:2a:d7:f8:c0:74: 2f:b9:b8:ef:2d:5c:8a:8b:00:6e:1e:84:33:94:a2:b2:8f:b9: cb:75:e8:b1:d7:1a:72:4f:f3:d9:10:fe:c4:ce:ed:de:5e:ac: be:22:76:f5:9a:be:40:5c:6f:fd:f7:a4:16:7a:d1:fa:9f:07: 9a:bc:a6:a3:0b:50:8e:ad:01:27:b9:2c:d8:c0:ab:14:5a:7e: e9:7c:22:86:34:59:ac:26:fd:2a:45:54:0b:07:94:c4:91:19: f9:5b:a1:f8:43:f8:e3:45:34:a6:65:04:3b:98:e4:84:13:3f: ff:50:b2:6b:09:a8:d0:fb:ad:4a:64:1e:d8:74:0e:62:2b:7b: c5:e9:91:82:7a:8c:9f:96:4f:78:3d:e1:24:81:e1:0d:0b:09: e1:e0:42:38:35:16:f0:be:a7:01:b1:96:a0:4e:f2:26:f6:a0: 58:5a:27:f5:0c:07:e1:a1:26:09:dd:e5:b9:95:2e:b4:34:aa: a0:78:65:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKDQwRkQyNzMzMDFBOEJGOEUyNzA5NzYyQzY0RjRBRUEy NkQyQUUwQjQwHhcNMjUwODIyMTcxNjM4WhcNMjUwODI5MTcxNjM4WjAYMRYwFAYD VQQDEw02OGE4YTVmNy0yZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM8RTpNPKFvvE+xIc1ywuq4M02SjxG9LZpR7LVXhzReA/ouoyvlfOcB31bMw JPdMhZqsKMnXa0yWkymWK3FPqR+IxhY/NlBebFOhXUSryGp/7he3nIfBmi5CpzYK HveTDZ7KA42SL5wQGQsoHP3KsvkmavyJG2sYEd1qqoZCZgDswAMXI+hCb6Y/BUAX qSQlPvKjyJoTJQbkUF2SKVdN0pZcd9p7dimMSDwTJt0AZUlCs5G+unnnLo43yPgX 5IgbfdK5R5Ygi9kaMGU/WwrK27GBN7+3cY0lCeNTDG+OZ72OP9x+RksQdf0kAZVB qeJI3Qsig/LOrGDak9ddYi584wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/0ljg+ W3ApqMfKc7wA/YQpM1OHMB8GA1UdIwQYMBaAFED9JzMBqL+OJwl2LGT0rqJtKuC0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC82QkVBRTA4ODdC MzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0NG5DWFlzWlBTdW9tMHE0 TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FQMG5Nd0dvdjQ0bkNYWXNaUFN1b20wcTRMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC82QkVBRTA4ODdCMzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0 NG5DWFlzWlBTdW9tMHE0TFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOyJgDLPLqptorkpnGFbjH/UqxKkDBQwDwf6CdMebJyo7fKzncZiN6 vBXyQU14nV21/cyQASnULNJVfUjVblYpprLHKtf4wHQvubjvLVyKiwBuHoQzlKKy j7nLdeix1xpyT/PZEP7Ezu3eXqy+Inb1mr5AXG/996QWetH6nweavKajC1COrQEn uSzYwKsUWn7pfCKGNFmsJv0qRVQLB5TEkRn5W6H4Q/jjRTSmZQQ7mOSEEz//ULJr CajQ+61KZB7YdA5iK3vF6ZGCeoyflk94PeEkgeENCwnh4EI4NRbwvqcBsZagTvIm 9qBYWif1DAfhoSYJ3eW5lS60NKqgeGWa -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:59 2025 by rpki-client