$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: YbYCEcTaXiNBh21zj7dF1FhYbWw+2fpvqVahgN6G/7w= Subject key identifier: 24:D1:28:36:A5:B5:7B:4D:D8:82:75:06:CF:89:8A:0B:0A:AF:BD:BB Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: C1 Signing time: Thu 03 Jul 2025 06:00:48 +0000 Manifest this update: Thu 03 Jul 2025 06:00:47 +0000 Manifest next update: Thu 10 Jul 2025 06:00:47 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: Wv9EsEYZs4tN24ts7rIgNgirS0uOaoXllEv6UIpU02c=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Jul 3 06:00:47 2025 GMT Not After : Jul 10 06:00:47 2025 GMT Subject: CN=68661c8f-5f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:33:33:6d:17:0b:14:d7:66:4e:04:61:8a: 1f:bf:93:0a:31:69:66:8f:34:70:c6:c2:bd:2f:f8: 56:bc:62:2d:c0:57:c3:eb:6a:5e:dc:52:25:e3:f3: ee:67:7e:31:d5:03:2f:53:01:64:74:4d:d8:b3:33: 9a:d1:36:51:8f:bb:95:b7:38:9b:40:ec:3e:9f:73: 0f:b2:0c:c5:c0:e7:00:70:45:d8:81:20:ad:62:f7: 10:5d:f9:95:2b:04:91:8e:1e:47:b4:97:bc:6d:b5: 76:64:87:2d:a6:bc:48:eb:c8:5d:c5:50:b8:38:da: 10:60:ea:f0:0d:11:9b:59:4f:9b:0b:2e:cd:d7:f3: b9:ca:b7:44:da:94:ec:11:47:5d:5d:df:da:17:78: 02:4f:25:84:ac:99:0b:7d:14:94:71:11:04:aa:03: e9:2c:d5:45:94:ed:10:12:e4:7c:4b:f0:6f:a6:45: 42:a4:35:40:f2:c3:b6:b5:d0:c7:bf:dd:b4:11:b0: 76:44:c4:d8:4d:b2:e6:8a:de:47:b5:d3:c2:11:c0: 9a:fa:d8:cb:a7:dd:b7:1c:3d:a0:29:e2:ae:7a:91: 20:bb:fc:e4:1a:2f:ea:b5:64:cd:c1:c5:ec:8f:05: b4:00:47:5e:11:e2:8f:74:b7:a5:71:7a:ea:21:e1: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D1:28:36:A5:B5:7B:4D:D8:82:75:06:CF:89:8A:0B:0A:AF:BD:BB X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:aa:2e:a7:49:d2:58:df:e8:d8:62:68:ae:2b:c4:ed:45:1b: 1c:6d:48:09:3a:02:11:13:ca:ac:1a:7b:e0:41:1d:77:0c:84: d1:bc:22:fc:49:45:a8:b0:79:e6:a1:8f:d6:23:4c:81:5b:c0: e1:8c:c2:74:39:ba:c5:73:01:f5:3c:25:ca:8a:a6:fb:c7:e7: 05:c3:db:84:5d:90:ac:9c:7f:f1:b9:c4:f5:44:9b:11:0b:b2: fa:68:b3:9f:a3:86:ed:06:b3:2b:78:67:19:2e:14:fe:62:22: b8:e5:9f:b1:9e:0f:9b:df:49:c4:ea:1d:a5:c8:90:2f:f9:1f: b5:23:d6:45:41:ae:47:9d:7c:5c:7b:64:33:28:c9:04:b3:ea: bf:46:92:0b:7c:4a:e2:db:c3:40:ff:f8:ef:dd:84:88:50:67: 43:da:45:2b:b7:4e:7d:11:9b:96:12:24:59:d2:9c:7c:ed:57: b5:35:fd:9a:cf:e6:97:3a:10:a2:7b:d0:1f:55:5b:d7:01:9e: e5:d4:fd:b9:cd:41:c1:db:f5:a8:11:2c:ca:a9:23:b8:c8:d0: 3d:02:fc:1b:ab:66:ac:62:f8:0c:c8:e2:19:5d:56:d3:cf:c3: 29:1b:ed:1b:ab:db:13:44:7c:f9:86:88:b1:4b:8a:b5:db:16: d0:1e:5c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC RkZENENDQjYwHhcNMjUwNzAzMDYwMDQ3WhcNMjUwNzEwMDYwMDQ3WjAYMRYwFAYD VQQDEw02ODY2MWM4Zi01ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiIzM20XCxTXZk4EYYofv5MKMWlmjzRwxsK9L/hWvGItwFfD62pe3FIl4/Pu Z34x1QMvUwFkdE3YszOa0TZRj7uVtzibQOw+n3MPsgzFwOcAcEXYgSCtYvcQXfmV KwSRjh5HtJe8bbV2ZIctprxI68hdxVC4ONoQYOrwDRGbWU+bCy7N1/O5yrdE2pTs EUddXd/aF3gCTyWErJkLfRSUcREEqgPpLNVFlO0QEuR8S/BvpkVCpDVA8sO2tdDH v920EbB2RMTYTbLmit5HtdPCEcCa+tjLp923HD2gKeKuepEgu/zkGi/qtWTNwcXs jwW0AEdeEeKPdLelcXrqIeF2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTRKDal tXtN2IJ1Bs+JigsKr727MB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6 TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqi6nSdJY3+jYYmiuK8TtRRscbUgJOgIRE8qsGnvgQR13DITRvCL8 SUWosHnmoY/WI0yBW8DhjMJ0ObrFcwH1PCXKiqb7x+cFw9uEXZCsnH/xucT1RJsR C7L6aLOfo4btBrMreGcZLhT+YiK45Z+xng+b30nE6h2lyJAv+R+1I9ZFQa5HnXxc e2QzKMkEs+q/RpILfEri28NA//jv3YSIUGdD2kUrt059EZuWEiRZ0px87Ve1Nf2a z+aXOhCie9AfVVvXAZ7l1P25zUHB2/WoESzKqSO4yNA9Avwbq2asYvgMyOIZXVbT z8MpG+0bq9sTRHz5hoixS4q12xbQHlzc -----END CERTIFICATE-----Generated at Thu Jul 3 23:00:41 2025 by rpki-client