$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: xLdgmDIj5uFTx22iS1sokCaSmIt2lJnHcX4SVjjGcPg= Subject key identifier: 1D:0C:1F:CE:3A:96:9B:A4:FE:DA:9C:29:1B:43:9C:97:CC:3C:59:26 Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: DD Signing time: Sat 23 Aug 2025 05:40:44 +0000 Manifest this update: Sat 23 Aug 2025 05:40:43 +0000 Manifest next update: Sat 30 Aug 2025 05:40:43 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: DzGhD84l1KZ5TUOdTKfvjIAbU0fXXWiY3tUK/k+36Y0=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: V+nudqfqbNoV97hl4ZZQ3M1A1LzH6OKD9ocfKTUUibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Aug 23 05:40:43 2025 GMT Not After : Aug 30 05:40:43 2025 GMT Subject: CN=68a9545b-5a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:bf:59:3f:c5:d7:fb:16:d9:aa:95:b0:fb: e8:04:1d:31:4a:92:bd:97:ba:52:6d:43:06:52:1a: 14:e7:ca:17:01:3f:e7:fe:ba:74:94:e3:22:90:22: e5:07:df:3f:4e:6d:19:46:38:b5:fb:40:aa:76:fb: 1a:f7:98:1f:4c:92:d3:fc:48:95:d4:dc:87:1a:f1: b7:c7:88:7f:fc:4b:7b:73:79:08:9d:f5:3b:7e:cb: 18:54:c5:93:41:66:8c:16:ce:76:b5:2e:f4:3b:96: f9:57:5f:e8:bf:fa:6d:90:f2:34:ea:29:8a:dd:1d: 45:8b:cc:e7:eb:d8:35:b0:28:65:e9:a6:93:db:90: cb:7f:6f:7e:7c:52:d8:ba:6a:39:37:06:23:b2:8e: 40:59:a4:4a:8a:2a:d7:6a:ff:b5:a3:ae:49:b1:53: 6f:9d:08:4f:00:3a:f1:78:04:f8:76:1f:f5:7e:bc: 9d:93:f9:03:fd:7f:19:1e:04:1a:b4:f8:ef:4a:02: d2:d2:f0:e4:4d:1a:d8:b9:dc:9c:fa:d7:a5:4f:e2: de:10:da:7d:06:ed:ad:48:ea:b1:d8:95:75:f6:39: 8e:df:bf:87:10:f4:09:a7:f7:8a:1e:d4:c1:55:63: e9:0e:bb:8c:7a:37:4b:2e:4f:62:61:dd:0e:7b:58: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:1F:CE:3A:96:9B:A4:FE:DA:9C:29:1B:43:9C:97:CC:3C:59:26 X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:1e:66:b7:86:ca:70:5d:e4:4f:a8:4f:7c:93:c0:61:64: 1d:f5:3f:8e:19:9b:d3:92:6c:19:50:41:e6:63:38:ad:59:fa: 6b:e6:d2:98:d6:3a:7a:0d:b9:b5:a7:09:1a:dd:3a:97:0e:fe: 3d:bf:a0:15:42:24:a9:9a:84:bb:8f:cd:6d:56:c8:78:61:9c: 10:90:c5:7f:08:e8:67:bf:5c:d6:86:a0:4a:4c:ac:06:79:8d: 79:e9:7e:13:2b:58:d9:27:61:4a:7e:1e:73:13:34:4a:d2:eb: d1:33:e0:57:a2:ad:09:0a:e3:31:32:3a:48:85:26:ab:54:34: f5:18:3a:f7:4c:53:ea:1c:69:8e:37:af:f7:8e:dc:48:eb:c8: 89:3f:e1:a0:e0:e8:af:58:ac:ca:85:82:a0:ca:85:84:51:a2: 0c:4d:c5:bc:37:92:47:e7:08:6b:e7:73:85:00:cc:39:59:12: ea:4c:a7:9f:9b:81:12:22:e3:e0:3f:a3:d8:24:50:c6:d6:b0: e6:3b:01:18:6f:4c:1c:8c:bf:7f:bf:dd:84:48:69:e6:c0:5b: 95:44:61:57:6a:a1:05:0a:2d:5d:91:bc:b6:74:3e:f5:17:bc: 83:31:ed:cd:93:3c:1e:79:6a:a5:44:e9:26:8d:62:f9:a5:86: db:93:7f:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC RkZENENDQjYwHhcNMjUwODIzMDU0MDQzWhcNMjUwODMwMDU0MDQzWjAYMRYwFAYD VQQDEw02OGE5NTQ1Yi01YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F+/WT/F1/sW2aqVsPvoBB0xSpK9l7pSbUMGUhoU58oXAT/n/rp0lOMikCLl B98/Tm0ZRji1+0Cqdvsa95gfTJLT/EiV1NyHGvG3x4h//Et7c3kInfU7fssYVMWT QWaMFs52tS70O5b5V1/ov/ptkPI06imK3R1Fi8zn69g1sChl6aaT25DLf29+fFLY umo5NwYjso5AWaRKiirXav+1o65JsVNvnQhPADrxeAT4dh/1frydk/kD/X8ZHgQa tPjvSgLS0vDkTRrYudyc+telT+LeENp9Bu2tSOqx2JV19jmO37+HEPQJp/eKHtTB VWPpDruMejdLLk9iYd0Oe1hcJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0MH846 lpuk/tqcKRtDnJfMPFkmMB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6 TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJrR5mt4bKcF3kT6hPfJPAYWQd9T+OGZvTkmwZUEHmYzitWfpr5tKY 1jp6Dbm1pwka3TqXDv49v6AVQiSpmoS7j81tVsh4YZwQkMV/COhnv1zWhqBKTKwG eY156X4TK1jZJ2FKfh5zEzRK0uvRM+BXoq0JCuMxMjpIhSarVDT1GDr3TFPqHGmO N6/3jtxI68iJP+Gg4OivWKzKhYKgyoWEUaIMTcW8N5JH5whr53OFAMw5WRLqTKef m4ESIuPgP6PYJFDG1rDmOwEYb0wcjL9/v92ESGnmwFuVRGFXaqEFCi1dkby2dD71 F7yDMe3NkzweeWqlROkmjWL5pYbbk3/P -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:37 2025 by rpki-client