$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: kalOViYpfE/G6t05uYFcFls+BHaqx/nGoo0oTdKrjpw= Subject key identifier: 48:CC:C7:6D:CF:1F:EC:78:FF:93:F8:B4:FB:82:50:95:D5:8E:6B:0F Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 4D Signing time: Sat 23 Aug 2025 07:37:32 +0000 Manifest this update: Sat 23 Aug 2025 07:37:32 +0000 Manifest next update: Sat 30 Aug 2025 07:37:32 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: iaP03olZQHWOXKCSYU1ixNfTXG/0G2vxw+N6O2cNqa8=) 2: D423FF3255D411F0A743B457C4F9AE02.roa (hash: v1dnvMV2G1LRQxFOyJdmR+0lqbg+Qd+ZULe9l5QIfdw=) 3: 31C546AE55DB11F0A92F4D10C4F9AE02.roa (hash: /yKnVvqDpWECQg/svbyb0nTDVO6+tTtGiQ1ZiVTs69U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Aug 23 07:37:32 2025 GMT Not After : Aug 30 07:37:32 2025 GMT Subject: CN=68a96fbc-6dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:70:97:de:c6:74:c8:86:ea:a3:4a:14:8d: 13:45:50:98:6f:9e:c0:29:92:44:61:26:8c:5f:85: 94:07:d7:12:4d:81:9c:de:38:cb:90:35:25:47:fb: 7c:bc:3d:1c:10:9c:e6:1b:c8:a3:42:89:da:c2:ce: 41:48:25:9b:07:16:36:23:e4:3b:f5:a7:c2:05:e3: cd:21:b0:8b:5b:2f:10:22:d0:c8:11:20:e6:0c:87: 3e:a2:3e:aa:73:e7:74:f2:02:a0:96:9c:b8:27:7c: 14:75:01:8a:8c:58:44:4c:42:e5:da:3f:10:a3:49: 01:51:73:3d:c4:f1:9e:55:ea:1f:c2:e0:2a:a8:f2: 0b:31:4a:3b:e6:a9:14:13:6d:c8:d7:2a:a2:fa:f9: 23:4f:5e:df:31:34:41:c2:cc:38:8b:62:1c:3b:4e: 4b:ea:47:7b:3e:96:e6:e7:d8:7a:9b:54:10:38:76: eb:0b:4c:65:14:a8:cb:46:59:59:5e:08:68:96:15: 85:45:e2:6a:d8:fb:ff:bf:b2:be:ab:4b:80:10:fb: e7:73:9a:31:fe:be:f7:3b:12:17:7f:84:e8:07:72: 9c:5e:92:71:55:31:de:72:e4:fb:d0:70:7b:91:43: ca:6b:2c:78:57:bd:b1:97:1c:a8:2d:59:ff:86:ec: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CC:C7:6D:CF:1F:EC:78:FF:93:F8:B4:FB:82:50:95:D5:8E:6B:0F X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:49:2f:de:a4:2b:36:57:c7:91:70:89:34:db:71:34:3e:25: a2:0a:94:ff:0a:ad:3c:6f:40:0a:92:f5:44:65:90:05:c0:31: d6:39:99:a3:2f:39:9e:d6:93:4a:10:16:51:6d:cd:f6:15:90: e3:e0:52:5a:c3:26:98:39:7a:45:18:cd:05:ac:69:d6:b3:35: 42:69:8d:29:b6:c4:c6:29:46:91:6c:cd:37:5b:ac:5b:8b:86: d1:e8:f1:8c:a8:d2:65:1a:d7:90:ac:7e:23:17:92:96:22:99: 10:23:55:2c:38:e2:f6:1c:a8:bd:ce:6b:ac:63:57:e5:ea:a1: 06:dc:d4:2f:e1:c6:e8:94:ec:60:6a:c3:46:87:6d:5f:4d:ee: 19:33:6a:aa:2c:1a:d6:ea:25:d0:77:bf:b7:96:8f:10:8e:03: cc:75:f7:23:2c:fb:42:34:9b:9c:a2:f1:89:51:00:2d:d8:1c: 91:91:57:3c:cc:7c:5e:da:bf:05:65:69:da:a6:15:39:27:67: f5:d2:d3:d4:8b:67:b6:73:85:09:e4:55:b6:3d:93:b5:b4:8f: 21:3b:27:cb:98:45:f2:f6:ff:87:4f:d2:7e:e2:ca:1e:2a:8e: b1:46:33:55:92:7e:90:54:a1:a8:ca:2b:4c:c0:5a:bc:91:7d: 10:78:e8:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA4MjMwNzM3MzJaFw0yNTA4MzAwNzM3MzJaMBgxFjAUBgNV BAMTDTY4YTk2ZmJjLTZkY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+W3CX3sZ0yIbqo0oUjRNFUJhvnsApkkRhJoxfhZQH1xJNgZzeOMuQNSVH+3y8 PRwQnOYbyKNCidrCzkFIJZsHFjYj5Dv1p8IF480hsItbLxAi0MgRIOYMhz6iPqpz 53TyAqCWnLgnfBR1AYqMWERMQuXaPxCjSQFRcz3E8Z5V6h/C4Cqo8gsxSjvmqRQT bcjXKqL6+SNPXt8xNEHCzDiLYhw7TkvqR3s+lubn2HqbVBA4dusLTGUUqMtGWVle CGiWFYVF4mrY+/+/sr6rS4AQ++dzmjH+vvc7Ehd/hOgHcpxeknFVMd5y5PvQcHuR Q8prLHhXvbGXHKgtWf+G7BBfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSMzHbc8f 7Hj/k/i0+4JQldWOaw8wHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMJJL96kKzZXx5FwiTTbcTQ+JaIKlP8KrTxvQAqS9URlkAXAMdY5maMv OZ7Wk0oQFlFtzfYVkOPgUlrDJpg5ekUYzQWsadazNUJpjSm2xMYpRpFszTdbrFuL htHo8Yyo0mUa15CsfiMXkpYimRAjVSw44vYcqL3Oa6xjV+XqoQbc1C/hxuiU7GBq w0aHbV9N7hkzaqosGtbqJdB3v7eWjxCOA8x19yMs+0I0m5yi8YlRAC3YHJGRVzzM fF7avwVladqmFTknZ/XS09SLZ7ZzhQnkVbY9k7W0jyE7J8uYRfL2/4dP0n7iyh4q jrFGM1WSfpBUoajKK0zAWryRfRB46MU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:52 2025 by rpki-client