$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: FQTLNPLUxdRtj5OjuTI9u2qwoOemtg/+9c7LcMUuaDo= Subject key identifier: 5F:98:B0:D4:D2:E0:BC:6A:1B:FE:97:85:C8:C3:7B:85:F5:8E:87:26 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 0400 Signing time: Thu 03 Jul 2025 00:50:25 +0000 Manifest this update: Thu 03 Jul 2025 00:50:25 +0000 Manifest next update: Thu 10 Jul 2025 00:50:25 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: lC/l+casJ4zLurc0Nk+vmqqGSRZy7xkg5/iJRqZii0s=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Jul 3 00:50:25 2025 GMT Not After : Jul 10 00:50:25 2025 GMT Subject: CN=6865d3d1-d20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:5f:0a:59:b6:23:50:ec:69:5e:c9:8d:31: 49:57:d3:52:6b:b0:f2:c2:c9:85:95:49:67:7c:5e: 45:cd:b7:9b:00:3b:41:0d:ec:b7:25:bc:06:cd:d4: 4c:6b:62:b2:82:b7:54:16:3a:3b:b2:a4:b8:bc:59: 5b:54:f0:ac:dc:68:24:42:15:a8:05:3e:93:3e:22: b6:e7:40:7e:63:0f:55:e5:d2:87:30:c1:ff:ec:70: b1:88:88:9c:f6:2e:76:c1:62:dd:f4:90:6f:70:fe: f8:9a:10:70:54:c7:c6:e0:7c:78:31:5b:7b:81:42: 2a:0e:4d:0e:66:93:db:f6:95:e6:9a:32:c8:4f:a4: 4e:1e:4e:b3:d7:a7:a8:d2:20:ea:07:79:6c:1a:98: 2c:e3:93:23:13:41:4c:18:c8:da:62:1b:6e:1a:b6: fe:3a:4c:5d:a9:32:0d:b8:77:cb:e8:ac:8e:9d:cc: 76:a3:97:9c:ef:3f:01:4e:dd:2b:4c:a8:dd:a1:bb: 6d:11:ef:c1:15:fd:74:6c:cc:35:60:73:ed:f4:21: d3:10:df:97:df:95:91:95:23:8b:b9:dd:e2:80:ee: dc:00:4f:f7:94:68:2d:b4:fc:72:af:21:28:7f:74: 33:54:d0:52:cc:64:5a:5c:4e:f2:46:ec:e0:52:6a: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:98:B0:D4:D2:E0:BC:6A:1B:FE:97:85:C8:C3:7B:85:F5:8E:87:26 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d6:11:e3:70:e7:a9:55:b9:45:9e:44:4a:1a:89:f9:e5:9a: 6a:e4:a3:ed:82:ee:15:62:a8:9b:cf:0a:aa:98:65:76:3f:3b: 8c:0b:a2:a2:3c:61:03:25:5b:69:a5:dd:82:d1:c0:06:41:08: 6d:76:d3:07:72:5f:31:94:bf:c7:e6:d6:a9:40:ae:80:41:c9: d2:77:1f:54:92:ca:9f:10:a7:25:f8:fb:9b:8f:26:9a:82:ca: 5e:1e:85:29:6c:b5:4b:37:49:0d:5d:4f:1b:d8:12:60:ea:dc: c4:02:e4:c8:5e:56:8f:4f:47:8c:b4:f0:ab:a4:ff:6b:ec:25: 29:3f:62:1f:d2:52:6b:39:bc:4f:17:2f:2d:43:22:3d:90:93: bf:e7:1b:d2:b0:ba:1b:a1:a0:cb:1a:c3:9d:30:ab:90:c5:c4: b6:d1:62:40:d3:3d:15:8e:8a:8e:a8:90:42:f7:1e:4e:74:42: 9b:d9:0e:3e:97:f1:68:3d:88:1b:69:2e:11:0c:71:25:b7:ef: ff:b6:dc:2f:b3:cc:fc:2c:b9:de:bb:ea:67:e2:41:c9:93:aa: c4:48:fb:73:2a:59:d9:1f:10:8a:cf:70:d5:17:4b:1e:82:b8: ed:de:43:12:cd:ff:0f:76:52:35:d9:19:5e:9c:6f:88:eb:4e: 7f:cb:9b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwNzAzMDA1MDI1WhcNMjUwNzEwMDA1MDI1WjAYMRYwFAYD VQQDEw02ODY1ZDNkMS1kMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2ZfClm2I1DsaV7JjTFJV9NSa7DywsmFlUlnfF5FzbebADtBDey3JbwGzdRM a2KygrdUFjo7sqS4vFlbVPCs3GgkQhWoBT6TPiK250B+Yw9V5dKHMMH/7HCxiIic 9i52wWLd9JBvcP74mhBwVMfG4Hx4MVt7gUIqDk0OZpPb9pXmmjLIT6ROHk6z16eo 0iDqB3lsGpgs45MjE0FMGMjaYhtuGrb+OkxdqTINuHfL6KyOncx2o5ec7z8BTt0r TKjdobttEe/BFf10bMw1YHPt9CHTEN+X35WRlSOLud3igO7cAE/3lGgttPxyryEo f3QzVNBSzGRaXE7yRuzgUmriQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+YsNTS 4LxqG/6XhcjDe4X1jocmMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI1hHjcOepVblFnkRKGon55Zpq5KPtgu4VYqibzwqqmGV2PzuMC6Ki PGEDJVtppd2C0cAGQQhtdtMHcl8xlL/H5tapQK6AQcnSdx9UksqfEKcl+Pubjyaa gspeHoUpbLVLN0kNXU8b2BJg6tzEAuTIXlaPT0eMtPCrpP9r7CUpP2If0lJrObxP Fy8tQyI9kJO/5xvSsLoboaDLGsOdMKuQxcS20WJA0z0VjoqOqJBC9x5OdEKb2Q4+ l/FoPYgbaS4RDHElt+//ttwvs8z8LLneu+pn4kHJk6rESPtzKlnZHxCKz3DVF0se grjt3kMSzf8PdlI12RlenG+I605/y5vv -----END CERTIFICATE-----Generated at Thu Jul 3 15:24:33 2025 by rpki-client