$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: tyCf1J/H6CG23kK6egYo8pWXqZT3/Mdb/AgOq1yOdUo= Subject key identifier: 2B:F9:10:44:77:6A:77:A3:1B:29:59:C5:7D:C4:08:1B:42:78:03:89 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 041A Signing time: Sat 23 Aug 2025 00:38:31 +0000 Manifest this update: Sat 23 Aug 2025 00:38:30 +0000 Manifest next update: Sat 30 Aug 2025 00:38:30 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: myG8SfyutOvncElM/5CKmBtR/WZeIbCB4vropuplqbE=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Aug 23 00:38:30 2025 GMT Not After : Aug 30 00:38:30 2025 GMT Subject: CN=68a90d86-e396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:fb:65:d9:45:5c:a2:30:69:b6:32:45:c3: e8:87:db:d7:53:9e:c1:ca:7b:f6:74:22:87:64:a5: 6d:69:18:ee:a4:19:54:8d:e9:34:62:ce:df:55:27: 1e:79:70:ec:21:9e:55:4a:e0:29:ed:99:37:98:42: 83:5d:bc:37:68:29:8b:0d:e6:a4:75:29:2e:b5:ce: a3:be:7d:f3:85:08:4b:1b:5a:12:a4:f7:21:06:de: 9c:d9:25:bf:37:8e:06:bf:66:b0:89:b6:2d:dc:e7: 60:9e:7c:a0:6f:2d:fb:61:e2:44:4c:03:8e:e9:c8: eb:a1:e8:36:f4:f6:53:4a:ff:3a:9e:de:19:f2:26: 2d:5a:2f:d6:01:6d:0b:56:5f:42:82:30:40:98:df: d8:c2:1b:18:eb:69:9f:9f:7d:6a:a1:15:d5:9c:5c: a8:26:5b:7d:d0:5d:b5:ad:aa:6a:e4:9a:18:b4:db: af:f6:2c:32:fa:62:7d:bb:31:ab:58:91:96:13:5f: 58:b5:7f:ff:10:04:a7:b7:da:72:62:8b:4b:63:2a: f9:41:22:1e:56:e5:24:5b:da:d7:34:43:71:dc:03: e1:0e:80:a8:bb:26:05:fd:8c:90:a0:d5:89:a4:3e: 54:6f:71:5f:19:e5:c2:8e:fd:79:ed:e4:c4:9d:b2: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:10:44:77:6A:77:A3:1B:29:59:C5:7D:C4:08:1B:42:78:03:89 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:21:d0:db:b0:1d:3e:fb:e6:c9:e1:7d:71:f1:86:3d:e7:c2: ad:43:48:52:c0:e4:da:c8:31:a6:51:fd:ec:ca:da:e6:5c:85: 60:e6:4a:b3:02:fb:38:8e:95:38:a2:93:6e:47:76:09:ad:05: b6:2e:8f:26:07:d1:8b:b8:0b:d9:0a:d9:7b:b3:71:74:94:cc: c1:d6:af:89:c2:3d:78:a0:f8:87:4e:ef:1b:dd:ab:ac:84:47: 3c:55:94:e1:6b:28:42:1e:98:3b:af:01:ab:86:9a:4f:17:5a: 72:80:4e:50:97:a2:39:aa:27:e5:0e:6b:f6:3d:2a:34:2a:d3: 18:d7:e1:ec:2f:7f:55:27:c2:75:cb:b6:5a:27:60:23:0d:a7: 61:2c:5c:4e:32:30:73:dd:76:d2:b6:6f:86:5f:7c:72:80:61: f8:a4:eb:ce:37:bb:a8:b3:07:67:53:b8:2f:a0:4f:ef:38:55: aa:67:66:f5:6c:97:99:75:43:68:51:05:28:b8:d1:bc:0c:4e: b0:cf:3e:97:bb:7f:e6:6a:b4:45:49:26:76:dc:ab:d3:f7:d4: 5b:33:3e:a1:4c:4c:38:47:56:f3:54:34:0c:4a:d5:23:20:3e: cd:7a:e5:33:1b:35:87:0b:aa:d5:ee:19:7e:ea:b7:da:fc:07: b9:d8:14:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwODIzMDAzODMwWhcNMjUwODMwMDAzODMwWjAYMRYwFAYD VQQDEw02OGE5MGQ4Ni1lMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9X7ZdlFXKIwabYyRcPoh9vXU57Bynv2dCKHZKVtaRjupBlUjek0Ys7fVSce eXDsIZ5VSuAp7Zk3mEKDXbw3aCmLDeakdSkutc6jvn3zhQhLG1oSpPchBt6c2SW/ N44Gv2awibYt3Odgnnygby37YeJETAOO6cjroeg29PZTSv86nt4Z8iYtWi/WAW0L Vl9CgjBAmN/YwhsY62mfn31qoRXVnFyoJlt90F21rapq5JoYtNuv9iwy+mJ9uzGr WJGWE19YtX//EASnt9pyYotLYyr5QSIeVuUkW9rXNENx3APhDoCouyYF/YyQoNWJ pD5Ub3FfGeXCjv157eTEnbK/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv5EER3 anejGylZxX3ECBtCeAOJMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvIdDbsB0+++bJ4X1x8YY958KtQ0hSwOTayDGmUf3sytrmXIVg5kqz Avs4jpU4opNuR3YJrQW2Lo8mB9GLuAvZCtl7s3F0lMzB1q+Jwj14oPiHTu8b3aus hEc8VZThayhCHpg7rwGrhppPF1pygE5Ql6I5qiflDmv2PSo0KtMY1+HsL39VJ8J1 y7ZaJ2AjDadhLFxOMjBz3XbStm+GX3xygGH4pOvON7uoswdnU7gvoE/vOFWqZ2b1 bJeZdUNoUQUouNG8DE6wzz6Xu3/marRFSSZ23KvT99RbMz6hTEw4R1bzVDQMStUj ID7NeuUzGzWHC6rV7hl+6rfa/Ae52BSC -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:02 2025 by rpki-client