$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json) Hash identifier: 13yQUc+2mLuSZPRM30knxgj0J+9YwlN+qLaWWq3oG5E= Subject key identifier: AF:95:DA:C8:FD:A2:A5:4A:6C:CA:6E:F3:1F:B3:2D:19:76:C5:E0:EA Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Certificate serial: 18F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft Manifest number: 18DE Signing time: Fri 22 Aug 2025 16:34:53 +0000 Manifest this update: Fri 22 Aug 2025 16:34:53 +0000 Manifest next update: Fri 29 Aug 2025 16:34:53 +0000 Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: 5JxG65FqiBE5jKseZd7srGP/oWt4O/n2NSvgXcm7XrQ=) 2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6391 (0x18f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Validity Not Before: Aug 22 16:34:53 2025 GMT Not After : Aug 29 16:34:53 2025 GMT Subject: CN=68a89c2d-6043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:0a:95:dc:fe:7f:91:1c:06:6b:e1:94:43: 5f:7d:31:ed:db:83:48:fb:6b:cf:bf:1e:4f:62:9d: 4a:e0:7d:4e:f3:2f:3a:a1:73:25:71:74:11:b1:4c: ca:22:5d:5c:dc:47:13:2e:3f:c4:eb:64:ee:33:0e: ef:e2:6d:cf:26:17:d4:23:6e:07:41:6d:0b:14:d3: 77:37:53:c5:cb:a5:1a:1a:c7:bf:d4:13:18:dd:ca: ae:44:45:9c:a2:45:2c:55:37:6f:7b:74:37:55:4c: 31:7b:60:5c:11:f8:b1:51:da:2c:27:88:c7:f0:a7: 7c:f1:05:d1:56:e0:65:55:15:db:3a:94:01:e8:aa: 4e:7d:8a:1a:9d:6d:df:8a:c5:4e:b7:c8:57:ce:83: d5:2f:9e:4b:2c:59:f6:8e:02:80:c9:82:82:0e:86: 42:2a:b2:34:29:82:c6:9d:91:0b:08:69:df:86:d2: 8a:de:c2:50:b9:59:65:64:6b:57:c5:58:60:5d:d7: b9:30:f9:58:a5:0f:f9:c7:33:34:bc:47:9c:d2:d0: b5:20:51:54:26:33:aa:2f:95:f3:db:81:cf:0e:d8: 6a:77:4a:60:c5:cf:b2:94:68:c5:28:e1:90:20:a5: 19:06:48:02:1a:aa:16:98:61:5b:bc:c1:c6:e1:b8: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:95:DA:C8:FD:A2:A5:4A:6C:CA:6E:F3:1F:B3:2D:19:76:C5:E0:EA X509v3 Authority Key Identifier: keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:48:34:98:c1:7d:76:27:eb:3e:45:07:84:f1:a0:d1:fa:c6: 88:cb:54:15:3d:8a:ac:4b:0f:4a:98:29:49:d0:c7:fc:a3:2b: a4:fe:11:55:f5:b0:3d:0e:24:23:f7:ed:56:14:bc:f3:1b:69: 55:9b:6d:c8:f8:4b:68:8f:61:df:f1:b9:35:7e:16:20:bb:de: 77:d8:19:f0:d8:d5:fb:75:14:46:1d:c5:ec:6f:c4:79:31:eb: 3f:f2:c1:8c:3b:0f:e2:8b:a1:f3:6c:5e:ef:14:71:c8:9e:18: 5a:65:54:68:65:73:93:8c:a3:44:df:a6:44:a8:b4:2f:0a:a7: e0:34:33:47:e1:bc:cb:97:c2:e2:f0:f8:43:ab:d4:43:f8:47: d7:ed:5e:77:56:3d:cc:ce:a6:6a:f4:94:24:e3:35:bc:61:0b: bd:8d:38:12:e3:a6:6f:ad:ea:20:ee:97:12:17:14:99:10:80: 00:11:ba:16:00:64:ea:e3:3e:28:62:5a:3e:40:aa:d2:0b:0c: 1e:58:b9:6c:a8:61:32:d1:a8:ca:df:76:f9:a3:a6:cb:fc:e6: 95:f5:42:40:6b:80:02:e6:59:5f:7b:13:f0:33:ab:50:03:f6: de:f5:5c:82:1b:72:e9:1f:f8:39:e7:46:57:fe:f4:f0:1b:3a: 96:bb:c2:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG OTc3Rjc4Q0UwHhcNMjUwODIyMTYzNDUzWhcNMjUwODI5MTYzNDUzWjAYMRYwFAYD VQQDEw02OGE4OWMyZC02MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApk0Kldz+f5EcBmvhlENffTHt24NI+2vPvx5PYp1K4H1O8y86oXMlcXQRsUzK Il1c3EcTLj/E62TuMw7v4m3PJhfUI24HQW0LFNN3N1PFy6UaGse/1BMY3cquREWc okUsVTdve3Q3VUwxe2BcEfixUdosJ4jH8Kd88QXRVuBlVRXbOpQB6KpOfYoanW3f isVOt8hXzoPVL55LLFn2jgKAyYKCDoZCKrI0KYLGnZELCGnfhtKK3sJQuVllZGtX xVhgXde5MPlYpQ/5xzM0vEec0tC1IFFUJjOqL5Xz24HPDthqd0pgxc+ylGjFKOGQ IKUZBkgCGqoWmGFbvMHG4bhGpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+V2sj9 oqVKbMpu8x+zLRl2xeDqMB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5 M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl NHZITmFXdUNtNjc1ZF9lTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjSDSYwX12J+s+RQeE8aDR+saIy1QVPYqsSw9KmClJ0Mf8oyuk/hFV 9bA9DiQj9+1WFLzzG2lVm23I+Etoj2Hf8bk1fhYgu9532Bnw2NX7dRRGHcXsb8R5 Mes/8sGMOw/ii6HzbF7vFHHInhhaZVRoZXOTjKNE36ZEqLQvCqfgNDNH4bzLl8Li 8PhDq9RD+EfX7V53Vj3MzqZq9JQk4zW8YQu9jTgS46Zvreog7pcSFxSZEIAAEboW AGTq4z4oYlo+QKrSCwweWLlsqGEy0ajK33b5o6bL/OaV9UJAa4AC5llfexPwM6tQ A/be9VyCG3LpH/g550ZX/vTwGzqWu8IE -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:05 2025 by rpki-client