$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: 39j24iahCbDzHiNKzGV2FERdJJkV12uWmk7TQWdBa2A= Subject key identifier: BB:49:BC:D2:09:91:9A:E3:0E:3F:93:5A:90:DA:CB:74:38:AB:B7:5A Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 078D Signing time: Wed 02 Jul 2025 21:57:30 +0000 Manifest this update: Wed 02 Jul 2025 21:57:30 +0000 Manifest next update: Wed 09 Jul 2025 21:57:30 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 5qwIKSF+LenMCDvWpzN3USe3t9cc2JKn0bDK3ZuoXH8=) 2: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (hash: +ewFxwgws96qZb42iktranHuo6xk0cnwygWmXyUhbEc=) 3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Jul 2 21:57:30 2025 GMT Not After : Jul 9 21:57:30 2025 GMT Subject: CN=6865ab4a-aef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:4a:b7:79:7e:19:20:fe:80:54:20:6a:a2: 05:3c:5c:80:53:70:8e:68:f7:38:a8:80:9b:67:5b: 9b:24:eb:35:5b:12:4d:dc:fc:6b:88:bc:d7:bf:9e: 3f:b0:7f:f9:bd:69:d4:07:9d:07:22:13:c7:74:93: 1b:9d:8c:ca:4e:14:64:b0:32:73:5c:b4:77:e8:a3: e4:6b:f7:4d:69:51:5c:6f:a1:84:97:de:21:ac:38: 29:c5:d9:43:3e:52:84:ed:c5:40:29:df:5f:fb:17: 5c:ae:07:7b:e8:ab:1f:da:31:af:04:2e:1a:36:2f: fa:f4:85:ee:16:9a:d6:30:42:6d:2c:61:4a:a2:e5: e5:4e:2d:87:1d:95:97:b1:d2:15:68:ab:8e:82:c0: e0:35:ba:50:be:31:95:22:28:b4:dd:92:cf:c6:02: 2e:66:7c:29:b7:1c:d3:fe:a7:c3:22:9c:29:34:45: 04:da:43:e8:5a:a8:74:fc:19:0e:9b:68:36:5e:e2: c5:3c:aa:e5:02:eb:09:62:e7:41:d1:b6:1c:dd:7b: d8:b3:69:85:95:7c:b6:a9:13:ed:ba:6d:d4:8a:58: 1b:d1:b3:3c:7a:d1:70:fb:4d:a9:ce:7c:00:15:f7: d9:b8:2f:6b:8e:3d:d9:88:a7:0f:6e:c2:80:35:1b: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:BC:D2:09:91:9A:E3:0E:3F:93:5A:90:DA:CB:74:38:AB:B7:5A X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:62:44:2e:e3:c0:d0:86:43:0b:44:85:78:77:15:de:43:1a: 32:a2:03:82:e9:a2:25:cd:58:32:e1:11:c0:3a:29:72:77:21: 06:a5:c5:d1:e0:07:7e:35:a4:0d:b2:d3:b4:a8:15:61:f6:ec: f0:ea:9a:a4:df:8c:96:79:1f:2c:46:01:07:2f:09:3d:dd:a3: 9d:31:1f:3e:93:de:c7:63:a6:d2:25:86:0d:12:08:1a:a6:52: ea:4f:56:58:55:f5:2b:61:67:71:89:c9:97:62:f1:0b:fa:2b: 4f:ae:b4:3f:cc:3f:51:63:a0:6d:8c:e3:fe:ca:dc:cf:75:51: bd:26:f7:ec:88:4f:99:0b:73:6e:12:80:31:a2:1d:99:ad:7a: 16:30:67:8e:6d:0b:47:fd:ed:5d:c2:0b:d4:20:dc:16:6c:ca: 5c:7f:61:55:a4:fe:8e:c1:7d:af:32:7c:c1:69:93:ed:31:6f: e5:2c:cd:0e:54:27:e9:03:cc:23:c9:cb:de:04:ea:8f:af:59: bf:c0:03:53:b5:9d:7b:dc:2f:a2:4c:24:9d:98:69:03:a3:d2: 22:bc:df:52:c4:c0:81:72:04:2e:5e:c4:c6:2a:7f:54:16:4c: ec:f1:26:64:ef:15:10:e7:39:c1:f7:30:b2:4f:e4:e9:de:4d: 21:89:9c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwNzAyMjE1NzMwWhcNMjUwNzA5MjE1NzMwWjAYMRYwFAYD VQQDEw02ODY1YWI0YS1hZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs79Kt3l+GSD+gFQgaqIFPFyAU3COaPc4qICbZ1ubJOs1WxJN3PxriLzXv54/ sH/5vWnUB50HIhPHdJMbnYzKThRksDJzXLR36KPka/dNaVFcb6GEl94hrDgpxdlD PlKE7cVAKd9f+xdcrgd76Ksf2jGvBC4aNi/69IXuFprWMEJtLGFKouXlTi2HHZWX sdIVaKuOgsDgNbpQvjGVIii03ZLPxgIuZnwptxzT/qfDIpwpNEUE2kPoWqh0/BkO m2g2XuLFPKrlAusJYudB0bYc3XvYs2mFlXy2qRPtum3Uilgb0bM8etFw+02pznwA FffZuC9rjj3ZiKcPbsKANRsFdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtJvNIJ kZrjDj+TWpDay3Q4q7daMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJYkQu48DQhkMLRIV4dxXeQxoyogOC6aIlzVgy4RHAOilydyEGpcXR 4Ad+NaQNstO0qBVh9uzw6pqk34yWeR8sRgEHLwk93aOdMR8+k97HY6bSJYYNEgga plLqT1ZYVfUrYWdxicmXYvEL+itPrrQ/zD9RY6BtjOP+ytzPdVG9JvfsiE+ZC3Nu EoAxoh2ZrXoWMGeObQtH/e1dwgvUINwWbMpcf2FVpP6OwX2vMnzBaZPtMW/lLM0O VCfpA8wjycveBOqPr1m/wANTtZ173C+iTCSdmGkDo9IivN9SxMCBcgQuXsTGKn9U Fkzs8SZk7xUQ5znB9zCyT+Tp3k0hiZzg -----END CERTIFICATE-----Generated at Thu Jul 3 18:06:35 2025 by rpki-client