$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json) Hash identifier: akrU9M5zAIeBmBFMETb4ps+lGU3KhfKtj6nYP7Fmn+Y= Subject key identifier: 14:37:65:48:B7:1C:73:19:71:F1:11:10:AB:CC:F0:0D:C0:73:28:D7 Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft Manifest number: 6F Signing time: Sat 23 Aug 2025 07:10:26 +0000 Manifest this update: Sat 23 Aug 2025 07:10:26 +0000 Manifest next update: Sat 30 Aug 2025 07:10:26 +0000 Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: DYFP223nyjke4J+D1QkE81l+evQqfPJustQh2dVX4ko=) 2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: K71+YfyZb/sq1ejJDvO1hCnjvjzaiRU1ev/4lLqwtW0=) 3: 1BE631B0668C11F092BB0479C4F9AE02.roa (hash: 889zGZBsMfgV1bTIc5AsOgt3rk6bmVAUBCLPcamrp9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Validity Not Before: Aug 23 07:10:26 2025 GMT Not After : Aug 30 07:10:26 2025 GMT Subject: CN=68a96962-6b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:0d:5d:51:e0:ca:28:4a:61:c0:0f:cb:d2: 00:25:fe:a2:d9:b4:f1:90:eb:9f:da:d9:6e:9c:79: a7:f2:49:87:38:0e:fc:09:5f:1d:8f:2d:ca:ee:76: 74:26:49:37:a1:2c:ea:09:1d:61:e8:17:6d:1a:c9: 47:39:99:bb:93:c5:2e:80:70:31:63:ef:a3:ac:55: bd:d2:a8:d4:a2:89:b7:f9:1c:22:66:72:da:eb:5f: e6:be:44:c9:84:ae:62:66:28:8c:9c:2f:96:fa:f8: 8d:27:00:65:c6:cb:80:ea:bf:46:2f:20:75:11:48: cd:75:b1:26:2f:d7:de:8a:58:ee:55:bb:2f:71:e2: f2:f6:81:36:20:1d:42:1b:8f:d0:01:81:22:54:58: 66:c0:53:5b:2a:e5:83:9e:3c:d5:62:f3:47:10:6d: e6:48:a8:95:6d:20:a4:07:76:53:32:07:af:70:2a: 69:ea:0b:c7:45:44:20:53:6d:37:86:a5:8d:81:fa: 5a:52:e1:af:0e:44:8a:28:77:d2:33:d2:46:3c:15: 29:92:30:59:3f:e6:ef:4a:a9:e2:dd:e0:13:4b:5b: 54:45:06:73:88:1a:43:82:cc:e4:2a:50:b3:1c:ac: 9f:e5:d8:58:55:70:b6:6c:04:f0:33:72:a5:c4:c1: f9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:65:48:B7:1C:73:19:71:F1:11:10:AB:CC:F0:0D:C0:73:28:D7 X509v3 Authority Key Identifier: keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c6:ae:da:40:34:5f:ed:3f:8e:d3:75:b8:8d:60:49:3f:4e: d1:1e:55:db:9f:5c:95:4b:71:c2:f7:0d:40:ed:83:4c:e1:24: 5e:e8:b8:2b:6d:83:e3:8e:48:9b:bc:ee:ca:15:a7:a8:f4:17: 35:e9:03:03:79:be:36:4f:82:43:62:35:79:67:02:db:ae:3d: 60:cd:d7:b2:3e:ca:26:0a:1f:c2:fd:be:0d:1c:f7:93:08:cf: b5:e8:7f:81:a5:30:f2:e3:c1:e8:36:f7:9b:85:cd:ef:f1:a6: cb:97:06:85:27:25:00:86:4c:09:d3:1f:b4:d6:58:78:2b:0e: d6:c6:e7:66:6e:ef:d6:32:07:89:28:12:cc:be:a9:58:26:37: f4:eb:11:be:15:7b:e8:93:f8:0b:ec:36:b1:77:d0:f2:c0:9c: 7e:e1:36:01:d6:85:22:10:eb:65:50:18:9c:32:58:3f:2b:a3: 30:94:64:6c:48:d8:9c:64:ae:26:fa:38:65:86:c5:bc:cc:53: 23:7d:58:42:48:71:ea:8f:00:cc:1c:40:6c:89:db:b9:04:8c: fc:d6:99:7c:d6:88:7e:ef:33:85:cf:a1:9c:b8:4a:f0:d4:41: 19:47:11:26:c1:dc:53:93:2b:5f:9d:18:a7:a1:2d:a6:12:d5: ab:30:26:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEE0NjExMC8GA1UEBRMoQTg4RUUyM0ZGOEQ3MDgyOENFREJDNzAxRTc4QzgwNzQ3 RkZDMTFDQTAeFw0yNTA4MjMwNzEwMjZaFw0yNTA4MzAwNzEwMjZaMBgxFjAUBgNV BAMTDTY4YTk2OTYyLTZiODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbNw1dUeDKKEphwA/L0gAl/qLZtPGQ65/a2W6ceafySYc4DvwJXx2PLcrudnQm STehLOoJHWHoF20ayUc5mbuTxS6AcDFj76OsVb3SqNSiibf5HCJmctrrX+a+RMmE rmJmKIycL5b6+I0nAGXGy4Dqv0YvIHURSM11sSYv196KWO5Vuy9x4vL2gTYgHUIb j9ABgSJUWGbAU1sq5YOePNVi80cQbeZIqJVtIKQHdlMyB69wKmnqC8dFRCBTbTeG pY2B+lpS4a8ORIood9Iz0kY8FSmSMFk/5u9KqeLd4BNLW1RFBnOIGkOCzOQqULMc rJ/l2FhVcLZsBPAzcqXEwfmRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFDdlSLcc cxlx8REQq8zwDcBzKNcwHwYDVR0jBBgwFoAUqI7iP/jXCCjO28cB54yAdH/8Ecow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QTQ2L0Q2NEU1QTdFREM4 NDExRUZCOTA4NTAzQkM0RjlBRTAyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUk3aVBfalhDQ2pPMjhjQjU0eUFkSF84RWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 QTQ2L0Q2NEU1QTdFREM4NDExRUZCOTA4NTAzQkM0RjlBRTAyL3FJN2lQX2pYQ0Nq TzI4Y0I1NHlBZEhfOEVjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLGrtpANF/tP47TdbiNYEk/TtEeVdufXJVLccL3DUDtg0zhJF7ouCtt g+OOSJu87soVp6j0FzXpAwN5vjZPgkNiNXlnAtuuPWDN17I+yiYKH8L9vg0c95MI z7Xof4GlMPLjweg295uFze/xpsuXBoUnJQCGTAnTH7TWWHgrDtbG52Zu79YyB4ko Esy+qVgmN/TrEb4Ve+iT+AvsNrF30PLAnH7hNgHWhSIQ62VQGJwyWD8rozCUZGxI 2Jxkrib6OGWGxbzMUyN9WEJIceqPAMwcQGyJ27kEjPzWmXzWiH7vM4XPoZy4SvDU QRlHESbB3FOTK1+dGKehLaYS1aswJl4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:37 2025 by rpki-client