$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: KW0+u5+Nc/cM1MMBDg8NdaY8AhCSig0F8UeUC5WJUbs= Subject key identifier: C2:D8:23:81:C6:6E:A7:34:06:95:3C:5D:CF:29:20:65:38:E5:BE:24 Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 0189 Signing time: Sat 23 Aug 2025 03:41:00 +0000 Manifest this update: Sat 23 Aug 2025 03:40:59 +0000 Manifest next update: Sat 30 Aug 2025 03:40:59 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: Rlf9oN9OQY4tbpxxWoJ/QCw5biGZkfkYA0E4AFnAEPk=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: 1i3jxewXcc2DZR9rHs9xsLpB1uq+KSefHPQwMlW+krU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Aug 23 03:40:59 2025 GMT Not After : Aug 30 03:40:59 2025 GMT Subject: CN=68a9384b-095a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:c7:a1:9f:64:be:20:a4:9a:15:17:e3:74: 8b:ee:5e:a4:5c:c3:64:6b:f0:fd:be:26:eb:18:ef: 49:47:53:42:0b:4d:e4:da:5f:25:6b:ff:30:80:9b: 8c:4d:67:89:19:c1:60:36:5e:33:51:a9:01:70:c0: 3e:a0:20:72:d1:19:be:fc:da:82:76:05:40:e3:55: 8a:67:8d:8f:b2:0a:16:57:0b:d2:34:70:21:a2:65: ba:82:44:89:cc:d4:e3:29:9f:e6:85:e7:4c:0b:08: cd:41:4d:50:d8:25:64:39:4f:b0:97:7a:11:6f:3a: eb:69:d6:f0:03:fe:2e:8c:12:68:0c:6b:b7:72:4b: 29:14:4d:fb:3a:c8:55:0e:1c:aa:6d:7c:e4:ac:11: 68:a1:1a:3f:e1:40:44:c2:b7:ac:7a:e4:0d:9d:d8: 79:4c:29:19:a9:2a:31:26:37:68:48:7b:2e:f5:03: 17:1d:1d:2a:7a:eb:16:bc:55:39:68:72:6d:b1:0d: e6:f5:f9:bd:47:92:97:2e:3b:85:b5:0d:05:79:6c: d0:38:b5:dd:5a:bb:31:9b:c5:5f:2f:28:9b:41:87: c0:4b:a7:42:f4:53:75:19:67:c2:c2:be:0b:1d:7f: 90:7f:24:a0:75:f3:cc:59:1e:57:27:cd:9c:4f:42: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:23:81:C6:6E:A7:34:06:95:3C:5D:CF:29:20:65:38:E5:BE:24 X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:fb:d7:41:19:89:dc:1c:6d:5a:5a:88:80:12:6b:af:29:e1: 60:30:1f:9c:f1:0c:3c:a7:54:db:4f:5c:8e:3d:fb:52:94:ec: 8c:60:9b:ea:22:83:29:c0:03:6a:ac:e9:67:2f:fc:64:ee:e1: b2:13:c0:51:a5:3e:29:7e:82:c2:9a:0e:e9:99:e1:df:37:b2: b6:a3:41:67:06:88:18:e5:57:0e:6f:1d:b1:f3:5a:dd:6f:08: 32:46:61:38:bd:ce:f4:17:1d:fe:3f:cb:9a:2a:1b:fa:5d:e2: 2f:a4:ec:aa:d1:c9:30:23:f5:e8:98:42:61:c1:44:4d:b0:2e: d7:bd:47:c9:bc:21:8f:bd:2d:14:88:29:92:ff:da:21:25:72: 8b:b6:ec:01:4c:39:0e:23:58:88:2d:60:83:3f:59:22:48:69: 2d:00:98:e3:05:67:72:60:84:e1:e5:4a:f8:b5:6f:cb:be:d2: 11:2b:56:00:f6:eb:82:77:db:5c:43:19:7c:86:4b:d1:91:a0: ea:83:f8:82:66:c4:a3:f0:e3:65:9e:e9:3e:9f:7a:d8:cb:32: b9:10:2a:80:12:e5:81:ba:b8:41:81:6d:cf:fb:6b:56:66:e3: 2c:37:a0:5b:bb:14:6d:0f:67:64:a4:f7:aa:07:f0:6b:dd:15: 50:09:c5:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUwODIzMDM0MDU5WhcNMjUwODMwMDM0MDU5WjAYMRYwFAYD VQQDEw02OGE5Mzg0Yi0wOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3HHoZ9kviCkmhUX43SL7l6kXMNka/D9vibrGO9JR1NCC03k2l8la/8wgJuM TWeJGcFgNl4zUakBcMA+oCBy0Rm+/NqCdgVA41WKZ42PsgoWVwvSNHAhomW6gkSJ zNTjKZ/mhedMCwjNQU1Q2CVkOU+wl3oRbzrradbwA/4ujBJoDGu3ckspFE37OshV DhyqbXzkrBFooRo/4UBEwreseuQNndh5TCkZqSoxJjdoSHsu9QMXHR0qeusWvFU5 aHJtsQ3m9fm9R5KXLjuFtQ0FeWzQOLXdWrsxm8VfLyibQYfAS6dC9FN1GWfCwr4L HX+QfySgdfPMWR5XJ82cT0JrIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLYI4HG bqc0BpU8Xc8pIGU45b4kMB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr+9dBGYncHG1aWoiAEmuvKeFgMB+c8Qw8p1TbT1yOPftSlOyMYJvq IoMpwANqrOlnL/xk7uGyE8BRpT4pfoLCmg7pmeHfN7K2o0FnBogY5VcObx2x81rd bwgyRmE4vc70Fx3+P8uaKhv6XeIvpOyq0ckwI/XomEJhwURNsC7XvUfJvCGPvS0U iCmS/9ohJXKLtuwBTDkOI1iILWCDP1kiSGktAJjjBWdyYITh5Ur4tW/LvtIRK1YA 9uuCd9tcQxl8hkvRkaDqg/iCZsSj8ONlnuk+n3rYyzK5ECqAEuWBurhBgW3P+2tW ZuMsN6BbuxRtD2dkpPeqB/Br3RVQCcUR -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:36 2025 by rpki-client