$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: 22ILBGdhnOWUHlviaYj9kI+m5MX+qcfzoAhdL5lnt2Y= Subject key identifier: 09:46:1F:D7:A8:A6:16:F4:20:57:1D:21:22:9E:A9:C4:54:D0:69:A5 Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 016D Signing time: Thu 03 Jul 2025 03:56:42 +0000 Manifest this update: Thu 03 Jul 2025 03:56:42 +0000 Manifest next update: Thu 10 Jul 2025 03:56:42 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: ZtIZgUSO5WUzn95E9T95ZgOPrEUCGRhXDnx9HLDFAeI=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: cfTEsX0/fqXximCGDgwjpxYW14EquVhqMbg4z9DcvEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Jul 3 03:56:42 2025 GMT Not After : Jul 10 03:56:42 2025 GMT Subject: CN=6865ff7a-16d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:07:b9:f0:db:11:0d:45:09:7d:ad:14:76: fc:bd:44:c0:a1:94:24:3e:03:85:be:87:47:d2:1d: 1b:67:2d:4e:49:d3:64:d6:a3:ff:2f:f6:bb:0e:53: d9:e3:51:1d:e5:e6:2a:e5:3b:39:b2:83:c1:d9:d6: e1:49:fb:e7:a2:ac:39:88:50:c3:82:7a:2f:e6:ec: e1:36:2e:d0:55:cb:c7:68:fe:b3:60:de:2a:1d:92: ba:2e:ed:8e:30:0e:fb:5a:4c:d6:a3:22:d6:2d:10: cd:40:d3:a9:e1:54:7f:c9:4b:c5:45:fc:c2:d2:f0: e8:57:cc:17:36:4e:eb:22:39:65:fa:e5:ec:f8:6c: 00:96:2c:66:73:1a:a6:43:ff:eb:ee:a0:c6:92:2b: e9:96:7b:90:9c:d3:c9:01:62:f1:f8:c1:57:4a:93: cd:59:5a:cb:4a:56:54:10:bf:1f:10:d3:1f:37:85: 39:b7:f7:76:c4:fe:2e:65:81:96:aa:f0:26:be:98: 5b:89:ba:73:8f:70:7f:ea:c7:8b:67:b5:1a:18:b4: 0a:9e:74:61:b5:a7:aa:b0:63:c2:6c:97:4b:52:4b: af:45:db:37:18:fb:4f:d1:d2:62:dc:ab:9c:00:c0: b6:3b:16:7b:c1:6a:c9:cb:00:54:af:65:cd:8d:bd: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:1F:D7:A8:A6:16:F4:20:57:1D:21:22:9E:A9:C4:54:D0:69:A5 X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4c:35:63:3e:f9:db:ee:68:31:3c:7f:da:6e:d7:ff:46:71: 2f:ba:ec:d5:59:e3:b6:19:0f:3b:40:e1:ba:10:b4:af:f2:83: 2e:b6:00:87:0a:c4:dc:96:aa:80:0c:0e:6e:b6:9f:2b:57:f7: 16:39:98:a0:c4:f9:72:b8:05:d4:dc:85:8b:0a:ec:16:6c:e4: ea:f6:0e:0d:ef:75:a6:9e:8a:df:83:f2:90:13:21:ad:06:90: 47:f2:4b:c3:08:cd:8b:16:fd:05:ff:24:4c:e3:cc:e7:ce:07: d5:36:b3:21:26:69:6e:85:d3:ed:ba:4d:e9:f1:50:67:b6:52: b3:c5:c5:45:a6:b1:9a:d6:b7:02:53:58:47:e9:fb:14:4b:1e: 7b:41:2a:c2:80:03:98:2d:44:78:a1:54:9b:1c:5c:16:23:d8: 52:9a:23:5a:09:d4:ef:73:52:24:76:65:d2:06:36:03:8a:7d: 18:86:53:1e:b0:06:ee:1b:4c:57:85:70:59:a6:c8:be:a3:38: c1:42:a0:ab:4d:35:c8:f1:fb:ce:cf:ec:a5:d3:f5:c9:36:7a: ba:47:88:28:a1:2c:cb:6f:d0:58:1c:ca:08:17:fd:67:21:96: cf:6e:9b:84:51:f0:d2:92:39:f8:f6:ec:3f:d6:c1:37:96:32: 7e:9d:8f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUwNzAzMDM1NjQyWhcNMjUwNzEwMDM1NjQyWjAYMRYwFAYD VQQDEw02ODY1ZmY3YS0xNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtswHufDbEQ1FCX2tFHb8vUTAoZQkPgOFvodH0h0bZy1OSdNk1qP/L/a7DlPZ 41Ed5eYq5Ts5soPB2dbhSfvnoqw5iFDDgnov5uzhNi7QVcvHaP6zYN4qHZK6Lu2O MA77WkzWoyLWLRDNQNOp4VR/yUvFRfzC0vDoV8wXNk7rIjll+uXs+GwAlixmcxqm Q//r7qDGkivplnuQnNPJAWLx+MFXSpPNWVrLSlZUEL8fENMfN4U5t/d2xP4uZYGW qvAmvphbibpzj3B/6seLZ7UaGLQKnnRhtaeqsGPCbJdLUkuvRds3GPtP0dJi3Kuc AMC2OxZ7wWrJywBUr2XNjb1ibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlGH9eo phb0IFcdISKeqcRU0GmlMB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdTDVjPvnb7mgxPH/abtf/RnEvuuzVWeO2GQ87QOG6ELSv8oMutgCH CsTclqqADA5utp8rV/cWOZigxPlyuAXU3IWLCuwWbOTq9g4N73Wmnorfg/KQEyGt BpBH8kvDCM2LFv0F/yRM48znzgfVNrMhJmluhdPtuk3p8VBntlKzxcVFprGa1rcC U1hH6fsUSx57QSrCgAOYLUR4oVSbHFwWI9hSmiNaCdTvc1IkdmXSBjYDin0YhlMe sAbuG0xXhXBZpsi+ozjBQqCrTTXI8fvOz+yl0/XJNnq6R4gooSzLb9BYHMoIF/1n IZbPbpuEUfDSkjn49uw/1sE3ljJ+nY+A -----END CERTIFICATE-----Generated at Fri Jul 4 14:18:24 2025 by rpki-client