$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft File: tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json) Hash identifier: 50y1ZXuGCZsr8ybmqUqBD2aOiDF3YlOnhTgtspiObMY= Subject key identifier: FF:0A:81:F8:08:17:A9:C4:A7:E7:BD:30:9D:07:BF:A9:03:BC:40:A5 Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft Manifest number: 25 Signing time: Sat 19 Jul 2025 08:03:43 +0000 Manifest this update: Sat 19 Jul 2025 08:03:42 +0000 Manifest next update: Sat 26 Jul 2025 08:03:42 +0000 Files and hashes: 1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: yAMiNsgxujfAkIUlqrh8GSxhRlQ71DC7q/xov+sKfhE=) 2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F Validity Not Before: Jul 19 08:03:42 2025 GMT Not After : Jul 26 08:03:42 2025 GMT Subject: CN=687b515f-19f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:e8:bb:c7:ac:d3:84:52:a4:c8:22:73:2d: e9:13:b2:ae:01:70:5d:47:4c:47:68:23:4c:77:d8: 38:f3:32:90:e1:f6:d5:03:48:14:3b:0f:0a:8f:eb: 10:15:8e:fb:e0:44:2b:34:0f:1d:5e:43:a9:fd:20: 94:d2:2a:4f:8a:f5:92:20:7a:49:88:9b:1a:c7:6f: 56:45:1c:f2:6e:70:3e:52:62:cd:c1:b9:9d:18:c2: b2:b1:1f:f2:85:84:e3:b4:76:e1:a6:6a:a8:99:b1: 84:52:31:50:99:14:80:2e:5b:cd:3b:8a:20:74:2d: 00:6e:52:39:ca:c9:53:3b:03:b7:b3:ba:48:e6:d0: 2e:b2:60:7b:63:54:5c:98:4e:fe:2e:cb:44:90:3f: a2:27:f1:42:d6:ec:99:db:27:5a:18:e7:95:fb:84: db:ea:64:0d:91:89:a2:f0:57:65:70:4b:7b:a3:8f: d1:b1:de:3e:87:6e:f6:ba:1b:03:5b:57:00:87:2c: 51:05:91:16:4c:82:d5:84:7d:b8:4d:58:d8:d2:1c: ac:25:26:c2:a5:82:36:38:a8:a9:6f:16:30:da:10: 71:a4:74:91:5d:b5:41:74:bb:91:ba:ec:6d:44:50: cb:0c:65:4d:13:69:81:9f:f0:96:a2:38:e3:a6:d3: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:81:F8:08:17:A9:C4:A7:E7:BD:30:9D:07:BF:A9:03:BC:40:A5 X509v3 Authority Key Identifier: keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8c:0e:f8:24:56:90:5d:0c:a5:dd:5b:d3:19:68:0d:f6:bc: 09:24:5c:e4:78:21:04:ce:72:e2:8b:38:c7:35:49:43:6a:3e: 63:1f:a7:64:bf:b2:a0:a5:59:d2:07:93:6c:a5:49:67:89:2b: dc:bd:ae:3f:1e:7a:ed:33:2f:ec:eb:c1:36:86:06:6f:fe:9d: c9:8b:70:e2:d0:0c:b3:95:8f:91:6b:cc:a4:f2:5b:c9:9d:db: f9:8c:fc:8e:f9:a7:aa:bd:4f:67:1d:3c:85:41:a8:76:9a:ae: da:0a:d3:e2:1e:8b:48:16:28:5b:74:5a:1e:c3:77:4b:9c:00: 1e:c9:48:dc:6f:d5:45:df:bb:c7:f3:ae:6d:24:4c:23:8b:7d: a4:7a:3d:82:95:37:85:7d:c0:b1:df:dd:e7:fc:58:92:88:9b: c9:21:37:a3:50:7a:96:fd:c1:37:e0:19:80:2d:78:2d:e9:43: 48:57:fa:26:67:bf:6d:05:38:08:b0:a9:d5:cf:02:e8:a6:e7: c5:9c:30:e4:63:47:9a:ba:2e:43:8f:6d:f1:9c:b6:cc:26:51: 5c:a6:13:57:dd:f4:9c:5f:f8:5e:25:e7:94:11:aa:ad:fc:16: 46:20:74:90:38:3e:ff:a6:25:9e:de:89:84:17:dd:06:92:aa: 28:a9:9c:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5 REFGNEQ0RjAeFw0yNTA3MTkwODAzNDJaFw0yNTA3MjYwODAzNDJaMBgxFjAUBgNV BAMTDTY4N2I1MTVmLTE5ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgyOi7x6zThFKkyCJzLekTsq4BcF1HTEdoI0x32DjzMpDh9tUDSBQ7DwqP6xAV jvvgRCs0Dx1eQ6n9IJTSKk+K9ZIgekmImxrHb1ZFHPJucD5SYs3BuZ0YwrKxH/KF hOO0duGmaqiZsYRSMVCZFIAuW807iiB0LQBuUjnKyVM7A7ezukjm0C6yYHtjVFyY Tv4uy0SQP6In8ULW7JnbJ1oY55X7hNvqZA2RiaLwV2VwS3ujj9Gx3j6Hbva6GwNb VwCHLFEFkRZMgtWEfbhNWNjSHKwlJsKlgjY4qKlvFjDaEHGkdJFdtUF0u5G67G1E UMsMZU0TaYGf8JaiOOOm0739AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/wqB+AgX qcSn570wnQe/qQO8QKUwHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1LzhDNDRBOTM0MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3 UFRZX2VGeEYyVjUydlRVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2MDvgkVpBdDKXdW9MZaA32vAkkXOR4IQTOcuKLOMc1SUNqPmMfp2S/ sqClWdIHk2ylSWeJK9y9rj8eeu0zL+zrwTaGBm/+ncmLcOLQDLOVj5FrzKTyW8md 2/mM/I75p6q9T2cdPIVBqHaartoK0+Iei0gWKFt0Wh7Dd0ucAB7JSNxv1UXfu8fz rm0kTCOLfaR6PYKVN4V9wLHf3ef8WJKIm8khN6NQepb9wTfgGYAteC3pQ0hX+iZn v20FOAiwqdXPAuim58WcMORjR5q6LkOPbfGctswmUVymE1fd9Jxf+F4l55QRqq38 FkYgdJA4Pv+mJZ7eiYQX3QaSqiipnEE= -----END CERTIFICATE-----Generated at Sun Jul 20 12:09:58 2025 by rpki-client