$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json) Hash identifier: EFX3Rp1zcswgj1CF/Ldf6+dpSb56oFx5Bh77r8Jw+UE= Subject key identifier: D3:DC:B9:BC:11:EB:CE:78:21:04:6F:E6:56:CF:1B:9D:A3:A6:A0:98 Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Certificate serial: 0E69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft Manifest number: 0E62 Signing time: Fri 18 Jul 2025 17:54:14 +0000 Manifest this update: Fri 18 Jul 2025 17:54:14 +0000 Manifest next update: Fri 25 Jul 2025 17:54:14 +0000 Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: 8H1hbzVukFtdzCMjQbeETvwvM9mbGo4Oe3f929KXhVY=) 2: 54E64EE89EAE11E9AF631F7DC4F9AE02.roa (hash: 0The5MPYFtfQmaLphNWjWN2ThdasfkuFEPqTQ5ZL6w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3689 (0xe69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Validity Not Before: Jul 18 17:54:14 2025 GMT Not After : Jul 25 17:54:14 2025 GMT Subject: CN=687a8a46-d409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:8e:bf:9c:c9:6b:66:d3:8e:44:f2:3d:ab: c7:d0:ac:f6:b5:cc:6c:2d:c6:5b:99:ce:b0:d5:70: 7d:eb:b8:98:97:ce:5e:60:22:41:25:3a:37:ca:b8: 34:50:b5:a9:82:75:1f:f8:a7:33:97:91:8b:00:dc: df:e5:4c:df:ea:0e:96:e9:4c:77:9c:79:45:69:b3: 37:85:aa:81:c5:5d:e0:13:45:5e:5a:aa:38:d3:b8: 40:73:d6:ee:e0:45:66:96:de:9f:44:8a:a6:ce:02: 2d:f1:0c:12:90:49:5a:46:a0:0d:be:e4:a7:dc:93: d0:13:3d:c8:4a:aa:c8:de:6f:1a:e0:c1:39:c9:cb: 5a:f7:00:20:ff:2c:e0:33:0e:79:d8:e6:3a:ab:2c: b8:cb:1e:54:5e:3a:14:9f:c7:63:72:10:b0:e8:65: 8a:08:9b:e4:d1:47:63:57:18:59:f8:e3:ca:d4:c6: ca:81:15:cd:26:01:b0:86:16:0f:75:82:0d:60:5a: 6e:65:ab:9a:da:8f:9b:0e:18:47:a4:1b:cc:99:1a: 99:88:19:0f:75:b7:5f:d9:30:b5:8e:50:28:db:09: 4b:41:d5:9c:44:b1:05:01:7f:bd:02:76:a9:cb:5d: 9f:5a:c3:f5:8d:7b:b0:f2:6b:db:35:a0:ec:ca:ed: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DC:B9:BC:11:EB:CE:78:21:04:6F:E6:56:CF:1B:9D:A3:A6:A0:98 X509v3 Authority Key Identifier: keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:67:60:b5:50:cd:05:05:09:f3:b0:af:7c:89:d8:ff:d2:60: 24:ad:63:1c:0a:8b:0c:f3:8e:2c:7a:8b:79:35:af:39:1a:cd: 7a:c8:8a:44:32:f9:e6:8a:f3:19:d7:b7:88:61:16:21:b5:58: 0e:7e:e8:6e:ab:cb:9a:39:62:e0:c4:b4:39:9c:be:8a:2f:0d: d3:73:c2:44:b2:54:92:28:f9:54:08:76:f2:67:e2:72:5e:f2: fa:40:1f:2e:d7:5d:f9:a8:7d:92:d9:3c:52:cf:63:f1:f6:23: 13:93:20:95:b2:ea:c3:ad:83:4c:31:86:1f:22:4a:d3:b3:e9: 64:7d:4c:e7:1f:4f:a1:89:98:1b:73:8b:b8:14:01:ef:ff:28: 13:cf:a1:74:97:8b:41:75:1b:5a:de:f8:e9:c4:0b:0f:4a:3a: da:9d:f2:6c:85:dd:ca:5f:48:e0:66:44:17:87:19:a0:34:90: 9c:16:7c:89:0d:af:b4:01:43:26:85:06:ac:20:49:ac:2f:33: 78:04:6e:69:29:5c:e7:d7:01:53:2c:a7:08:c8:42:2b:20:25: fb:aa:7f:d2:78:19:a5:ba:e4:0e:90:a3:57:51:d0:8d:a6:cc: 08:74:d7:8e:ef:81:0d:67:73:40:5a:e4:55:75:6f:2d:b3:94: 5a:fe:58:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF QTI3MTYzRUYwHhcNMjUwNzE4MTc1NDE0WhcNMjUwNzI1MTc1NDE0WjAYMRYwFAYD VQQDEw02ODdhOGE0Ni1kNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2mOv5zJa2bTjkTyPavH0Kz2tcxsLcZbmc6w1XB967iYl85eYCJBJTo3yrg0 ULWpgnUf+Kczl5GLANzf5Uzf6g6W6Ux3nHlFabM3haqBxV3gE0VeWqo407hAc9bu 4EVmlt6fRIqmzgIt8QwSkElaRqANvuSn3JPQEz3ISqrI3m8a4ME5ycta9wAg/yzg Mw552OY6qyy4yx5UXjoUn8djchCw6GWKCJvk0UdjVxhZ+OPK1MbKgRXNJgGwhhYP dYINYFpuZaua2o+bDhhHpBvMmRqZiBkPdbdf2TC1jlAo2wlLQdWcRLEFAX+9Anap y12fWsP1jXuw8mvbNaDsyu3OnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPcubwR 6854IQRv5lbPG52jpqCYMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfZ2C1UM0FBQnzsK98idj/0mAkrWMcCosM844seot5Na85Gs16yIpE MvnmivMZ17eIYRYhtVgOfuhuq8uaOWLgxLQ5nL6KLw3Tc8JEslSSKPlUCHbyZ+Jy XvL6QB8u1135qH2S2TxSz2Px9iMTkyCVsurDrYNMMYYfIkrTs+lkfUznH0+hiZgb c4u4FAHv/ygTz6F0l4tBdRta3vjpxAsPSjranfJshd3KX0jgZkQXhxmgNJCcFnyJ Da+0AUMmhQasIEmsLzN4BG5pKVzn1wFTLKcIyEIrICX7qn/SeBmluuQOkKNXUdCN pswIdNeO74ENZ3NAWuRVdW8ts5Ra/lgp -----END CERTIFICATE-----Generated at Sun Jul 20 10:19:11 2025 by rpki-client