$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: dElrOpeAjaU63SoVudBNkUbDmg2KBL5B+WOVpps4jxc= Subject key identifier: 86:A6:B8:F3:2B:80:C6:FC:1C:0A:4E:E9:CB:E5:91:16:A1:6F:A9:93 Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0CF9 Signing time: Fri 18 Jul 2025 18:21:15 +0000 Manifest this update: Fri 18 Jul 2025 18:21:15 +0000 Manifest next update: Fri 25 Jul 2025 18:21:15 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: IVVKWwtBNJzDJ3FHK7xou96fNSish9yaFea8ISlMKaA=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: OxkEmLMGkxV9qU2vxCISEVaV7VxznjkiRbOpszB8G5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Jul 18 18:21:15 2025 GMT Not After : Jul 25 18:21:15 2025 GMT Subject: CN=687a909b-7536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:11:91:c5:34:95:f8:04:f3:70:35:64:a8:99: ea:38:0e:f4:36:59:1b:0d:1e:07:64:2e:ab:ec:ea: d1:70:3d:b5:24:ea:96:d4:42:1f:76:29:15:dd:ca: 86:b7:62:7a:f1:6a:88:f4:0c:74:a8:d7:85:36:59: 5d:5f:9c:72:79:b7:f0:76:2c:6e:24:56:0e:a1:7d: d7:19:5a:68:8e:00:6e:70:57:2f:08:00:23:0a:33: 66:f9:2d:d2:25:87:c2:21:ec:28:ea:a7:0c:c3:51: b9:c7:fb:d3:e0:f7:8e:7f:b2:1f:0c:11:4b:33:23: db:18:2e:96:92:54:b1:77:80:83:e4:b6:7b:c6:82: 01:31:9a:26:24:e4:08:72:f1:d5:12:f9:02:4c:14: bf:82:97:a2:18:0c:38:19:40:28:11:7b:ae:6f:b4: 9d:81:18:c1:86:64:15:12:9d:98:16:71:32:65:64: 59:56:f2:f5:d2:de:70:ac:f3:ce:c2:fb:10:70:ad: 7d:c6:c8:84:ae:43:69:fb:74:70:a2:2c:07:ef:07: d0:b0:b4:45:33:20:9a:be:65:d1:7a:93:df:6c:35: ba:86:b3:32:b1:d8:18:d6:3b:a1:a9:fc:5f:e0:3d: 48:b8:cf:6a:09:d6:5f:f1:26:ce:d9:36:ea:8d:c8: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:B8:F3:2B:80:C6:FC:1C:0A:4E:E9:CB:E5:91:16:A1:6F:A9:93 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:95:8f:f4:3c:93:fb:49:80:dd:dc:2d:97:8e:a2:4f:0f:8f: ca:16:6e:d5:d0:5b:ea:7f:f4:b6:06:46:9e:f1:b2:6e:25:ad: c7:e8:c6:7f:58:a0:e8:7d:a6:d1:f8:29:8e:94:cc:fa:d7:75: 5c:53:63:e2:ed:34:f2:3e:ef:a7:8a:34:66:72:37:a2:f4:b5: ba:11:0b:fc:a8:10:cb:f5:df:1d:ee:da:b4:1d:56:d4:9b:e6: d9:ea:ae:da:8c:88:e5:f4:0a:ec:0f:71:79:6f:de:ef:10:52: 97:49:07:f5:f7:a2:99:1b:9c:6e:42:d3:f8:5b:af:06:ae:09: 48:96:47:a2:fb:fc:48:ec:4e:87:a5:a6:c3:2c:cc:d8:01:cc: c7:56:40:9b:ec:22:b9:01:ca:b6:dc:52:78:b3:2b:33:d8:32: 10:21:0b:2b:27:cb:86:13:09:11:15:60:49:34:4c:d1:39:36: 8f:71:a3:db:8e:9b:99:3e:b0:22:32:02:41:56:4b:f5:42:83: da:2e:99:e6:9c:bb:72:43:3c:ef:a2:4d:ec:9e:45:20:6b:bd: 95:12:0a:ee:de:11:8f:ed:ba:c5:52:16:25:29:83:29:ef:4e: 42:c4:1f:a8:98:12:6c:14:55:5d:8d:16:f5:0d:0e:3c:28:bd: f1:15:b5:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUwNzE4MTgyMTE1WhcNMjUwNzI1MTgyMTE1WjAYMRYwFAYD VQQDEw02ODdhOTA5Yi03NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xGRxTSV+ATzcDVkqJnqOA70NlkbDR4HZC6r7OrRcD21JOqW1EIfdikV3cqG t2J68WqI9Ax0qNeFNlldX5xyebfwdixuJFYOoX3XGVpojgBucFcvCAAjCjNm+S3S JYfCIewo6qcMw1G5x/vT4PeOf7IfDBFLMyPbGC6WklSxd4CD5LZ7xoIBMZomJOQI cvHVEvkCTBS/gpeiGAw4GUAoEXuub7SdgRjBhmQVEp2YFnEyZWRZVvL10t5wrPPO wvsQcK19xsiErkNp+3RwoiwH7wfQsLRFMyCavmXRepPfbDW6hrMysdgY1juhqfxf 4D1IuM9qCdZf8SbO2TbqjcjaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIamuPMr gMb8HApO6cvlkRahb6mTMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBClY/0PJP7SYDd3C2XjqJPD4/KFm7V0Fvqf/S2Bkae8bJuJa3H6MZ/ WKDofabR+CmOlMz613VcU2Pi7TTyPu+nijRmcjei9LW6EQv8qBDL9d8d7tq0HVbU m+bZ6q7ajIjl9ArsD3F5b97vEFKXSQf196KZG5xuQtP4W68GrglIlkei+/xI7E6H pabDLMzYAczHVkCb7CK5Acq23FJ4sysz2DIQIQsrJ8uGEwkRFWBJNEzROTaPcaPb jpuZPrAiMgJBVkv1QoPaLpnmnLtyQzzvok3snkUga72VEgru3hGP7brFUhYlKYMp 705CxB+omBJsFFVdjRb1DQ48KL3xFbWV -----END CERTIFICATE-----Generated at Sun Jul 20 19:09:44 2025 by rpki-client