$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: u73E6/1AoMg6kGGrz7jKL+9owEvgQH9nA/QuSR+35m8= Subject key identifier: 44:7D:8B:C1:9C:9D:72:6F:12:13:3D:1F:3D:A3:12:60:15:E4:9A:28 Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 0177 Signing time: Sat 19 Jul 2025 03:56:58 +0000 Manifest this update: Sat 19 Jul 2025 03:56:58 +0000 Manifest next update: Sat 26 Jul 2025 03:56:58 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: XH4yS8rVD4oBoLPRqq9Ow/rqbmr1iIVrRBEkEbDFuhU=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: 1i3jxewXcc2DZR9rHs9xsLpB1uq+KSefHPQwMlW+krU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Jul 19 03:56:58 2025 GMT Not After : Jul 26 03:56:58 2025 GMT Subject: CN=687b178a-67e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:8e:d7:80:13:84:9c:0a:c7:9c:50:77:09: da:ad:1e:85:72:c1:28:be:0e:18:c8:ea:7c:e2:d2: cd:e5:a5:73:1b:8e:80:a9:6f:21:e4:21:57:ac:ca: 34:74:03:3a:d5:ea:94:49:8f:11:16:81:8f:f2:d6: 20:45:87:fe:1c:81:66:bc:d4:54:95:38:70:bb:67: 33:67:78:44:d9:8d:aa:7b:63:d3:64:7c:f4:2b:65: 8c:78:c2:97:a6:36:d8:d4:f3:fe:79:51:9c:70:d0: f9:07:6c:97:86:c2:89:b5:b8:07:84:7f:04:00:64: d5:23:39:7e:5f:dc:09:8d:55:44:03:7e:94:79:2e: af:21:89:97:8a:b2:41:82:a3:f8:f5:75:79:2a:a3: 84:c2:0d:8b:cb:42:66:32:ba:92:7c:15:70:56:a1: 99:b4:9f:94:4f:46:ae:10:f3:b8:97:2d:df:f5:dd: 09:21:c9:67:7a:45:6f:07:d7:d1:70:f6:5d:46:19: 3a:70:f5:dd:f9:a8:9e:6e:e0:c9:ae:e3:c0:f4:98: 89:b5:9e:88:15:6e:f5:4c:57:69:68:13:6f:69:19: 08:86:19:e3:78:6c:23:0e:4b:79:96:15:25:e6:56: 53:c1:2c:db:11:59:17:6b:7e:63:d5:fe:9c:a1:16: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:8B:C1:9C:9D:72:6F:12:13:3D:1F:3D:A3:12:60:15:E4:9A:28 X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:c0:c9:24:b1:c1:6e:96:96:7d:29:6a:f2:f8:b7:91:82:88: ff:cb:d3:05:3d:a8:b8:8b:e6:aa:75:55:1e:12:d2:ab:ed:f8: c2:61:1a:88:43:a9:66:99:01:3c:9b:c1:6b:6f:55:7f:f8:63: e3:b5:be:3c:d4:29:c5:3f:1d:96:a5:a0:1e:53:c6:71:3b:60: 23:ba:ae:2b:11:58:fd:80:a9:c7:fc:5d:93:e7:a7:a1:1f:59: 20:5f:bd:e6:26:b9:d5:b1:33:0f:9f:80:f1:a3:2a:4c:52:d8: 94:35:eb:84:39:a8:1d:23:40:23:e5:24:78:31:7a:2e:e3:e9: d9:e0:96:26:65:9c:0c:2e:2d:a8:89:7e:89:e8:34:e4:c2:91: 79:ff:3e:8f:b2:93:63:ef:72:ba:92:4c:ec:b8:31:03:28:cd: fc:85:e4:f9:c3:c7:f8:52:f9:ef:f4:52:01:c2:e1:99:fb:68: d9:1c:67:c0:d8:a9:fc:80:18:45:a5:52:2d:0a:bf:ec:78:1d: 9b:05:d8:8b:69:24:f9:89:f1:a2:48:7b:ce:cd:f2:65:a0:9f: d4:a8:22:df:9b:33:8f:75:20:1b:33:6c:5a:f6:d9:0c:52:fc: 29:2c:1d:45:f0:77:07:a1:d1:4a:94:8c:6b:33:50:32:6d:f6: 83:f7:ea:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUwNzE5MDM1NjU4WhcNMjUwNzI2MDM1NjU4WjAYMRYwFAYD VQQDEw02ODdiMTc4YS02N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztyO14AThJwKx5xQdwnarR6FcsEovg4YyOp84tLN5aVzG46AqW8h5CFXrMo0 dAM61eqUSY8RFoGP8tYgRYf+HIFmvNRUlThwu2czZ3hE2Y2qe2PTZHz0K2WMeMKX pjbY1PP+eVGccND5B2yXhsKJtbgHhH8EAGTVIzl+X9wJjVVEA36UeS6vIYmXirJB gqP49XV5KqOEwg2Ly0JmMrqSfBVwVqGZtJ+UT0auEPO4ly3f9d0JIclnekVvB9fR cPZdRhk6cPXd+aiebuDJruPA9JiJtZ6IFW71TFdpaBNvaRkIhhnjeGwjDkt5lhUl 5lZTwSzbEVkXa35j1f6coRbYhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER9i8Gc nXJvEhM9Hz2jEmAV5JooMB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+wMkkscFulpZ9KWry+LeRgoj/y9MFPai4i+aqdVUeEtKr7fjCYRqI Q6lmmQE8m8Frb1V/+GPjtb481CnFPx2WpaAeU8ZxO2Ajuq4rEVj9gKnH/F2T56eh H1kgX73mJrnVsTMPn4DxoypMUtiUNeuEOagdI0Aj5SR4MXou4+nZ4JYmZZwMLi2o iX6J6DTkwpF5/z6PspNj73K6kkzsuDEDKM38heT5w8f4Uvnv9FIBwuGZ+2jZHGfA 2Kn8gBhFpVItCr/seB2bBdiLaST5ifGiSHvOzfJloJ/UqCLfmzOPdSAbM2xa9tkM UvwpLB1F8HcHodFKlIxrM1AybfaD9+qz -----END CERTIFICATE-----Generated at Sun Jul 20 11:08:27 2025 by rpki-client