$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: m9JPEW0jiyz3ZZLazliLJcdL2P+GuiYIBf1ORk4/ksM= Subject key identifier: D7:FA:D7:FF:AB:20:46:1F:1D:FB:7C:B9:19:87:25:7E:8C:13:28:D0 Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2D97 Signing time: Thu 04 Sep 2025 15:34:13 +0000 Manifest this update: Thu 04 Sep 2025 15:34:12 +0000 Manifest next update: Thu 11 Sep 2025 15:34:12 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: wS05vE2QDWRRuM6qFNtcP/KSxa21QaUYS8mUduexc28=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: B6weuy2U7VjqemndD9JlkjRjdvpM++iJ2EL75fmO3yk=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: H0Aul5FoePWmdJ4ws06EeBfgwjOLxYt9oVPG8uQPMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11699 (0x2db3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: Sep 4 15:34:12 2025 GMT Not After : Sep 11 15:34:12 2025 GMT Subject: CN=68b9b175-92dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:02:18:8e:ae:f3:6d:ee:c8:48:ff:8d:79:81: 56:14:b3:6a:d5:38:d7:00:c4:28:88:a5:87:b0:eb: 64:1f:17:1d:21:e1:1b:7f:87:76:1c:e9:ff:2d:74: 85:64:d8:a6:23:39:92:0c:ef:58:52:2e:d8:12:18: 59:44:f8:3b:d4:8a:54:7f:60:e5:a7:9d:c2:34:0f: 34:55:78:c8:52:32:cb:23:dd:98:cd:e3:82:f4:65: 28:09:e3:88:d9:fb:9a:ce:a8:72:f0:f8:0c:e6:d9: 06:e2:03:17:38:29:22:ad:a1:ba:8c:70:ab:6c:d3: 0b:92:b3:5a:0e:da:48:e5:08:83:bb:9f:5d:14:6c: 53:05:29:13:58:41:76:c1:cd:fb:12:ad:2c:79:b4: 3c:f2:b2:82:86:0f:1f:53:ea:93:22:46:4e:51:4a: 36:f1:db:bc:57:06:41:ee:ac:26:14:d6:ce:21:2f: 90:54:68:69:35:69:07:5e:52:e7:71:f7:9d:48:65: 0c:14:b7:51:b5:f4:80:4d:32:c0:7a:ac:31:d7:0b: dc:60:3a:40:09:6b:6f:a1:a0:fd:71:08:da:66:6d: e5:6e:f7:0d:c5:03:dc:91:4f:91:86:e2:0d:0b:51: a6:4a:61:2f:3d:31:c6:7a:be:ee:9e:91:44:54:29: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:D7:FF:AB:20:46:1F:1D:FB:7C:B9:19:87:25:7E:8C:13:28:D0 X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:86:f3:5b:e6:6e:3f:60:72:fc:19:3c:7c:ef:1f:44:9a: 78:11:10:80:ac:8f:64:5c:8b:28:6e:ec:f2:45:79:5a:4c:a7: 0b:ed:f0:29:b7:b5:f8:74:48:3c:38:4c:d2:34:64:0b:aa:ef: de:28:7a:dc:89:33:6e:0d:25:a0:45:f9:54:77:9a:ea:19:1f: 9d:3d:84:3d:fc:84:ff:7f:81:ab:4e:65:8f:ef:7b:00:97:d2: 1e:a3:84:0a:db:fd:a0:61:d0:37:10:6f:08:57:d1:09:5e:8c: c3:97:a7:8e:2e:c6:3b:3e:c1:a5:f2:f1:0a:b2:1e:2e:06:33: 65:71:3a:07:42:53:70:b0:a0:34:16:95:09:c2:c4:15:3b:03: 87:d7:27:6e:27:2a:bb:fe:48:8c:f0:f3:30:36:1d:9c:9b:2a: fb:91:0e:5a:4a:2f:f8:be:dc:6d:c8:45:69:2e:91:79:17:c5: 36:2a:9e:62:70:b0:1f:7c:62:17:31:b8:74:f9:22:5f:05:34: 08:0c:53:16:52:be:a2:2b:ba:13:c9:e7:51:64:2a:3c:69:6c: 2c:9f:32:c6:c5:04:f5:87:f1:9c:de:50:72:ec:7c:87:6f:9b: ab:af:69:1b:81:21:ae:41:9b:0a:6f:3d:3a:e0:f8:aa:62:49: 76:42:da:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjUwOTA0MTUzNDEyWhcNMjUwOTExMTUzNDEyWjAYMRYwFAYD VQQDEw02OGI5YjE3NS05MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AIYjq7zbe7ISP+NeYFWFLNq1TjXAMQoiKWHsOtkHxcdIeEbf4d2HOn/LXSF ZNimIzmSDO9YUi7YEhhZRPg71IpUf2Dlp53CNA80VXjIUjLLI92YzeOC9GUoCeOI 2fuazqhy8PgM5tkG4gMXOCkiraG6jHCrbNMLkrNaDtpI5QiDu59dFGxTBSkTWEF2 wc37Eq0sebQ88rKChg8fU+qTIkZOUUo28du8VwZB7qwmFNbOIS+QVGhpNWkHXlLn cfedSGUMFLdRtfSATTLAeqwx1wvcYDpACWtvoaD9cQjaZm3lbvcNxQPckU+RhuIN C1GmSmEvPTHGer7unpFEVCnrlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf61/+r IEYfHft8uRmHJX6MEyjQMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdL4bzW+ZuP2By/Bk8fO8fRJp4ERCArI9kXIsobuzyRXlaTKcL7fAp t7X4dEg8OEzSNGQLqu/eKHrciTNuDSWgRflUd5rqGR+dPYQ9/IT/f4GrTmWP73sA l9Ieo4QK2/2gYdA3EG8IV9EJXozDl6eOLsY7PsGl8vEKsh4uBjNlcToHQlNwsKA0 FpUJwsQVOwOH1yduJyq7/kiM8PMwNh2cmyr7kQ5aSi/4vtxtyEVpLpF5F8U2Kp5i cLAffGIXMbh0+SJfBTQIDFMWUr6iK7oTyedRZCo8aWwsnzLGxQT1h/Gc3lBy7HyH b5urr2kbgSGuQZsKbz064PiqYkl2Qtps -----END CERTIFICATE-----Generated at Fri Sep 5 11:31:44 2025 by rpki-client