$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: CJm2uuFJebE6AkpLDbNnTJjqcxhCT2JqQyxvcBO6eAk= Subject key identifier: E3:E5:7A:7D:11:96:B0:66:E9:FF:BF:BD:05:11:DF:E4:92:02:D5:8A Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 0174 Signing time: Wed 17 Sep 2025 04:17:29 +0000 Manifest this update: Wed 17 Sep 2025 04:17:29 +0000 Manifest next update: Wed 24 Sep 2025 04:17:29 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: vCwE0SZVyStGWMhMT94n2+fdJMTziqi+2pgRt6DyuQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Sep 17 04:17:29 2025 GMT Not After : Sep 24 04:17:29 2025 GMT Subject: CN=68ca3659-4328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:5a:36:bd:e2:7e:50:40:3e:ee:f9:ee:c1: f0:f8:30:51:10:e3:78:45:e4:e5:02:15:0a:ad:ac: 44:e7:93:f6:15:71:52:1b:f6:7e:41:0d:99:62:e3: 98:57:18:7f:58:26:cf:0b:85:a4:e9:9b:c1:ff:0a: f0:dd:63:17:ba:c9:de:5a:8a:9e:d6:fa:6b:da:1f: 99:a3:5c:07:72:68:dc:63:0d:d6:76:0c:b0:f1:55: ea:1e:be:f5:35:3e:14:a2:05:67:ea:d5:5c:5b:3d: 34:90:03:bf:9e:7f:78:fd:d6:d1:db:1a:f9:be:f2: fb:09:83:a3:7a:46:36:d0:4e:94:2c:a0:94:7a:04: bd:85:bd:05:a1:bd:61:00:70:56:d3:e5:2a:1f:8a: a1:82:b8:28:7c:28:8c:b1:33:53:de:48:a6:01:91: f0:a2:a7:42:a6:d0:a1:ba:d7:16:d5:8a:05:9a:4c: eb:c3:bb:f7:5b:3b:da:9c:59:b2:f1:50:48:cc:df: 91:8c:27:c3:2f:95:b2:43:72:6c:23:ac:30:a2:39: 72:5e:61:0f:5f:29:45:7d:57:7f:d5:49:35:24:b3: fd:f5:83:fe:23:f7:30:aa:07:f0:31:65:0a:7a:5f: 56:04:6b:bc:7c:f1:a9:f2:bc:df:ac:e3:1a:ed:6f: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E5:7A:7D:11:96:B0:66:E9:FF:BF:BD:05:11:DF:E4:92:02:D5:8A X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:fc:cc:d8:ed:12:1a:cd:a2:75:6b:9a:7f:fe:6b:e3:02:c6: 58:b5:3a:81:b9:02:8a:97:02:76:4f:45:f6:3f:81:9e:dd:4b: f7:0a:0e:d8:0d:bf:7a:48:0c:67:83:8c:ae:c0:bc:46:a7:3e: 7e:00:b2:c1:9a:fb:f4:2d:cb:d1:1e:6d:a0:43:b2:da:c8:99: 62:60:7d:40:0b:87:c2:71:fe:79:d1:5f:5b:7a:d6:59:8e:c2: f5:b8:3a:22:6d:f3:86:57:a3:bc:fd:48:52:2f:bc:2b:fc:7e: 70:c5:ff:10:ed:01:64:27:ad:65:60:ae:09:bf:c1:58:4e:f7: 5b:c3:2e:88:d2:b5:b6:f9:64:3a:02:02:eb:57:a3:6f:c8:f6: 6a:43:b8:70:30:48:ae:47:b3:28:0a:76:4b:0f:c5:90:8b:ca: 46:e4:22:c7:51:4f:ee:cb:a7:69:ee:2a:78:da:ac:9c:45:6b: 73:29:52:bc:4c:a3:9b:41:8c:36:df:10:7c:db:12:54:cc:aa: 78:3b:60:71:fa:98:cb:16:22:a6:93:9b:84:eb:f3:73:fc:15: 9c:73:17:b6:60:17:01:e4:21:71:93:ad:5f:a3:60:9e:1f:5d: d3:6d:88:ef:90:fd:03:64:7d:86:ec:23:28:3e:47:42:cd:22: 78:4b:94:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUwOTE3MDQxNzI5WhcNMjUwOTI0MDQxNzI5WjAYMRYwFAYD VQQDEw02OGNhMzY1OS00MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cdaNr3iflBAPu757sHw+DBREON4ReTlAhUKraxE55P2FXFSG/Z+QQ2ZYuOY Vxh/WCbPC4Wk6ZvB/wrw3WMXusneWoqe1vpr2h+Zo1wHcmjcYw3Wdgyw8VXqHr71 NT4UogVn6tVcWz00kAO/nn94/dbR2xr5vvL7CYOjekY20E6ULKCUegS9hb0Fob1h AHBW0+UqH4qhgrgofCiMsTNT3kimAZHwoqdCptChutcW1YoFmkzrw7v3WzvanFmy 8VBIzN+RjCfDL5WyQ3JsI6wwojlyXmEPXylFfVd/1Uk1JLP99YP+I/cwqgfwMWUK el9WBGu8fPGp8rzfrOMa7W/ASwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPlen0R lrBm6f+/vQUR3+SSAtWKMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2/MzY7RIazaJ1a5p//mvjAsZYtTqBuQKKlwJ2T0X2P4Ge3Uv3Cg7Y Db96SAxng4yuwLxGpz5+ALLBmvv0LcvRHm2gQ7LayJliYH1AC4fCcf550V9betZZ jsL1uDoibfOGV6O8/UhSL7wr/H5wxf8Q7QFkJ61lYK4Jv8FYTvdbwy6I0rW2+WQ6 AgLrV6NvyPZqQ7hwMEiuR7MoCnZLD8WQi8pG5CLHUU/uy6dp7ip42qycRWtzKVK8 TKObQYw23xB82xJUzKp4O2Bx+pjLFiKmk5uE6/Nz/BWccxe2YBcB5CFxk61fo2Ce H13TbYjvkP0DZH2G7CMoPkdCzSJ4S5Qa -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:24 2025 by rpki-client