$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: T2a1UQzND1xz11PWP+oaMIsfHJ0K4vkn3E7jggrgzhs= Subject key identifier: 01:BA:9C:F3:7F:1E:DF:10:5D:A4:34:F5:BE:98:D2:50:3D:FA:54:94 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 016C Signing time: Tue 19 Aug 2025 04:14:28 +0000 Manifest this update: Tue 19 Aug 2025 04:14:27 +0000 Manifest next update: Tue 26 Aug 2025 04:14:27 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: kZoNCmUPBCuYhQpTIP3wzHLblnFqXnIzqTjwZwW8Cu0=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Aug 19 04:14:27 2025 GMT Not After : Aug 26 04:14:27 2025 GMT Subject: CN=68a3fa24-b0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:cc:d5:e0:46:8f:3b:b9:f8:c7:d9:56:c9: 9a:2e:ba:b9:cf:b1:a4:71:7a:5e:d0:e3:b6:1e:2b: a5:9d:b0:56:54:6b:01:b4:99:fc:95:94:e3:7d:bf: df:f4:ca:94:13:1e:94:77:dd:6d:f6:50:b7:d6:31: 17:b8:9f:d0:03:ef:dd:1f:30:1f:66:76:3b:ec:3f: d4:8e:d8:27:e9:e2:b8:eb:d4:1d:c1:a3:6b:77:9a: 01:df:23:37:d5:e2:a4:7f:90:1d:86:46:53:19:47: 2b:18:05:3f:04:28:0a:f0:ee:81:b2:47:6c:7f:bc: d3:b7:36:fc:d0:58:10:f9:ff:f3:60:f6:c3:33:e5: 99:75:7d:d7:73:4c:91:7c:c9:b5:95:1c:ff:4d:9e: d7:45:18:bf:74:46:1d:c1:56:1b:56:53:05:b8:b9: 7c:1e:3a:d2:61:9a:6c:63:64:fc:85:33:fe:a8:e4: 4c:0e:f1:fa:66:83:44:61:1f:41:7f:a7:4d:2c:b9: f8:69:13:ad:ff:93:de:c9:b5:5d:c1:38:8d:31:a4: 29:5f:76:45:ff:e1:17:36:c8:95:60:26:2f:9c:1c: c1:ed:9c:d0:46:b2:aa:00:73:eb:b8:cc:bd:ab:25: 60:96:ae:ac:88:22:67:7c:1d:bd:e4:a0:12:22:e2: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BA:9C:F3:7F:1E:DF:10:5D:A4:34:F5:BE:98:D2:50:3D:FA:54:94 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:09:79:24:64:75:7f:a5:e1:0b:2e:03:dd:4d:ec:01:fc:82: 7a:0a:72:7c:86:22:d8:98:97:73:68:9a:bc:28:bc:45:c2:5e: 60:86:51:ad:e3:63:25:09:ba:d0:16:b0:da:5e:3b:77:f1:07: ae:0e:32:f4:05:3b:57:79:5c:b1:2c:c5:57:50:ea:74:e7:02: f1:66:e8:9b:89:cd:43:72:88:7d:95:c3:ad:61:af:39:de:fe: dd:4d:b8:06:f6:15:f1:a2:30:c9:e6:78:84:fa:49:e9:89:c8: 89:17:e7:40:13:d9:80:34:f7:41:3e:00:1b:d8:62:4c:a0:a5: 2a:76:c3:31:ff:b7:63:fc:6e:70:38:86:86:02:a6:08:d9:72: 6d:d2:da:8c:62:7b:52:17:6d:40:a1:43:80:a0:6e:07:49:b3: 7c:6f:d0:b3:d9:d8:33:f8:78:d0:10:6c:ce:4b:a9:19:5d:dd: 3a:bc:51:24:7a:a7:cd:21:6a:14:f4:af:3e:3b:f1:48:5c:88: 59:a3:ba:c8:9b:af:b0:43:6d:2f:87:d1:c0:23:48:0e:a0:7c: e5:e7:9e:80:a6:33:01:e4:3d:5e:d8:1d:36:ec:15:a3:e7:2d: 8d:af:41:c8:24:bf:cc:19:56:ba:e5:49:1b:05:52:ee:f2:90: 99:34:0c:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwODE5MDQxNDI3WhcNMjUwODI2MDQxNDI3WjAYMRYwFAYD VQQDEw02OGEzZmEyNC1iMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB3M1eBGjzu5+MfZVsmaLrq5z7GkcXpe0OO2HiulnbBWVGsBtJn8lZTjfb/f 9MqUEx6Ud91t9lC31jEXuJ/QA+/dHzAfZnY77D/Ujtgn6eK469QdwaNrd5oB3yM3 1eKkf5AdhkZTGUcrGAU/BCgK8O6Bskdsf7zTtzb80FgQ+f/zYPbDM+WZdX3Xc0yR fMm1lRz/TZ7XRRi/dEYdwVYbVlMFuLl8HjrSYZpsY2T8hTP+qORMDvH6ZoNEYR9B f6dNLLn4aROt/5PeybVdwTiNMaQpX3ZF/+EXNsiVYCYvnBzB7ZzQRrKqAHPruMy9 qyVglq6siCJnfB295KASIuKs2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG6nPN/ Ht8QXaQ09b6Y0lA9+lSUMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCECXkkZHV/peELLgPdTewB/IJ6CnJ8hiLYmJdzaJq8KLxFwl5ghlGt 42MlCbrQFrDaXjt38QeuDjL0BTtXeVyxLMVXUOp05wLxZuibic1Dcoh9lcOtYa85 3v7dTbgG9hXxojDJ5niE+knpiciJF+dAE9mANPdBPgAb2GJMoKUqdsMx/7dj/G5w OIaGAqYI2XJt0tqMYntSF21AoUOAoG4HSbN8b9Cz2dgz+HjQEGzOS6kZXd06vFEk eqfNIWoU9K8+O/FIXIhZo7rIm6+wQ20vh9HAI0gOoHzl556ApjMB5D1e2B027BWj 5y2Nr0HIJL/MGVa65UkbBVLu8pCZNAym -----END CERTIFICATE-----Generated at Thu Aug 21 05:45:15 2025 by rpki-client