$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json) Hash identifier: Qrlp76/GgGmLFG7uhnc/yvoKHaMwJmEUAgb+HKLYQtI= Subject key identifier: CF:CF:DC:9C:8F:DD:4D:EC:53:8F:1B:B6:1B:14:09:CC:8A:B1:51:37 Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft Manifest number: 80 Signing time: Mon 21 Jul 2025 06:49:33 +0000 Manifest this update: Mon 21 Jul 2025 06:49:32 +0000 Manifest next update: Mon 28 Jul 2025 06:49:32 +0000 Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: 18bjmrHc5Vtv8jf4Fh4injo2EAQqQ37YtLIKlywgoA8=) 2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Validity Not Before: Jul 21 06:49:32 2025 GMT Not After : Jul 28 06:49:32 2025 GMT Subject: CN=687de2fc-d3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1f:d1:ae:4a:b9:15:4d:a2:e6:74:f9:e5:9f: 89:3c:67:41:d0:5f:1e:94:7b:92:98:7a:5e:30:20: d9:f2:49:6d:5f:fd:8b:57:7b:47:90:21:d5:da:b4: e2:93:7e:11:8e:a7:5e:08:1f:74:8b:c4:e5:06:c9: 2e:a9:d8:80:64:f2:2d:6c:09:dc:f8:de:e8:75:04: 7a:98:17:26:78:3f:f2:79:b2:e2:c3:31:9e:2b:8a: ac:a6:e0:ef:dc:a6:95:71:d4:fa:36:a9:8c:4d:81: 68:1c:e8:0c:17:d3:f9:92:6e:52:10:8f:bd:d3:aa: 07:0b:1d:ec:d5:a8:53:af:56:5e:66:1c:58:99:9b: 2c:05:e9:e7:34:3a:60:30:14:07:6a:6d:20:81:05: 49:93:23:ac:d5:a3:5b:ea:c6:1d:41:9c:9f:f1:72: ef:03:4a:de:2e:4a:c9:01:81:64:28:95:e1:d8:f5: f9:67:31:cf:96:8b:85:c0:69:75:03:2d:ef:7b:fb: 7a:d3:b7:01:5a:72:cb:4e:f4:34:fb:f6:9d:7b:f7: a5:be:56:ab:e2:7f:b0:fd:4d:59:9f:14:aa:a1:08: b4:3f:53:e3:d5:d6:dd:81:8a:71:04:30:32:cd:f8: bc:fe:9b:9d:d2:78:cd:c5:7b:11:8d:41:11:f6:08: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CF:DC:9C:8F:DD:4D:EC:53:8F:1B:B6:1B:14:09:CC:8A:B1:51:37 X509v3 Authority Key Identifier: keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a4:3e:66:7f:4c:8e:9d:51:81:7a:0b:28:dd:44:62:c7:13: 7e:03:7c:21:40:b6:9f:36:8d:4b:7e:a7:d4:4d:ec:9a:10:c0: 7b:c0:55:42:3d:f5:7a:11:44:2a:37:da:34:a9:56:62:6f:9d: 39:a9:fd:a4:83:b7:8a:2d:95:38:0c:50:bf:85:40:1c:db:46: b0:24:07:63:4c:28:2b:1e:ff:ec:2d:71:0a:76:4b:54:95:cd: 49:a9:8a:72:43:8b:de:39:5b:26:7a:ff:d5:14:bb:b9:a8:e0: 4f:ac:05:3a:eb:55:b1:4e:72:51:1c:74:11:a8:c1:ea:b0:0c: 47:ee:40:27:9d:18:7b:2e:94:f0:e0:78:48:07:3a:0a:81:1d: a7:cb:b0:30:1a:4f:85:5e:74:f8:96:64:d3:7b:49:43:d4:34: 49:96:08:70:dd:4e:f6:93:af:95:93:5e:35:79:9d:40:08:46: f6:3b:5c:0e:02:51:08:7e:7e:8a:56:ef:53:9d:3b:ef:25:80: f2:94:04:aa:68:b9:7b:ec:32:be:25:ae:68:fa:31:87:b4:d7: 0c:98:fe:d2:39:4c:a3:61:b4:38:ae:38:1a:46:18:93:47:6a: 76:ce:2c:21:3f:a8:d3:a5:d3:71:97:0f:73:55:32:54:33:99: f5:fe:e1:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQxNjQxMTAvBgNVBAUTKEE4NzM3MjAxRkE0QzY0RkEwMDU2NDAyMkRCMDZGNjBF N0VFMkNEMEQwHhcNMjUwNzIxMDY0OTMyWhcNMjUwNzI4MDY0OTMyWjAYMRYwFAYD VQQDEw02ODdkZTJmYy1kM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5R/Rrkq5FU2i5nT55Z+JPGdB0F8elHuSmHpeMCDZ8kltX/2LV3tHkCHV2rTi k34RjqdeCB90i8TlBskuqdiAZPItbAnc+N7odQR6mBcmeD/yebLiwzGeK4qspuDv 3KaVcdT6NqmMTYFoHOgMF9P5km5SEI+906oHCx3s1ahTr1ZeZhxYmZssBennNDpg MBQHam0ggQVJkyOs1aNb6sYdQZyf8XLvA0reLkrJAYFkKJXh2PX5ZzHPlouFwGl1 Ay3ve/t607cBWnLLTvQ0+/ade/elvlar4n+w/U1ZnxSqoQi0P1Pj1dbdgYpxBDAy zfi8/pud0njNxXsRjUER9gga4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/P3JyP 3U3sU48bthsUCcyKsVE3MB8GA1UdIwQYMBaAFKhzcgH6TGT6AFZAItsG9g5+4s0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BNjhFMjY0RUEx ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQb0FWa0FpMndiMkRuN2l6 UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDE2NC9BNjhFMjY0RUExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQ b0FWa0FpMndiMkRuN2l6UTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspD5mf0yOnVGBegso3URixxN+A3whQLafNo1LfqfUTeyaEMB7wFVC PfV6EUQqN9o0qVZib505qf2kg7eKLZU4DFC/hUAc20awJAdjTCgrHv/sLXEKdktU lc1JqYpyQ4veOVsmev/VFLu5qOBPrAU661WxTnJRHHQRqMHqsAxH7kAnnRh7LpTw 4HhIBzoKgR2ny7AwGk+FXnT4lmTTe0lD1DRJlghw3U72k6+Vk141eZ1ACEb2O1wO AlEIfn6KVu9TnTvvJYDylASqaLl77DK+Ja5o+jGHtNcMmP7SOUyjYbQ4rjgaRhiT R2p2ziwhP6jTpdNxlw9zVTJUM5n1/uH0 -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:17 2025 by rpki-client