$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: NCBM+rsL0uUqoByPHTouDwL8uz1ddaOdCg1gxiqbeP0= Subject key identifier: C5:E8:09:94:03:00:8D:BF:F1:AD:DD:DA:85:0A:A0:C3:38:8C:60:64 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 0423 Signing time: Tue 09 Sep 2025 00:27:22 +0000 Manifest this update: Tue 09 Sep 2025 00:27:22 +0000 Manifest next update: Tue 16 Sep 2025 00:27:22 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: mqFvSYL5bcF5LnhQp4dwktHa/Ef25Bl9DVWt8eq/qlg=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Sep 9 00:27:22 2025 GMT Not After : Sep 16 00:27:22 2025 GMT Subject: CN=68bf746a-f1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:88:34:86:5d:6d:6f:04:cb:25:3d:81:c0:6d: b9:63:80:8b:f4:47:60:c8:11:72:30:bb:94:3b:71: a5:f1:81:bd:15:f0:6f:6d:c0:43:e8:af:be:12:63: 20:9a:fa:05:3e:18:22:d5:94:98:fd:bc:d6:49:a0: af:44:ab:92:16:d1:60:aa:15:1c:70:6a:02:c7:d3: c0:ec:e6:93:ee:58:dd:2b:3e:52:72:27:88:55:cf: 75:6a:9b:79:be:68:d1:70:e4:2d:da:ce:74:6e:08: f9:64:aa:d5:d7:6d:29:bb:b4:1f:df:e4:f6:1d:9e: 7b:7c:a6:ab:1f:da:5a:88:ba:50:ff:65:4e:fb:2f: b8:20:65:6c:7b:b7:b7:ad:97:20:29:4e:98:09:db: 93:a1:40:2e:48:2a:dd:2c:2e:24:c4:7a:8a:17:05: 4f:33:13:0a:88:d1:5f:20:ce:19:75:d8:79:02:f6: 6f:99:d9:92:c7:cb:61:f8:32:c5:3f:22:a2:10:fb: 19:10:b5:8d:cc:5b:b3:e7:be:ee:27:3d:54:80:b4: 3f:ea:54:fe:76:00:95:2c:d9:2e:4b:58:8d:1f:19: e8:e9:ec:28:72:e6:86:74:65:03:c5:c8:49:b7:30: c5:5b:56:c6:6e:f7:f4:ae:c0:8e:b9:a7:19:7f:cc: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:09:94:03:00:8D:BF:F1:AD:DD:DA:85:0A:A0:C3:38:8C:60:64 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:af:8d:21:63:a6:4e:1a:70:07:ba:f9:05:dd:59:da:b9:ae: 95:10:d5:f5:db:24:70:28:d4:e9:4d:86:b8:2e:ca:9d:0c:b7: a9:22:57:69:f9:af:78:c6:8a:70:9e:d6:7a:ee:7b:8c:96:08: 4c:3a:dc:43:a9:54:0c:50:0a:3a:c8:d7:68:07:fc:3a:53:a3: 34:03:0f:60:bd:4b:8d:c6:3a:36:e1:21:9a:8b:f3:ff:30:8b: 42:c0:de:15:d0:ae:f2:2f:3b:67:37:9f:0a:6f:0a:9b:59:52: ff:63:7e:80:75:9d:a1:f3:58:63:93:3d:fc:bc:cd:55:58:b1: e3:71:a4:f8:6b:de:a0:76:74:ce:b5:3e:27:26:e2:ed:e9:16: 54:84:25:95:75:59:86:e3:04:66:b4:b7:b1:e6:40:4e:18:4b: fe:8c:b7:6f:21:c3:9b:8d:64:42:4e:60:ed:8b:b4:3f:d4:0e: 66:8c:a7:2c:8b:50:58:39:d5:56:d0:d5:9c:ea:0d:2b:25:37: ca:a6:f2:f4:a1:63:a0:19:ec:69:6e:0d:ff:7c:50:b6:95:7e: 99:70:ae:32:88:88:2a:5d:30:cd:95:9a:f0:15:65:ff:77:ed: 53:59:55:47:68:53:d0:6f:51:98:95:ba:36:fb:ac:a4:9f:44: 6b:b2:56:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwOTA5MDAyNzIyWhcNMjUwOTE2MDAyNzIyWjAYMRYwFAYD VQQDEw02OGJmNzQ2YS1mMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54g0hl1tbwTLJT2BwG25Y4CL9EdgyBFyMLuUO3Gl8YG9FfBvbcBD6K++EmMg mvoFPhgi1ZSY/bzWSaCvRKuSFtFgqhUccGoCx9PA7OaT7ljdKz5ScieIVc91apt5 vmjRcOQt2s50bgj5ZKrV120pu7Qf3+T2HZ57fKarH9paiLpQ/2VO+y+4IGVse7e3 rZcgKU6YCduToUAuSCrdLC4kxHqKFwVPMxMKiNFfIM4Zddh5AvZvmdmSx8th+DLF PyKiEPsZELWNzFuz577uJz1UgLQ/6lT+dgCVLNkuS1iNHxno6ewocuaGdGUDxchJ tzDFW1bGbvf0rsCOuacZf8yztwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXoCZQD AI2/8a3d2oUKoMM4jGBkMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkr40hY6ZOGnAHuvkF3Vnaua6VENX12yRwKNTpTYa4LsqdDLepIldp +a94xopwntZ67nuMlghMOtxDqVQMUAo6yNdoB/w6U6M0Aw9gvUuNxjo24SGai/P/ MItCwN4V0K7yLztnN58KbwqbWVL/Y36AdZ2h81hjkz38vM1VWLHjcaT4a96gdnTO tT4nJuLt6RZUhCWVdVmG4wRmtLex5kBOGEv+jLdvIcObjWRCTmDti7Q/1A5mjKcs i1BYOdVW0NWc6g0rJTfKpvL0oWOgGexpbg3/fFC2lX6ZcK4yiIgqXTDNlZrwFWX/ d+1TWVVHaFPQb1GYlbo2+6ykn0Rrslbh -----END CERTIFICATE-----Generated at Tue Sep 9 17:42:23 2025 by rpki-client