$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: 6vB2TWk0hJsGW/w9CuZ9/Y0k/iOPeuj+ywgP0ECzc0A= Subject key identifier: 29:16:B3:99:13:CB:92:62:D8:0F:85:F6:F5:E4:76:1A:01:41:09:AD Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 03EF Signing time: Sat 31 May 2025 00:44:15 +0000 Manifest this update: Sat 31 May 2025 00:44:14 +0000 Manifest next update: Sat 07 Jun 2025 00:44:14 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: TRA+goF39wuaMbIyUNcxX6vqtojTcT+2RaUWWx6RzRc=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: May 31 00:44:14 2025 GMT Not After : Jun 7 00:44:14 2025 GMT Subject: CN=683a50df-0e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:b7:3d:52:9b:7b:bc:86:d7:40:bd:ae:2e: 02:fe:0f:f6:01:46:12:45:54:bd:c6:2b:e3:1e:52: 59:ed:8c:32:2f:84:2a:0e:bc:0d:45:72:83:0c:93: 21:d7:db:9a:03:4b:7b:eb:2f:40:d6:4f:c7:fa:6c: 8b:c2:d7:1a:59:e5:0b:52:6d:99:f2:63:1c:93:cc: 47:19:ba:c3:47:99:f9:90:1f:18:13:87:a6:70:00: 22:63:99:06:11:bc:9d:12:4e:c5:34:d4:2b:f7:6b: 2f:c0:37:eb:74:78:29:67:2a:34:95:24:46:3d:9d: bd:a1:4e:84:f8:3a:f3:59:f5:98:0e:f7:c3:96:9b: 85:14:f6:c7:72:2a:30:c8:64:aa:91:fd:cd:e8:11: b7:be:ec:dc:c9:bc:9f:ef:91:e1:a9:aa:ec:08:65: 6f:c6:91:bb:67:40:40:fc:9c:7a:2f:15:f3:69:0a: 2d:ce:97:9f:d4:17:f4:9a:db:39:e9:74:16:57:09: c5:bc:31:78:c9:da:28:7d:60:ce:72:08:55:b4:00: e0:67:d2:11:c8:ae:91:ff:88:e0:38:19:c4:c0:c9: 53:7f:d9:91:e2:5a:ec:19:c7:94:62:21:4b:39:db: fb:56:09:1c:fa:90:b9:5d:6d:cc:8b:88:4a:28:b0: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:B3:99:13:CB:92:62:D8:0F:85:F6:F5:E4:76:1A:01:41:09:AD X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e7:cf:12:87:a9:2c:b4:a5:45:0b:d4:3e:ee:7c:6a:31:b4: df:b1:a0:fa:8c:34:ed:18:26:16:2f:37:5b:1c:21:f7:2a:68: 39:e3:11:9f:3a:d7:05:74:c3:d5:2a:bb:a2:d7:3d:38:e2:c7: 65:f7:1f:1b:43:c6:71:d3:00:e3:0e:12:5a:4d:31:01:be:ad: 56:74:6e:e0:e6:13:73:ad:17:bf:d8:f5:ec:38:fe:bf:e2:6c: a4:60:54:7b:79:8e:ac:07:93:4f:e0:7e:e1:19:e2:7a:ea:42: 3a:a9:d9:d5:8e:02:ba:79:10:0d:90:c5:26:aa:1b:a5:25:4d: 91:70:f5:1b:16:d2:d7:ff:7f:9d:fa:fd:62:90:7f:5e:34:50: b8:a0:13:e7:aa:a6:a4:2e:8b:21:6b:b1:0d:93:17:b0:ce:ff: e3:59:82:0f:c7:24:53:0f:7f:a3:4a:2b:69:5b:6d:48:13:73: 8c:8a:47:e0:15:ce:1f:6a:0d:85:3b:93:88:5c:72:01:68:f0: b4:2e:45:24:cc:5a:5c:cf:c7:4a:58:01:9d:36:30:38:71:d3: 50:85:42:47:97:ec:21:db:ff:92:e1:92:3d:04:ba:43:6f:c5: 92:1e:30:e4:7d:dd:f4:41:dc:fd:f9:4a:07:fb:63:44:a2:4f: e8:5f:eb:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwNTMxMDA0NDE0WhcNMjUwNjA3MDA0NDE0WjAYMRYwFAYD VQQDEw02ODNhNTBkZi0wZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpq3PVKbe7yG10C9ri4C/g/2AUYSRVS9xivjHlJZ7YwyL4QqDrwNRXKDDJMh 19uaA0t76y9A1k/H+myLwtcaWeULUm2Z8mMck8xHGbrDR5n5kB8YE4emcAAiY5kG EbydEk7FNNQr92svwDfrdHgpZyo0lSRGPZ29oU6E+DrzWfWYDvfDlpuFFPbHciow yGSqkf3N6BG3vuzcybyf75HhqarsCGVvxpG7Z0BA/Jx6LxXzaQotzpef1Bf0mts5 6XQWVwnFvDF4ydoofWDOcghVtADgZ9IRyK6R/4jgOBnEwMlTf9mR4lrsGceUYiFL Odv7Vgkc+pC5XW3Mi4hKKLBd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkWs5kT y5Ji2A+F9vXkdhoBQQmtMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM588Sh6kstKVFC9Q+7nxqMbTfsaD6jDTtGCYWLzdbHCH3Kmg54xGf OtcFdMPVKrui1z044sdl9x8bQ8Zx0wDjDhJaTTEBvq1WdG7g5hNzrRe/2PXsOP6/ 4mykYFR7eY6sB5NP4H7hGeJ66kI6qdnVjgK6eRANkMUmqhulJU2RcPUbFtLX/3+d +v1ikH9eNFC4oBPnqqakLosha7ENkxewzv/jWYIPxyRTD3+jSitpW21IE3OMikfg Fc4fag2FO5OIXHIBaPC0LkUkzFpcz8dKWAGdNjA4cdNQhUJHl+wh2/+S4ZI9BLpD b8WSHjDkfd30Qdz9+UoH+2NEok/oX+sT -----END CERTIFICATE-----Generated at Sat May 31 17:50:40 2025 by rpki-client