$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: Xix93zdH7D4h4UIi7oc3HcNLMiGaPccdyjKQ0q2fZkI= Subject key identifier: CB:25:0B:13:3A:9D:CD:49:DB:A6:20:5D:62:DC:E5:4B:B2:19:5C:F4 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 07BE Signing time: Sat 06 Sep 2025 21:51:14 +0000 Manifest this update: Sat 06 Sep 2025 21:51:14 +0000 Manifest next update: Sat 13 Sep 2025 21:51:14 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: OXIpnF2RlypyK4KzN2KKqqu/IefpD9ms1i2VHwLsA6g=) 2: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (hash: +ewFxwgws96qZb42iktranHuo6xk0cnwygWmXyUhbEc=) 3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) 4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: zJAHsR5vMmBId4rgQblkmv5dzmrkfUHqapxlAFUK3IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Sep 6 21:51:14 2025 GMT Not After : Sep 13 21:51:14 2025 GMT Subject: CN=68bcacd2-1f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:6e:50:2f:63:25:5a:c5:ba:71:1d:b6:4b: 83:c5:3b:e9:97:f7:5a:01:ed:9f:37:bf:a7:c4:5d: ab:fa:f7:7a:3c:2f:93:38:95:67:7b:60:fa:33:6a: fb:c3:4e:e8:14:54:9d:6a:3c:38:2a:0e:f6:61:9a: 19:72:73:a0:28:f9:fe:0e:f1:76:39:a9:11:c8:b4: 26:a1:e7:09:93:28:fa:8a:10:13:db:a9:74:cf:47: c7:ce:3d:98:75:9d:af:4c:b2:0f:75:ff:75:7d:56: 9c:41:84:a1:55:ea:4a:28:99:15:67:c9:a1:b1:70: d1:c6:36:4a:b3:d8:fe:4e:d4:72:c7:4d:ee:09:c8: d2:b2:d4:91:77:a2:b0:22:22:72:7e:af:45:5f:c6: f3:65:77:5f:4e:23:f9:7c:e0:4a:0d:a1:17:fe:cc: c7:ed:60:78:e0:80:2a:62:fe:74:cf:10:0b:d0:de: 7a:d6:b8:b2:64:cf:9a:a2:cb:cb:7b:50:16:25:06: 89:cc:83:99:90:c2:01:db:3c:b5:f3:75:5c:b1:3f: 8a:89:c3:f4:c8:8c:d1:4e:58:31:38:cc:38:ae:24: f5:12:0d:c9:95:9e:dc:99:c6:99:db:3c:1e:51:bd: eb:31:a8:41:44:dc:87:7c:f5:65:de:1f:c3:56:1b: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:25:0B:13:3A:9D:CD:49:DB:A6:20:5D:62:DC:E5:4B:B2:19:5C:F4 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8c:50:99:73:32:3d:a3:a5:56:5e:a8:b0:82:d2:6c:22:01: e0:b2:aa:ee:a6:64:0e:90:3d:ef:92:9e:c2:b6:f3:c5:92:fb: 38:af:74:d6:74:66:e8:06:b8:38:5d:d1:a6:63:24:b7:30:30: b0:f2:9f:c8:8b:af:7c:2b:76:48:ef:ba:9a:85:1c:5e:3f:c2: 61:87:89:e3:3d:72:0e:09:a7:d4:36:54:69:d5:13:3d:ce:2d: 67:77:17:4a:3c:9a:9e:0f:a4:01:3b:68:f6:63:17:0d:83:e6: c7:df:6b:cf:36:5d:d9:96:97:d7:a4:39:cc:c0:5a:d8:4e:7c: cd:c6:d4:de:99:e5:ba:ea:01:21:e9:d0:2c:67:eb:02:ee:92: 7e:ee:87:38:85:8c:dd:ad:a1:1b:5d:39:f5:0c:04:04:4f:42: 01:e4:4a:20:f9:d8:7d:2b:a0:86:23:74:44:d4:9c:11:3e:ae: ee:68:89:d7:e0:cc:ac:c5:35:6c:ee:2b:26:79:29:06:f9:aa: 17:6c:97:5b:1f:ce:f7:13:25:c3:f8:c1:d1:82:47:16:ce:79: cc:64:3d:74:16:63:95:16:ac:ef:a5:bc:29:0e:bf:39:35:f6: f1:a2:64:9d:3a:34:53:f8:13:87:e4:91:5d:89:57:50:51:d3: f5:bd:eb:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwOTA2MjE1MTE0WhcNMjUwOTEzMjE1MTE0WjAYMRYwFAYD VQQDEw02OGJjYWNkMi0xZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVNuUC9jJVrFunEdtkuDxTvpl/daAe2fN7+nxF2r+vd6PC+TOJVne2D6M2r7 w07oFFSdajw4Kg72YZoZcnOgKPn+DvF2OakRyLQmoecJkyj6ihAT26l0z0fHzj2Y dZ2vTLIPdf91fVacQYShVepKKJkVZ8mhsXDRxjZKs9j+TtRyx03uCcjSstSRd6Kw IiJyfq9FX8bzZXdfTiP5fOBKDaEX/szH7WB44IAqYv50zxAL0N561riyZM+aosvL e1AWJQaJzIOZkMIB2zy183VcsT+KicP0yIzRTlgxOMw4riT1Eg3JlZ7cmcaZ2zwe Ub3rMahBRNyHfPVl3h/DVhuLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMslCxM6 nc1J26YgXWLc5UuyGVz0MB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBjFCZczI9o6VWXqiwgtJsIgHgsqrupmQOkD3vkp7CtvPFkvs4r3TW dGboBrg4XdGmYyS3MDCw8p/Ii698K3ZI77qahRxeP8Jhh4njPXIOCafUNlRp1RM9 zi1ndxdKPJqeD6QBO2j2YxcNg+bH32vPNl3ZlpfXpDnMwFrYTnzNxtTemeW66gEh 6dAsZ+sC7pJ+7oc4hYzdraEbXTn1DAQET0IB5Eog+dh9K6CGI3RE1JwRPq7uaInX 4MysxTVs7ismeSkG+aoXbJdbH873EyXD+MHRgkcWznnMZD10FmOVFqzvpbwpDr85 NfbxomSdOjRT+BOH5JFdiVdQUdP1vesn -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:48 2025 by rpki-client