$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json) Hash identifier: rdtNPq+axLj6ziAu+gLb4ATuxW/WL4AtqTbcuryjUxQ= Subject key identifier: 14:8A:A5:4B:61:D8:B6:AE:F3:52:D4:A5:05:18:E6:5F:90:AF:CD:35 Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 10BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft Manifest number: 10A3 Signing time: Sun 24 Aug 2025 17:17:36 +0000 Manifest this update: Sun 24 Aug 2025 17:17:35 +0000 Manifest next update: Sun 31 Aug 2025 17:17:35 +0000 Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: H52LSXWJ841TjGyAYN3Tm+XLMFORtsZBk+KOAwedu2s=) 2: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=) 3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=) 4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4284 (0x10bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Aug 24 17:17:35 2025 GMT Not After : Aug 31 17:17:35 2025 GMT Subject: CN=68ab4930-545f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:0d:7d:e0:f4:f1:7b:26:5d:ea:e2:bb:21: fe:af:30:9c:f7:18:e5:16:62:d0:8a:86:b9:02:19: e1:c4:66:cb:d7:d2:64:cc:c9:f7:a9:ee:d1:ec:03: e7:f6:f0:aa:4e:d4:93:b4:11:59:6b:28:14:80:25: b4:be:db:5d:52:9b:df:03:0b:89:d5:0c:02:43:bf: ed:44:f1:89:84:e1:17:7d:5d:91:59:59:16:a7:0b: a4:17:3c:d5:72:0f:f4:d6:89:38:f9:29:c0:47:15: 72:d0:1d:d0:b1:12:c8:79:a3:39:a4:9f:b3:ad:ce: e2:20:20:9f:bd:4a:5c:bb:0f:97:76:e7:62:91:a6: f0:56:06:11:9f:97:0c:34:0c:45:72:ad:7e:53:0e: 6e:4a:24:23:d6:92:7b:bb:dc:2e:8b:a7:ef:ec:c9: d4:28:5c:fb:95:bd:11:4a:88:f3:55:3e:0d:6c:a4: 9f:b1:3e:30:8a:1b:e5:e2:b7:69:d6:9b:f0:d3:23: ba:48:ad:ee:81:4c:ba:0e:4f:41:52:43:22:00:fa: 12:01:c4:b2:d4:77:68:36:bf:29:ca:fd:94:98:55: ef:19:c0:1b:ef:1a:74:7c:11:ec:2b:a2:93:cd:db: 9f:52:ac:7e:86:92:e0:f8:e2:d4:ec:10:0b:bb:10: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:A5:4B:61:D8:B6:AE:F3:52:D4:A5:05:18:E6:5F:90:AF:CD:35 X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:09:e7:1c:50:dd:47:e6:ef:83:2a:0d:e3:f4:f7:c1:72:8f: 37:58:47:e8:c4:94:41:8a:97:59:db:4a:be:80:6a:d4:23:b2: c2:51:5a:b6:15:19:a6:b3:6c:5b:a3:67:d0:62:d4:82:70:4b: 04:15:3e:28:ca:cb:6e:1f:eb:60:3d:90:d2:46:61:af:7d:3c: 78:53:35:60:25:b3:b2:63:ab:f8:77:6b:a3:b5:9b:39:9f:df: 37:b4:a4:cf:2c:21:47:58:bb:e1:a0:f8:45:88:0a:fa:9e:c7: e7:12:37:4a:12:9e:b4:86:d9:fe:74:68:61:dc:17:4a:cb:a5: a0:fd:23:89:ee:bb:c8:ca:76:7c:59:05:34:57:61:6d:37:11: 50:c8:23:8f:b5:21:35:84:ce:48:9d:77:b5:38:f2:37:e8:fd: 1d:09:54:18:60:11:f7:d3:7e:f8:62:52:36:32:8d:84:a6:c1: e6:3b:42:3b:5a:19:cf:4f:fc:ee:27:58:da:1c:12:92:60:b7: 91:e2:8e:de:66:ba:04:49:03:74:98:e0:d9:d1:63:cd:74:85: 84:20:a9:26:e6:e1:3e:ba:08:0c:b8:d7:e7:09:04:2d:5e:8e: c1:03:97:c5:e0:55:b4:25:e5:06:4d:b2:bb:99:ec:dc:39:e4: 02:9a:14:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUwODI0MTcxNzM1WhcNMjUwODMxMTcxNzM1WjAYMRYwFAYD VQQDEw02OGFiNDkzMC01NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspsNfeD08XsmXeriuyH+rzCc9xjlFmLQioa5AhnhxGbL19JkzMn3qe7R7APn 9vCqTtSTtBFZaygUgCW0vttdUpvfAwuJ1QwCQ7/tRPGJhOEXfV2RWVkWpwukFzzV cg/01ok4+SnARxVy0B3QsRLIeaM5pJ+zrc7iICCfvUpcuw+XdudikabwVgYRn5cM NAxFcq1+Uw5uSiQj1pJ7u9wui6fv7MnUKFz7lb0RSojzVT4NbKSfsT4wihvl4rdp 1pvw0yO6SK3ugUy6Dk9BUkMiAPoSAcSy1HdoNr8pyv2UmFXvGcAb7xp0fBHsK6KT zdufUqx+hpLg+OLU7BALuxDORwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSKpUth 2Lau81LUpQUY5l+Qr801MB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNFOS82Q0JCODRGNDMxRjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJO MHVkZ05MN0wwMnFJSERlSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBCeccUN1H5u+DKg3j9PfBco83WEfoxJRBipdZ20q+gGrUI7LCUVq2 FRmms2xbo2fQYtSCcEsEFT4oystuH+tgPZDSRmGvfTx4UzVgJbOyY6v4d2ujtZs5 n983tKTPLCFHWLvhoPhFiAr6nsfnEjdKEp60htn+dGhh3BdKy6Wg/SOJ7rvIynZ8 WQU0V2FtNxFQyCOPtSE1hM5InXe1OPI36P0dCVQYYBH30374YlI2Mo2EpsHmO0I7 WhnPT/zuJ1jaHBKSYLeR4o7eZroESQN0mODZ0WPNdIWEIKkm5uE+uggMuNfnCQQt Xo7BA5fF4FW0JeUGTbK7mezcOeQCmhQv -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:40 2025 by rpki-client