$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json) Hash identifier: qfrxDyVPXZdC6WET+GyK7khultrpxxdjrST47F/m93I= Subject key identifier: C3:50:F5:5A:77:AB:82:22:F1:36:05:C3:BF:62:58:84:F4:7E:9F:2F Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Certificate serial: 077C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft Manifest number: 076B Signing time: Sun 10 Aug 2025 21:43:27 +0000 Manifest this update: Sun 10 Aug 2025 21:43:26 +0000 Manifest next update: Sun 17 Aug 2025 21:43:26 +0000 Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: p8HEX8JKrY+SVbTq5Od9rDOwyUmotVCMrEtdOMfhOos=) 2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: y5tNXSHIFMDA3JaGsuJYxDUjZjMTH1QaHVdqSkt/Cu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1916 (0x77c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Validity Not Before: Aug 10 21:43:26 2025 GMT Not After : Aug 17 21:43:26 2025 GMT Subject: CN=6899127f-20a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:ed:9f:7b:56:c7:f5:a2:73:59:3b:f6:ae: b9:1d:30:e0:89:b1:34:2b:06:83:7a:c9:7a:14:d2: 36:8f:78:bd:0c:ff:6c:37:24:10:a6:d5:89:cb:f2: fa:f2:33:d3:84:d2:73:29:74:e5:44:09:93:9a:e0: f3:43:04:45:31:78:1f:8f:4a:03:3b:d4:74:4a:22: 71:c6:80:52:c7:a8:22:df:8b:7f:e2:45:39:64:2a: f9:5a:04:62:1b:d7:cf:66:8a:7c:a4:16:cf:29:59: 76:4c:e1:f0:c3:a7:28:67:10:4f:f6:b5:a7:32:b0: 12:4b:65:3b:20:ec:a4:3a:f8:71:40:99:4e:5e:83: 7f:50:94:7f:e4:3a:8a:c4:76:f2:fe:a1:90:91:64: 7b:9f:5b:aa:39:29:fb:26:f9:41:42:2a:aa:2c:c3: d6:ae:f5:2e:fb:5f:2d:5b:c2:4c:e1:92:e7:38:03: 64:da:e6:4a:19:54:8c:3d:64:ff:e6:ad:1b:42:0c: 62:ce:2f:a4:18:11:5e:d3:98:bf:ba:d2:0f:c8:22: f0:8b:72:48:2b:b3:9b:c0:74:13:f4:25:3c:52:c0: 97:6c:a0:28:a5:c0:69:5f:5f:f8:9b:c6:ba:1a:63: 26:24:00:81:67:8e:62:86:9e:f0:98:c0:8c:c2:94: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:50:F5:5A:77:AB:82:22:F1:36:05:C3:BF:62:58:84:F4:7E:9F:2F X509v3 Authority Key Identifier: keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:ab:b1:4c:01:b0:76:9f:fc:23:e9:77:3e:f8:50:54:39:c1: e9:d3:2d:a1:30:6b:73:d7:32:4c:a8:67:c1:63:cb:a9:aa:95: e4:df:4d:df:dc:8c:d1:d8:b9:5d:0a:97:87:fd:b1:a5:cf:03: ba:b5:13:80:cd:bb:07:e6:09:e7:19:81:51:27:e1:35:62:72: aa:c0:45:5e:a6:3c:9a:8d:7f:e1:39:38:dd:f3:b1:d5:1f:46: 64:54:f9:26:16:d6:73:f9:22:f8:5e:ee:c7:14:b9:6f:42:8b: 21:79:50:42:1c:1b:f0:a1:a3:a5:e7:40:ed:40:23:52:d1:a6: 51:e1:f7:c0:53:36:34:ae:8e:b6:bd:2b:30:5e:9a:47:c1:b3: 63:81:43:19:4d:62:69:d3:b1:af:04:7f:e8:41:39:79:84:50: ad:aa:66:67:06:4c:43:92:24:8d:16:32:4d:19:ee:f5:54:31: 02:9c:02:80:6d:7f:bc:81:f2:c6:57:92:31:e1:94:26:ee:f1: 1a:1a:4c:33:39:fa:db:b7:53:af:7d:0d:6b:9e:80:38:5b:5a: 05:93:90:84:c4:f3:14:0a:56:1c:ed:b2:f5:34:32:d9:81:f1: e6:40:ba:a0:ec:48:eb:8d:68:45:b7:39:7c:7b:56:a9:bc:33: 7b:08:a8:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx OUZFMUI4RkIwHhcNMjUwODEwMjE0MzI2WhcNMjUwODE3MjE0MzI2WjAYMRYwFAYD VQQDEw02ODk5MTI3Zi0yMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3Dtn3tWx/Wic1k79q65HTDgibE0KwaDesl6FNI2j3i9DP9sNyQQptWJy/L6 8jPThNJzKXTlRAmTmuDzQwRFMXgfj0oDO9R0SiJxxoBSx6gi34t/4kU5ZCr5WgRi G9fPZop8pBbPKVl2TOHww6coZxBP9rWnMrASS2U7IOykOvhxQJlOXoN/UJR/5DqK xHby/qGQkWR7n1uqOSn7JvlBQiqqLMPWrvUu+18tW8JM4ZLnOANk2uZKGVSMPWT/ 5q0bQgxizi+kGBFe05i/utIPyCLwi3JIK7ObwHQT9CU8UsCXbKAopcBpX1/4m8a6 GmMmJACBZ45ihp7wmMCMwpR5tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNQ9Vp3 q4Ii8TYFw79iWIT0fp8vMB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQ1Ni84MTQxNDI1RTMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJM QWdPNWppRDlaLUFaX2h1UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPq7FMAbB2n/wj6Xc++FBUOcHp0y2hMGtz1zJMqGfBY8upqpXk303f 3IzR2LldCpeH/bGlzwO6tROAzbsH5gnnGYFRJ+E1YnKqwEVepjyajX/hOTjd87HV H0ZkVPkmFtZz+SL4Xu7HFLlvQosheVBCHBvwoaOl50DtQCNS0aZR4ffAUzY0ro62 vSswXppHwbNjgUMZTWJp07GvBH/oQTl5hFCtqmZnBkxDkiSNFjJNGe71VDECnAKA bX+8gfLGV5Ix4ZQm7vEaGkwzOfrbt1OvfQ1rnoA4W1oFk5CExPMUClYc7bL1NDLZ gfHmQLqg7EjrjWhFtzl8e1apvDN7CKhE -----END CERTIFICATE-----Generated at Mon Aug 11 01:53:26 2025 by rpki-client