$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json) Hash identifier: A7xgdR5Uq8+UA6Wf3/ZzXqJPc2J7mRC5o02/Zpal07Y= Subject key identifier: F4:A2:9A:06:C5:5E:9D:11:B0:9F:78:B9:53:6B:72:19:92:9E:BC:01 Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft Manifest number: 50 Signing time: Tue 05 Aug 2025 07:52:55 +0000 Manifest this update: Tue 05 Aug 2025 07:52:54 +0000 Manifest next update: Tue 12 Aug 2025 07:52:54 +0000 Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: KtMmIrbSMZE0iRLY88LQ36sOwrsKxLPKL0aWp4Zyb1Y=) 2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=) 3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Validity Not Before: Aug 5 07:52:54 2025 GMT Not After : Aug 12 07:52:54 2025 GMT Subject: CN=6891b856-9f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:49:6d:74:5d:7a:60:12:ca:ce:13:24:6f: d0:97:4b:44:94:d5:a6:f6:42:13:9d:8e:4c:6c:3d: 0c:75:d6:13:5e:ba:4d:51:d0:3c:7f:25:21:67:8b: f0:e7:75:c6:7c:ae:12:03:ea:3e:67:c9:ed:6b:a4: 91:72:de:a9:bc:9e:3b:cd:68:16:26:43:ad:3a:69: 80:fa:fd:76:80:8f:1a:01:5c:a1:86:d4:39:ec:df: ed:af:1c:4e:38:3c:49:2f:f6:e9:11:be:a6:38:d7: 78:fe:42:01:a6:af:b4:47:3b:34:cf:5a:d5:1e:18: 87:65:0c:10:6d:c6:c5:3f:1c:e8:8b:e7:62:17:14: 1d:f5:1e:7b:a1:17:71:d8:86:24:2d:d4:bb:53:47: e4:e2:8f:5b:2f:4b:46:00:75:75:27:b9:5c:c1:05: 0b:cc:fb:92:a8:79:45:9d:d7:06:5d:06:bc:6f:f9: 09:76:2f:40:97:64:83:33:0a:90:87:f2:89:d5:eb: 5b:e0:b1:b6:87:49:30:db:ef:84:60:f0:c1:47:2a: b6:39:7f:c5:af:40:9e:7d:52:8c:3d:39:6e:75:a7: 99:71:6f:d9:7f:a5:6c:05:00:fa:01:13:2c:ea:64: a4:7e:f9:93:9b:b9:85:6f:ef:63:1a:80:2e:cb:c4: 0f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:9A:06:C5:5E:9D:11:B0:9F:78:B9:53:6B:72:19:92:9E:BC:01 X509v3 Authority Key Identifier: keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:64:35:67:9c:55:03:74:c0:0e:e2:25:96:1f:06:9c:8a: 9f:b7:a4:b2:30:bf:8f:c0:43:cf:65:6f:66:72:4b:48:cf:1f: 88:bf:66:ee:79:66:8a:ce:24:cd:f1:f8:38:c7:f4:2f:94:2b: 25:43:13:72:de:46:27:7a:ac:96:3b:0b:79:ef:3a:11:29:13: 81:51:62:d1:74:76:3d:4b:24:cc:d0:29:a5:57:2d:9a:74:a2: 92:5f:3f:75:71:7b:51:82:51:87:45:27:54:c1:eb:4d:1f:d8: e3:87:fd:b9:4d:46:22:a4:7c:66:13:c9:e5:bc:1c:43:d9:02: f0:f3:fb:ec:ec:3d:2d:46:23:02:c8:e9:f3:42:56:1b:58:d6: 88:d7:16:25:48:48:e0:e8:70:de:03:df:1b:e6:c9:a1:d4:8b: 88:1d:b4:66:d5:b9:e7:95:57:cb:4d:fa:7c:ec:b0:ba:e4:1c: 59:ee:07:a5:cf:99:89:12:61:49:d1:57:04:63:e6:27:3f:8f: 2f:64:77:72:a4:0e:89:e0:3a:17:ee:dc:bd:04:e9:40:ec:66: 96:d6:6a:70:dc:a1:de:e7:12:26:31:f1:65:0a:9e:b6:c4:ca: 47:6b:e9:4f:14:80:52:09:25:5f:b6:d5:c8:51:13:55:79:3f: 91:5a:86:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzYzRTExMC8GA1UEBRMoNjkwQzE2QTk3RUU0MEI4OUE2NENCMzFGNjJBOTlBNTYz MDA4MkRDMzAeFw0yNTA4MDUwNzUyNTRaFw0yNTA4MTIwNzUyNTRaMBgxFjAUBgNV BAMTDTY4OTFiODU2LTlmODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrn0ltdF16YBLKzhMkb9CXS0SU1ab2QhOdjkxsPQx11hNeuk1R0Dx/JSFni/Dn dcZ8rhID6j5nye1rpJFy3qm8njvNaBYmQ606aYD6/XaAjxoBXKGG1Dns3+2vHE44 PEkv9ukRvqY413j+QgGmr7RHOzTPWtUeGIdlDBBtxsU/HOiL52IXFB31HnuhF3HY hiQt1LtTR+Tij1svS0YAdXUnuVzBBQvM+5KoeUWd1wZdBrxv+Ql2L0CXZIMzCpCH 8onV61vgsbaHSTDb74Rg8MFHKrY5f8WvQJ59Uow9OW51p5lxb9l/pWwFAPoBEyzq ZKR++ZObuYVv72MagC7LxA8lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9KKaBsVe nRGwn3i5U2tyGZKevAEwHwYDVR0jBBgwFoAUaQwWqX7kC4mmTLMfYqmaVjAILcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjNFLzg1Nzk1RkVDRjkw MTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRtbVRMTWZZcW1hVmpBSUxj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVF3V3FYN2tDNG1tVExNZllxbWFWakFJTGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjNFLzg1Nzk1RkVDRjkwMTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRt bVRMTWZZcW1hVmpBSUxjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbXZDVnnFUDdMAO4iWWHwacip+3pLIwv4/AQ89lb2ZyS0jPH4i/Zu55 ZorOJM3x+DjH9C+UKyVDE3LeRid6rJY7C3nvOhEpE4FRYtF0dj1LJMzQKaVXLZp0 opJfP3Vxe1GCUYdFJ1TB600f2OOH/blNRiKkfGYTyeW8HEPZAvDz++zsPS1GIwLI 6fNCVhtY1ojXFiVISODocN4D3xvmyaHUi4gdtGbVueeVV8tN+nzssLrkHFnuB6XP mYkSYUnRVwRj5ic/jy9kd3KkDongOhfu3L0E6UDsZpbWanDcod7nEiYx8WUKnrbE ykdr6U8UgFIJJV+21chRE1V5P5Fahus= -----END CERTIFICATE-----Generated at Thu Aug 7 03:55:21 2025 by rpki-client