$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: ytVnh4cBDbDiy/1BtNI5e5zLPapqiwy4m+ovUs4WQxM= Subject key identifier: 63:F6:F5:6B:AA:7E:52:31:10:41:A8:89:48:C5:11:85:E4:2F:B0:23 Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 073E Signing time: Fri 08 Aug 2025 22:10:53 +0000 Manifest this update: Fri 08 Aug 2025 22:10:52 +0000 Manifest next update: Fri 15 Aug 2025 22:10:52 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: B69qXCnmDUFIWeDl9apPN0+MbKRPzviOQiHPrJRCKbM=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Aug 8 22:10:52 2025 GMT Not After : Aug 15 22:10:52 2025 GMT Subject: CN=689675ed-b52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:2b:a9:65:e9:78:16:75:7a:2b:10:45:c7: 81:50:cc:28:51:22:80:22:7a:6a:50:d6:6a:d1:f2: b5:cd:33:57:49:43:aa:f9:66:31:c1:02:05:0f:8e: 89:4b:8d:e8:48:be:b3:f6:89:c3:1f:9b:fb:30:04: cb:24:c4:c9:19:73:e4:28:84:44:55:9b:d7:a3:8d: 05:ad:21:91:5b:29:02:c6:32:4e:3d:ed:8a:1d:d2: 76:bd:5b:cf:2b:88:44:62:54:41:d5:41:2e:90:38: 76:bd:5e:8a:17:5f:98:9f:2e:a8:73:83:14:b8:57: 3f:14:cd:5c:fd:b8:d9:a8:8e:0f:45:81:08:31:1f: 8d:14:74:ca:f9:a7:40:a2:37:67:4c:5d:6b:ae:38: 29:5a:d7:ed:ee:ff:50:c1:7f:5d:3c:75:6f:12:17: 20:af:b4:78:34:06:e0:cf:46:a2:86:30:dc:45:ea: 16:99:2e:c7:6f:ba:b1:fc:96:cf:81:de:c6:17:4f: 16:37:02:76:fc:46:24:b5:53:c6:2b:89:90:e6:ea: b0:db:df:26:1d:a3:70:74:ae:2f:6a:a3:00:d3:72: c5:54:0f:df:9a:c9:82:31:f8:d9:cf:8b:61:91:8b: d6:4a:d8:63:dd:2e:7d:60:47:01:21:31:17:f4:0c: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:F5:6B:AA:7E:52:31:10:41:A8:89:48:C5:11:85:E4:2F:B0:23 X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b2:93:05:bb:df:e2:d9:2f:6a:9f:a7:2e:4a:29:f7:7f:b2: db:39:34:78:04:c8:63:11:25:94:5b:5a:8d:cd:f3:01:76:0e: 45:a6:24:32:f3:d7:5a:64:c3:58:38:2e:ee:70:87:0a:a8:75: 97:20:70:05:db:d6:5f:cf:4e:b1:b9:4c:f8:ef:3c:e0:2c:54: d7:0d:79:a7:9c:1d:b2:ab:d7:6c:f2:aa:8d:83:61:88:ed:95: 04:91:8e:e4:b2:1b:d6:4b:e0:6b:9c:8a:f9:a5:09:b1:7b:1b: 5d:b6:a6:93:60:c6:51:b0:e8:3b:56:bc:21:c7:63:c3:c2:08: 26:f2:36:ad:a7:17:ba:a3:32:14:54:69:60:2a:c3:f9:1d:6c: d9:cd:f3:54:9a:58:00:4b:15:6a:1c:ad:bb:c3:9e:4c:44:f9: 0f:b5:41:3f:cb:fc:30:5d:79:d6:46:81:bd:58:4e:82:e0:99: 15:ae:ea:fe:90:03:f3:66:58:16:2a:83:14:cd:ea:30:ba:f8: 89:d7:af:3d:1a:cf:c8:62:6d:00:41:74:fb:77:a5:34:78:0e: 1e:0e:6f:d5:3d:a8:fd:42:fe:8f:93:ed:af:fb:99:f0:4e:ab: fb:6e:4a:42:15:03:7c:96:b7:34:a2:da:94:e7:05:4e:12:70: 84:d3:dc:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUwODA4MjIxMDUyWhcNMjUwODE1MjIxMDUyWjAYMRYwFAYD VQQDEw02ODk2NzVlZC1iNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyIrqWXpeBZ1eisQRceBUMwoUSKAInpqUNZq0fK1zTNXSUOq+WYxwQIFD46J S43oSL6z9onDH5v7MATLJMTJGXPkKIREVZvXo40FrSGRWykCxjJOPe2KHdJ2vVvP K4hEYlRB1UEukDh2vV6KF1+Yny6oc4MUuFc/FM1c/bjZqI4PRYEIMR+NFHTK+adA ojdnTF1rrjgpWtft7v9QwX9dPHVvEhcgr7R4NAbgz0aihjDcReoWmS7Hb7qx/JbP gd7GF08WNwJ2/EYktVPGK4mQ5uqw298mHaNwdK4vaqMA03LFVA/fmsmCMfjZz4th kYvWSthj3S59YEcBITEX9AwsQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP29Wuq flIxEEGoiUjFEYXkL7AjMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzspMFu9/i2S9qn6cuSin3f7LbOTR4BMhjESWUW1qNzfMBdg5FpiQy 89daZMNYOC7ucIcKqHWXIHAF29Zfz06xuUz47zzgLFTXDXmnnB2yq9ds8qqNg2GI 7ZUEkY7kshvWS+BrnIr5pQmxextdtqaTYMZRsOg7Vrwhx2PDwggm8jatpxe6ozIU VGlgKsP5HWzZzfNUmlgASxVqHK27w55MRPkPtUE/y/wwXXnWRoG9WE6C4JkVrur+ kAPzZlgWKoMUzeowuviJ1689Gs/IYm0AQXT7d6U0eA4eDm/VPaj9Qv6Pk+2v+5nw Tqv7bkpCFQN8lrc0otqU5wVOEnCE09zl -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:43 2025 by rpki-client