$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json) Hash identifier: cTp3wcm0WH3wGaRBkxSkiGgQTbZVKKf/IUKiTr8n8lA= Subject key identifier: 08:18:B7:3F:E1:4F:B6:D1:0B:84:80:B3:20:31:82:7E:4F:B9:57:21 Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft Manifest number: 7E Signing time: Tue 05 Aug 2025 07:19:52 +0000 Manifest this update: Tue 05 Aug 2025 07:19:52 +0000 Manifest next update: Tue 12 Aug 2025 07:19:52 +0000 Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: I5XQnKRsgpLNakOjAUxDY4MFpJ2/ph16XmgLGJlrNrQ=) 2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: k7rH1FXyr6kI4qM4Y34KT+7MpF/68ClavEu5cICvIzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Aug 5 07:19:52 2025 GMT Not After : Aug 12 07:19:52 2025 GMT Subject: CN=6891b098-17b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:bf:00:59:19:7a:c9:57:63:e6:dc:1b:5c: 09:37:ca:f8:59:12:62:fc:6b:ae:c3:95:6b:44:a9: 66:1f:23:ac:f4:61:63:f0:60:f6:e8:de:00:9e:aa: 87:f4:10:e1:9c:7d:99:4b:18:67:93:61:65:f4:ba: a5:fb:22:c1:6b:97:6d:13:ec:dc:29:b9:20:42:75: dc:29:b9:a9:ba:fb:3d:32:9d:c3:80:c5:b2:26:e9: 43:6e:94:d8:ef:8d:03:39:e7:94:7c:79:fa:ad:ed: fe:cf:4f:42:8b:01:49:72:49:d5:cb:64:c5:e5:89: f8:06:ba:78:ba:96:92:d1:36:ef:9e:d6:65:c2:16: b1:4d:08:8f:b5:68:52:cb:19:28:4c:d0:1f:8d:ee: 34:24:5e:03:91:fa:d0:42:dc:c7:ef:7b:fd:67:78: 2a:fd:1d:a2:25:c7:a1:c1:12:e3:1d:55:a5:e6:97: 51:71:9d:22:59:7a:f9:04:b9:ae:8b:f4:ff:b1:fc: 77:e2:f2:97:88:c4:21:7b:0c:cc:b2:54:e3:f8:e8: 7b:6e:b7:ea:b3:d8:f5:40:97:3b:e6:0d:b8:f1:17: be:57:71:6a:96:bf:af:f0:3d:02:e6:44:b5:36:46: 40:21:01:e2:6b:af:d8:f6:07:d8:db:f7:c1:ca:08: 98:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:18:B7:3F:E1:4F:B6:D1:0B:84:80:B3:20:31:82:7E:4F:B9:57:21 X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e8:d2:b4:80:d5:e7:02:63:73:50:96:21:68:5d:af:68:63: f7:a2:e0:36:ac:9b:d9:74:b4:7c:63:39:38:0e:4f:35:e2:81: 94:0f:98:41:fe:a4:a7:16:40:63:29:be:86:da:b6:37:8a:d0: 62:75:84:6d:4f:e2:65:1c:d1:4d:31:27:69:d3:f2:ab:0d:32: fd:85:23:1b:d6:96:2d:16:4c:b7:02:47:a8:8b:23:a1:78:bb: 4d:76:31:9a:de:7e:83:5f:d9:70:66:21:a8:34:33:a1:8e:df: d1:ce:1e:f3:76:48:fa:2c:dd:7b:c4:ae:42:76:18:89:7a:2f: 91:65:bc:a6:dc:47:ee:b1:2c:4c:fc:72:45:41:29:a1:5e:ad: f8:8f:77:94:58:ff:bf:36:16:07:7b:f4:93:a4:02:4d:9d:4a: 5c:7e:4d:e1:a7:a8:31:7f:af:1f:02:68:b9:48:e0:34:66:79: 60:89:de:6d:a4:c2:85:6f:13:bd:41:68:29:15:eb:bb:c3:37: d3:e3:9f:00:af:46:76:08:27:82:99:d2:e1:1b:3c:2d:95:c3: 79:71:2f:aa:93:e1:2f:4d:df:60:8f:8d:c2:5b:af:fc:a1:f6: 9b:f6:0c:f1:d1:3e:cd:90:80:cd:62:78:1f:d8:e2:cd:a4:04: 85:3c:90:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDQwMkQxRDBCRDkxRjQzODAyQzdBMEQ3MDczNjE4OEJF QkEwQTA4MTIwHhcNMjUwODA1MDcxOTUyWhcNMjUwODEyMDcxOTUyWjAYMRYwFAYD VQQDEw02ODkxYjA5OC0xN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO+/AFkZeslXY+bcG1wJN8r4WRJi/Guuw5VrRKlmHyOs9GFj8GD26N4AnqqH 9BDhnH2ZSxhnk2Fl9Lql+yLBa5dtE+zcKbkgQnXcKbmpuvs9Mp3DgMWyJulDbpTY 740DOeeUfHn6re3+z09CiwFJcknVy2TF5Yn4Brp4upaS0TbvntZlwhaxTQiPtWhS yxkoTNAfje40JF4DkfrQQtzH73v9Z3gq/R2iJcehwRLjHVWl5pdRcZ0iWXr5BLmu i/T/sfx34vKXiMQhewzMslTj+Oh7brfqs9j1QJc75g248Re+V3Fqlr+v8D0C5kS1 NkZAIQHia6/Y9gfY2/fBygiYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgYtz/h T7bRC4SAsyAxgn5PuVchMB8GA1UdIwQYMBaAFEAtHQvZH0OALHoNcHNhiL66CggS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8xQzk0NkFGMkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0QXNlZzF3YzJHSXZyb0tD QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8xQzk0NkFGMkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0 QXNlZzF3YzJHSXZyb0tDQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa6NK0gNXnAmNzUJYhaF2vaGP3ouA2rJvZdLR8Yzk4Dk814oGUD5hB /qSnFkBjKb6G2rY3itBidYRtT+JlHNFNMSdp0/KrDTL9hSMb1pYtFky3AkeoiyOh eLtNdjGa3n6DX9lwZiGoNDOhjt/Rzh7zdkj6LN17xK5CdhiJei+RZbym3EfusSxM /HJFQSmhXq34j3eUWP+/NhYHe/STpAJNnUpcfk3hp6gxf68fAmi5SOA0Znlgid5t pMKFbxO9QWgpFeu7wzfT458Ar0Z2CCeCmdLhGzwtlcN5cS+qk+EvTd9gj43CW6/8 ofab9gzx0T7NkIDNYngf2OLNpASFPJDL -----END CERTIFICATE-----Generated at Wed Aug 6 04:17:55 2025 by rpki-client