$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: I533dk6B0pJ8RMdCRa828pWCLRvKgDkxjtFrnXJ3E4Y= Subject key identifier: A1:9F:6D:5F:1E:0B:5B:72:E9:2E:B5:8B:14:A2:63:AA:EA:18:4B:18 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0266 Signing time: Wed 13 Aug 2025 02:21:04 +0000 Manifest this update: Wed 13 Aug 2025 02:21:04 +0000 Manifest next update: Wed 20 Aug 2025 02:21:04 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: r4L+uCyY12InDm9mmO3Pw6Ai8Qvr0iyq72hv27KXWPY=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Aug 13 02:21:04 2025 GMT Not After : Aug 20 02:21:04 2025 GMT Subject: CN=689bf690-149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:49:13:fe:f7:2c:8a:66:37:c0:1f:8d:47: d3:09:06:49:6a:05:e8:d7:b5:49:25:a5:d6:84:5f: 89:97:33:59:41:0f:96:1d:7a:5e:e5:fc:fc:da:2d: b6:55:9c:d4:42:c8:30:a6:0f:7d:36:bc:f2:36:4f: 62:8b:d1:70:dc:de:7e:42:f2:14:15:ab:ea:52:90: b8:fd:37:f6:e5:2f:10:57:e5:01:e3:27:3c:24:2e: 88:bb:14:83:89:e1:74:70:21:6c:f7:c5:48:95:83: e8:63:87:fe:0b:54:c8:df:74:1f:41:9e:05:ce:c6: 53:0c:c0:0f:40:06:2b:3c:0b:da:4b:3e:f8:ad:c3: 4f:2e:5b:0e:f3:c7:76:3d:c2:2b:b4:d6:3b:c6:a1: aa:d8:b0:e9:5e:4e:2c:d2:61:a3:60:51:3b:39:1f: ba:c1:14:8d:0c:7b:b5:6c:de:f6:a7:27:a8:a4:e5: 0b:7c:8b:83:16:70:7c:09:52:8b:1d:f9:f1:da:0b: 8c:72:ba:34:e2:79:ea:63:5b:39:6d:f0:84:2a:28: 00:53:a1:f7:5a:fe:b4:31:c6:bb:7f:df:01:97:7e: 46:ef:2e:68:71:a3:05:07:b4:bf:c5:89:2a:f2:d7: c1:e2:50:8f:0a:e4:e1:e7:89:b4:13:be:61:f3:77: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:6D:5F:1E:0B:5B:72:E9:2E:B5:8B:14:A2:63:AA:EA:18:4B:18 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4c:31:d9:13:b5:9c:47:4e:70:e4:9d:42:8a:13:bf:1d:f5: 4c:00:50:d6:db:95:36:8d:53:1e:7c:d0:9a:84:70:ff:a0:c5: 8b:58:18:ca:39:8e:ab:ea:d1:e1:0a:3a:e0:55:0b:db:e3:e1: 8b:87:ab:a2:49:a7:d7:bc:0b:44:84:df:f6:59:f2:60:c7:fc: e9:17:39:6d:52:50:db:50:95:63:2f:86:e9:35:74:b4:26:a6: a3:e1:a8:2f:62:39:9d:23:ad:81:e9:e3:18:67:06:c5:08:a7: b6:63:53:22:6a:de:b2:55:3c:2b:f1:25:29:e6:a3:6a:7d:c4: bf:18:84:d8:54:26:25:e3:04:c2:0e:88:d4:87:5d:f6:1f:32: 02:2a:16:c0:87:f7:73:7c:b9:d6:7d:9b:c7:84:c3:c1:72:c1: 05:f1:dd:c6:03:d9:6b:6e:35:2e:3f:18:68:55:c6:6c:19:0d: 53:94:b2:16:a3:d3:8b:66:42:db:f0:cc:fa:41:8a:8f:44:75: 0b:5e:94:0a:85:03:ce:1c:a5:0d:9b:74:30:c1:26:6b:e7:3d: a9:e2:63:1a:53:5d:fd:62:d0:84:d4:20:5b:92:a0:de:11:02: 7f:0d:5f:27:83:d9:0c:0a:6f:73:42:56:01:b1:3a:18:b5:a1: 89:11:e6:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUwODEzMDIyMTA0WhcNMjUwODIwMDIyMTA0WjAYMRYwFAYD VQQDEw02ODliZjY5MC0xNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArL5JE/73LIpmN8AfjUfTCQZJagXo17VJJaXWhF+JlzNZQQ+WHXpe5fz82i22 VZzUQsgwpg99NrzyNk9ii9Fw3N5+QvIUFavqUpC4/Tf25S8QV+UB4yc8JC6IuxSD ieF0cCFs98VIlYPoY4f+C1TI33QfQZ4FzsZTDMAPQAYrPAvaSz74rcNPLlsO88d2 PcIrtNY7xqGq2LDpXk4s0mGjYFE7OR+6wRSNDHu1bN72pyeopOULfIuDFnB8CVKL Hfnx2guMcro04nnqY1s5bfCEKigAU6H3Wv60Mca7f98Bl35G7y5ocaMFB7S/xYkq 8tfB4lCPCuTh54m0E75h83e7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGfbV8e C1ty6S61ixSiY6rqGEsYMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMTDHZE7WcR05w5J1CihO/HfVMAFDW25U2jVMefNCahHD/oMWLWBjK OY6r6tHhCjrgVQvb4+GLh6uiSafXvAtEhN/2WfJgx/zpFzltUlDbUJVjL4bpNXS0 Jqaj4agvYjmdI62B6eMYZwbFCKe2Y1Miat6yVTwr8SUp5qNqfcS/GITYVCYl4wTC DojUh132HzICKhbAh/dzfLnWfZvHhMPBcsEF8d3GA9lrbjUuPxhoVcZsGQ1TlLIW o9OLZkLb8Mz6QYqPRHULXpQKhQPOHKUNm3QwwSZr5z2p4mMaU139YtCE1CBbkqDe EQJ/DV8ng9kMCm9zQlYBsToYtaGJEeZU -----END CERTIFICATE-----Generated at Wed Aug 13 04:30:03 2025 by rpki-client