$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft File: -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json) Hash identifier: O4ZBz3xEabZk/LkHH4D2gjVXKbZ8RD4b3jBFEGPbDVE= Subject key identifier: F9:31:7B:75:6F:ED:1D:D3:CF:AC:4A:65:8C:B9:94:BF:65:BD:F3:01 Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft Manifest number: 0692 Signing time: Sun 10 Aug 2025 22:19:31 +0000 Manifest this update: Sun 10 Aug 2025 22:19:30 +0000 Manifest next update: Sun 17 Aug 2025 22:19:30 +0000 Files and hashes: 1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: UdD4qCXrBCAXLW4clMx8SS05Gzz2rvHe31JXi0mVyhI=) 2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: ACBayas3sWm8LRkAgsG4BLCCWR0NJPgThMvDEl+trzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A Validity Not Before: Aug 10 22:19:30 2025 GMT Not After : Aug 17 22:19:30 2025 GMT Subject: CN=68991af2-a455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:a7:4b:2b:ae:96:74:b8:37:a9:c5:fa:6a: ab:b3:3b:15:25:1b:0f:60:d9:d4:85:60:c1:6e:4f: a5:b4:37:b8:9e:6d:b3:5e:5c:3f:17:b7:7d:21:0a: 8f:60:a8:a5:da:a4:98:5d:a6:69:e9:bd:47:be:fe: e8:17:fc:6f:27:9e:5d:a2:1f:c9:4f:26:48:a8:d7: e0:51:9a:3c:2a:c7:81:28:e8:3b:17:0b:4b:af:b0: c6:b4:2e:ce:ec:9b:f5:41:f1:9d:04:8a:74:ae:e3: 15:fb:19:5c:35:87:98:95:94:84:5a:6b:b9:a9:42: eb:a3:bb:67:b5:46:fa:bd:55:b6:dc:19:24:49:77: 62:72:cd:f9:1d:97:b6:41:e9:28:03:83:0b:46:1b: d8:05:28:ef:ed:b3:a8:d4:6d:88:12:05:75:dc:2e: 3f:8b:42:4b:08:f0:ed:6c:d5:c3:85:b6:e4:99:a3: ce:4b:56:08:0c:c1:c5:81:b2:6b:81:c7:5b:3b:a1: a8:5e:32:5c:32:7e:3a:b6:99:fc:dd:fc:b1:68:5b: fd:53:bc:08:05:4a:cf:36:64:d8:28:93:23:2c:09: 36:a3:6c:46:78:ac:c6:46:02:8c:ef:52:4b:65:ec: d2:7c:7d:a2:b1:90:10:fa:1e:cf:c9:0d:03:24:ea: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:7B:75:6F:ED:1D:D3:CF:AC:4A:65:8C:B9:94:BF:65:BD:F3:01 X509v3 Authority Key Identifier: keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8d:85:b4:85:c9:4b:10:0e:aa:6c:3c:6f:fc:7f:a8:dd:52: d2:26:ed:29:7c:57:c6:06:16:8d:31:8f:7a:1f:fe:98:98:6d: c4:67:d0:b1:6f:50:15:d9:41:79:a1:d5:78:f1:17:79:81:f6: cd:df:98:a5:3a:ab:8e:b1:b2:5c:6c:49:c2:d4:a7:e8:6a:b6: 00:e7:22:04:0c:b4:ee:47:a3:a3:a4:4a:8e:80:33:56:12:23: 98:29:30:4d:d0:08:11:71:7b:30:f1:54:32:c8:5a:8d:cd:72: 58:6c:ab:68:e8:3b:1f:78:93:e5:39:79:a3:35:c0:78:f6:fa: 9d:78:66:f6:0c:1b:58:68:7f:87:0c:a1:53:f8:ac:cc:e8:0b: cf:f9:73:83:5a:fb:b2:40:a4:98:cb:18:94:0b:ac:fe:b7:71: b5:38:60:5f:7c:e8:70:ce:6d:99:92:74:83:50:b6:df:f4:56: b5:39:cb:fa:eb:bf:7d:1f:13:6c:a3:ac:97:30:7e:d9:8b:70: 75:71:77:99:2c:56:ad:23:c9:29:e0:62:cc:9e:9b:02:d4:76: 99:08:a3:fa:45:fc:36:17:a0:32:0c:a7:d1:c3:76:23:dd:9d: db:88:af:58:fd:a9:e7:2f:b2:98:63:c9:d3:98:68:ab:e0:91: 45:15:96:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFOTcxMTAvBgNVBAUTKEY5MDZEOTdGN0FBODdDODZEQTk5MDM5RDIzNkVDREI1 MUQyMzFGN0EwHhcNMjUwODEwMjIxOTMwWhcNMjUwODE3MjIxOTMwWjAYMRYwFAYD VQQDEw02ODk5MWFmMi1hNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZinSyuulnS4N6nF+mqrszsVJRsPYNnUhWDBbk+ltDe4nm2zXlw/F7d9IQqP YKil2qSYXaZp6b1Hvv7oF/xvJ55doh/JTyZIqNfgUZo8KseBKOg7FwtLr7DGtC7O 7Jv1QfGdBIp0ruMV+xlcNYeYlZSEWmu5qULro7tntUb6vVW23BkkSXdics35HZe2 QekoA4MLRhvYBSjv7bOo1G2IEgV13C4/i0JLCPDtbNXDhbbkmaPOS1YIDMHFgbJr gcdbO6GoXjJcMn46tpn83fyxaFv9U7wIBUrPNmTYKJMjLAk2o2xGeKzGRgKM71JL ZezSfH2isZAQ+h7PyQ0DJOrAAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkxe3Vv 7R3Tz6xKZYy5lL9lvfMBMB8GA1UdIwQYMBaAFPkG2X96qHyG2pkDnSNuzbUdIx96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkU5Ny9EMjE4MzAyRTdE NDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJYmFtUU9kSTI3TnRSMGpI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RYlpmM3FvZkliYW1RT2RJMjdOdFIwakgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkU5Ny9EMjE4MzAyRTdENDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJ YmFtUU9kSTI3TnRSMGpIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWjYW0hclLEA6qbDxv/H+o3VLSJu0pfFfGBhaNMY96H/6YmG3EZ9Cx b1AV2UF5odV48Rd5gfbN35ilOquOsbJcbEnC1KfoarYA5yIEDLTuR6OjpEqOgDNW EiOYKTBN0AgRcXsw8VQyyFqNzXJYbKto6DsfeJPlOXmjNcB49vqdeGb2DBtYaH+H DKFT+KzM6AvP+XODWvuyQKSYyxiUC6z+t3G1OGBffOhwzm2ZknSDULbf9Fa1Ocv6 6799HxNso6yXMH7Zi3B1cXeZLFatI8kp4GLMnpsC1HaZCKP6Rfw2F6AyDKfRw3Yj 3Z3biK9Y/annL7KYY8nTmGir4JFFFZZD -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:54 2025 by rpki-client