$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json) Hash identifier: oNyBzQzZr01SO/u13wwpnCVsPWgY6jPce/8tqRjz2xM= Subject key identifier: 11:ED:F8:F6:80:AF:28:29:CA:A6:C3:2E:5F:84:C9:5C:43:82:CD:2F Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft Manifest number: 0C34 Signing time: Sun 20 Jul 2025 19:10:03 +0000 Manifest this update: Sun 20 Jul 2025 19:10:02 +0000 Manifest next update: Sun 27 Jul 2025 19:10:02 +0000 Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: kxrKA6oVeqeNEEWAXgyNk4RXnWrlGhFII/VyAE4A+CM=) 2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=) 3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=) 4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=) 5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=) 6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: IncpLcKA56KouK4nJfe3cMJBEi1TzpOjSfCTV1wFUog=) 7: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=) 8: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=) 9: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=) 10: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=) 11: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=) 12: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=) 13: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: 2GnDplQiwMAlUAy3xpN879Pw+i4tKoxvTJrAxvUorrE=) 14: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=) 15: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=) 16: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=) 17: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=) 18: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=) 19: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=) 20: DE0563C21F7111F0A41C9D84C4F9AE02.roa (hash: /IpFXIthR5eSC7FyQ6j687IgRZDqYwU2/QUkyZynSVY=) 21: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: 7InJtR6Cn1ch7c1XpQQ6/w3PhjmqyqgTlZD0H0dlaLQ=) 22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=) 23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=) 24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Jul 20 19:10:02 2025 GMT Not After : Jul 27 19:10:02 2025 GMT Subject: CN=687d3f0b-f444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:5a:b0:f7:06:c0:53:81:77:9e:ea:b5:98: 53:83:99:4c:c4:ee:00:c5:80:f2:2a:59:e8:bc:32: 7d:07:f8:da:7d:d6:60:23:e9:90:ff:24:1c:05:29: 85:09:25:e5:da:92:2a:c8:f6:47:30:14:ac:db:a5: 4f:7a:11:1b:8e:e1:65:f9:52:b5:94:7a:45:9c:b9: bc:18:8e:63:d3:ca:4d:d6:67:b8:79:5a:7e:1d:16: 30:60:22:fe:97:20:ca:ce:88:d4:7f:68:04:01:82: 02:db:5f:1f:95:a7:20:96:e8:f4:c0:d6:d0:fe:d7: 32:72:0a:4d:2a:8b:35:90:10:9f:2f:8c:dd:c0:20: a7:07:e4:65:49:ab:91:21:ef:bf:a5:83:a7:f3:fb: 1e:b4:ef:6c:91:be:47:d5:e8:94:ee:a7:3e:81:40: 97:d8:e7:d9:34:21:59:9b:52:8e:17:d7:53:db:ff: a3:ee:d5:18:a2:87:b3:d1:8a:5e:b6:0c:5a:e6:3a: cd:3c:02:c5:0f:11:51:a0:d6:f3:55:ff:35:26:c3: 54:7f:f0:c0:1e:1d:0f:2d:3a:28:a7:fe:10:6b:f4: c4:23:80:18:06:d3:db:47:37:23:1b:9f:88:fa:f0: 12:09:aa:5c:b5:01:cc:3d:20:a9:aa:cd:66:6b:b6: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:ED:F8:F6:80:AF:28:29:CA:A6:C3:2E:5F:84:C9:5C:43:82:CD:2F X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ba:b7:89:bf:ce:d9:58:de:cd:3d:f6:83:3d:29:ea:4f:6a: c1:f5:bc:b4:df:a2:e3:ed:ea:16:96:22:fb:50:dd:8b:83:c0: 55:2f:7e:3d:f1:30:9c:d0:6f:eb:cb:9d:83:09:d8:c5:3c:5f: 75:35:51:94:73:11:48:32:d8:d9:af:eb:d8:aa:d8:02:a9:a0: 99:85:05:08:62:76:6c:d7:31:c3:68:9e:e2:47:72:13:15:ce: 1d:e5:2f:de:c1:46:9a:19:ec:d5:1c:ff:69:c1:67:c7:a6:2b: de:22:03:40:a8:f7:50:6a:50:c6:dd:0e:c7:88:0e:0f:09:de: f4:4f:3c:ee:61:62:ac:95:77:1f:71:a3:b5:ea:b3:d9:f0:26: f6:2b:c6:71:62:6f:53:ac:85:a2:70:10:7a:79:e0:17:1d:7e: 9e:3d:cf:1d:ed:b3:8c:5d:43:29:74:3c:4a:ac:43:65:35:cb: 42:a6:72:b7:b5:40:78:96:87:fb:08:f0:f6:7c:dd:dc:28:e4: 94:be:e0:47:8d:d2:0d:b3:41:d8:3e:bc:ec:21:28:1c:d2:d0: a6:66:43:b9:0e:8d:af:07:4a:20:a3:3b:52:9c:10:7a:22:da: 72:5b:0e:30:d9:18:d4:04:f6:69:59:8c:2b:aa:35:f8:8d:76: c2:49:fa:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUwNzIwMTkxMDAyWhcNMjUwNzI3MTkxMDAyWjAYMRYwFAYD VQQDEw02ODdkM2YwYi1mNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M9asPcGwFOBd57qtZhTg5lMxO4AxYDyKlnovDJ9B/jafdZgI+mQ/yQcBSmF CSXl2pIqyPZHMBSs26VPehEbjuFl+VK1lHpFnLm8GI5j08pN1me4eVp+HRYwYCL+ lyDKzojUf2gEAYIC218flacgluj0wNbQ/tcycgpNKos1kBCfL4zdwCCnB+RlSauR Ie+/pYOn8/setO9skb5H1eiU7qc+gUCX2OfZNCFZm1KOF9dT2/+j7tUYooez0Ype tgxa5jrNPALFDxFRoNbzVf81JsNUf/DAHh0PLToop/4Qa/TEI4AYBtPbRzcjG5+I +vASCapctQHMPSCpqs1ma7anUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHt+PaA rygpyqbDLl+EyVxDgs0vMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC9CRTg4NDZEMjM1RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4 bkhEX3libWJZTHZzMGRjN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRureJv87ZWN7NPfaDPSnqT2rB9by036Lj7eoWliL7UN2Lg8BVL349 8TCc0G/ry52DCdjFPF91NVGUcxFIMtjZr+vYqtgCqaCZhQUIYnZs1zHDaJ7iR3IT Fc4d5S/ewUaaGezVHP9pwWfHpiveIgNAqPdQalDG3Q7HiA4PCd70TzzuYWKslXcf caO16rPZ8Cb2K8ZxYm9TrIWicBB6eeAXHX6ePc8d7bOMXUMpdDxKrENlNctCpnK3 tUB4lof7CPD2fN3cKOSUvuBHjdINs0HYPrzsISgc0tCmZkO5Do2vB0ogoztSnBB6 ItpyWw4w2RjUBPZpWYwrqjX4jXbCSfoy -----END CERTIFICATE-----Generated at Mon Jul 21 12:48:05 2025 by rpki-client