$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json) Hash identifier: XNWW3oVQoJ8AWpdvRWPNb0GF/LmPxTC8B1iEhCbiQXI= Subject key identifier: 38:93:8C:B4:93:41:B3:52:A5:8B:53:B9:EB:E9:82:08:DD:C2:A0:56 Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft Manifest number: 0760 Signing time: Sun 20 Jul 2025 21:49:45 +0000 Manifest this update: Sun 20 Jul 2025 21:49:45 +0000 Manifest next update: Sun 27 Jul 2025 21:49:45 +0000 Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: 87t4cvGnPJyN+MFk7gnPWr006HNpw9/6Xjt/kqjGYjU=) 2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: y5tNXSHIFMDA3JaGsuJYxDUjZjMTH1QaHVdqSkt/Cu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Validity Not Before: Jul 20 21:49:45 2025 GMT Not After : Jul 27 21:49:45 2025 GMT Subject: CN=687d6479-305d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:46:fc:60:10:04:ec:3f:08:e3:7c:e5:a1: 5c:b9:6f:39:d5:b3:10:4a:59:32:8f:8d:4b:1a:a5: 49:2f:02:a6:5b:ba:e7:d7:ba:09:f4:59:cf:7e:a8: ec:e7:54:18:69:5d:ee:33:8c:2f:cf:69:e5:3a:e1: 98:b6:21:65:96:78:f4:c0:10:14:41:12:36:0d:c0: 0c:43:d4:5b:91:10:e5:05:fc:40:88:5e:6d:52:79: c8:11:6a:a3:52:eb:85:9f:dc:f3:ba:90:34:49:df: 83:cc:7e:21:bd:9e:bc:2d:04:f2:48:f0:f9:03:45: 4a:6e:fe:a6:e3:49:7b:72:44:24:75:5d:75:fc:b6: 4c:db:c9:09:34:10:10:33:b8:53:2c:3f:17:d0:69: 0c:4d:65:ec:a4:0e:e1:8a:5e:e5:cf:08:ad:5e:2d: 9d:e7:67:e4:dc:59:bd:31:f4:5b:c8:fd:4c:a4:15: da:1e:0e:9c:b5:c3:eb:36:2d:30:c6:4d:d3:3a:c8: aa:7b:2e:d4:98:de:91:0d:76:3e:52:70:3d:e3:98: a5:5e:b4:61:69:56:f9:22:0a:d4:c3:86:c2:b7:35: c5:75:d3:ff:60:f8:76:db:bd:a5:bc:33:96:bb:e3: 5b:39:a3:8e:b6:77:ae:1f:19:00:c2:da:18:45:08: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:93:8C:B4:93:41:B3:52:A5:8B:53:B9:EB:E9:82:08:DD:C2:A0:56 X509v3 Authority Key Identifier: keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5b:77:c3:ef:bd:ee:39:e4:b3:6c:8c:00:56:5a:5f:92:a6: df:74:cb:76:27:43:0a:eb:af:e2:18:34:98:97:97:73:fa:f1: 15:20:42:33:55:8d:94:5a:5d:a4:6e:76:d6:76:d3:26:5d:7a: 40:3d:ef:62:9a:e6:6f:f3:6c:cc:7d:78:e5:6c:64:49:88:4c: 70:a5:de:18:81:0b:3f:87:78:6a:a6:4d:b9:5c:a2:25:e1:0e: 3c:2f:c8:3e:9b:15:22:48:d9:fe:18:4d:8d:0a:e6:88:6f:f0: 23:60:cf:f6:35:a8:73:a0:92:a7:ce:c8:14:ef:27:b0:6d:eb: d3:97:c3:81:6d:0c:bc:2e:6a:f0:db:e6:32:ce:3f:5b:ea:cd: 75:8f:61:05:af:56:13:32:17:67:79:87:d8:ec:b2:0c:e3:a6: b9:3d:2f:0d:4e:a5:51:42:1d:ef:01:a8:14:59:55:6f:72:8f: c6:bf:8b:2b:00:d7:8d:77:9e:f1:b5:ac:7c:24:a7:05:65:ae: cf:8a:09:c1:38:f9:59:87:91:e7:db:6f:a6:13:2c:d0:90:c6: f2:d1:49:b7:81:d7:cb:87:36:43:73:17:07:73:5b:e5:02:9e: 96:69:dc:82:39:a6:e2:cf:5f:a4:86:ef:67:50:71:bd:7d:29: d3:9f:bf:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx OUZFMUI4RkIwHhcNMjUwNzIwMjE0OTQ1WhcNMjUwNzI3MjE0OTQ1WjAYMRYwFAYD VQQDEw02ODdkNjQ3OS0zMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKhG/GAQBOw/CON85aFcuW851bMQSlkyj41LGqVJLwKmW7rn17oJ9FnPfqjs 51QYaV3uM4wvz2nlOuGYtiFllnj0wBAUQRI2DcAMQ9RbkRDlBfxAiF5tUnnIEWqj UuuFn9zzupA0Sd+DzH4hvZ68LQTySPD5A0VKbv6m40l7ckQkdV11/LZM28kJNBAQ M7hTLD8X0GkMTWXspA7hil7lzwitXi2d52fk3Fm9MfRbyP1MpBXaHg6ctcPrNi0w xk3TOsiqey7UmN6RDXY+UnA945ilXrRhaVb5IgrUw4bCtzXFddP/YPh2272lvDOW u+NbOaOOtneuHxkAwtoYRQihPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiTjLST QbNSpYtTuevpggjdwqBWMB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQ1Ni84MTQxNDI1RTMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJM QWdPNWppRDlaLUFaX2h1UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWW3fD773uOeSzbIwAVlpfkqbfdMt2J0MK66/iGDSYl5dz+vEVIEIz VY2UWl2kbnbWdtMmXXpAPe9imuZv82zMfXjlbGRJiExwpd4YgQs/h3hqpk25XKIl 4Q48L8g+mxUiSNn+GE2NCuaIb/AjYM/2NahzoJKnzsgU7yewbevTl8OBbQy8Lmrw 2+Yyzj9b6s11j2EFr1YTMhdneYfY7LIM46a5PS8NTqVRQh3vAagUWVVvco/Gv4sr ANeNd57xtax8JKcFZa7PignBOPlZh5Hn22+mEyzQkMby0Um3gdfLhzZDcxcHc1vl Ap6WadyCOabiz1+khu9nUHG9fSnTn7/B -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:40 2025 by rpki-client