$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: P0ZQnJz3U6It+EGD8tStEbRIjEMwgyPcVLyDjE6G3Wo= Subject key identifier: EC:21:23:B6:0A:B6:4B:0F:C3:53:DF:E8:6C:56:CC:AF:9F:27:C2:D5 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 08A8 Signing time: Fri 18 Jul 2025 21:47:33 +0000 Manifest this update: Fri 18 Jul 2025 21:47:33 +0000 Manifest next update: Fri 25 Jul 2025 21:47:33 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: Hq1B6HaYngg0/QJi2ev1x/+5tTH1zabdAUKYnJMqF5g=) 2: 2A9266CE072011EF91900755C4F9AE02.roa (hash: yyylPx4liRdygaGzXhmeYgjo6sG/XK0XYIEyO4DIA1A=) 3: AA4C4484A9EC11EE800F7626C4F9AE02.roa (hash: 3XvxyjmJ18+MDyHbsINeBS/PyLVoir6bW8ksJcj0fKs=) 4: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (hash: rnXoLY/vGH6qwmV7thRnYiN9Hc46x1QdMXU9ME3UtD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Jul 18 21:47:33 2025 GMT Not After : Jul 25 21:47:33 2025 GMT Subject: CN=687ac0f5-b7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:ae:f0:f1:64:19:7d:6b:d1:a2:72:2b:0b: 75:33:2f:9e:a0:0a:e1:9e:16:6f:c5:f9:75:88:ab: f4:3f:4a:55:ba:9b:f3:bf:2d:78:3b:8a:69:c8:e0: 4e:14:81:f8:ce:4f:99:85:e4:66:c2:9f:a0:0c:de: df:2c:b4:4a:cb:41:41:79:00:ff:0c:ff:25:6f:d9: 0d:bd:09:c9:e5:14:d3:0c:7f:31:5a:0b:7e:91:c1: 0f:33:53:cf:fb:dd:4f:bb:44:2c:09:7a:c1:29:5a: 4a:e3:3e:aa:08:2e:ab:3a:6e:4b:03:d1:75:33:7a: 93:76:41:f9:1f:ca:a0:ad:c9:d2:36:23:8f:c8:7d: 24:ec:63:c8:b6:26:74:3e:7f:64:47:0a:bc:47:6d: 7f:b1:18:0d:3f:6d:3a:ff:1c:e1:c9:7a:00:24:a7: fb:42:5c:78:64:14:2e:f7:00:8c:51:35:03:ee:1e: 05:7a:48:b7:3d:de:b7:c6:6b:66:d0:d0:13:df:c4: 36:8c:62:c3:97:f5:6e:68:7c:98:b8:c4:99:77:b1: 60:54:79:9c:bf:86:1a:c9:56:66:7a:20:f1:ff:54: a1:6c:70:ac:fb:70:e6:4a:c3:a9:ac:d9:9c:3d:01: f6:30:4b:7a:5f:c3:c7:dc:f2:a2:dc:c4:af:22:19: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:21:23:B6:0A:B6:4B:0F:C3:53:DF:E8:6C:56:CC:AF:9F:27:C2:D5 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6f:62:98:bc:91:8e:9e:50:6c:bc:88:aa:84:50:64:97:55: a4:73:c2:82:b2:79:af:27:74:d7:56:c0:a9:cd:0a:87:07:4a: 5c:a7:a3:24:fd:bf:e9:04:1a:93:65:02:fb:07:14:a3:e6:54: db:fa:34:58:d3:39:80:bd:bf:09:62:84:98:a2:1c:a5:bd:57: 6b:75:ea:55:1f:e9:02:80:16:80:cd:bc:d9:10:8d:b2:63:cc: 77:5a:e1:32:b5:6a:50:a7:f4:82:44:e1:2a:4d:c0:88:46:69: e9:c9:49:1f:48:37:61:ae:4d:f3:2d:81:e4:32:e5:bb:87:8b: 1a:99:07:2b:4a:28:32:81:aa:66:0f:44:e0:54:dc:c0:6a:89: 49:f0:65:6f:4f:8a:1a:47:f6:7a:32:cb:c5:ab:20:d3:77:63: 15:e6:96:90:c7:d1:58:3c:5e:5a:1b:15:0a:cc:a9:16:7f:cb: 40:de:73:32:76:9a:98:b8:ff:8c:40:90:64:aa:52:7c:85:7b: 8f:fd:55:8d:bd:e6:3d:8d:6a:ac:6c:39:ea:24:37:b7:f7:48: b6:d9:fe:c6:34:b6:a2:80:93:5f:6b:f2:4f:9b:4a:6f:7e:a6: b9:f0:5f:52:23:4b:32:b8:52:b2:d0:71:73:94:e1:6a:7c:22: cb:88:b4:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNzE4MjE0NzMzWhcNMjUwNzI1MjE0NzMzWjAYMRYwFAYD VQQDEw02ODdhYzBmNS1iN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0U6u8PFkGX1r0aJyKwt1My+eoArhnhZvxfl1iKv0P0pVupvzvy14O4ppyOBO FIH4zk+ZheRmwp+gDN7fLLRKy0FBeQD/DP8lb9kNvQnJ5RTTDH8xWgt+kcEPM1PP +91Pu0QsCXrBKVpK4z6qCC6rOm5LA9F1M3qTdkH5H8qgrcnSNiOPyH0k7GPItiZ0 Pn9kRwq8R21/sRgNP206/xzhyXoAJKf7Qlx4ZBQu9wCMUTUD7h4Feki3Pd63xmtm 0NAT38Q2jGLDl/VuaHyYuMSZd7FgVHmcv4YayVZmeiDx/1ShbHCs+3DmSsOprNmc PQH2MEt6X8PH3PKi3MSvIhkdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwhI7YK tksPw1Pf6GxWzK+fJ8LVMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKb2KYvJGOnlBsvIiqhFBkl1Wkc8KCsnmvJ3TXVsCpzQqHB0pcp6Mk /b/pBBqTZQL7BxSj5lTb+jRY0zmAvb8JYoSYohylvVdrdepVH+kCgBaAzbzZEI2y Y8x3WuEytWpQp/SCROEqTcCIRmnpyUkfSDdhrk3zLYHkMuW7h4samQcrSigygapm D0TgVNzAaolJ8GVvT4oaR/Z6MsvFqyDTd2MV5paQx9FYPF5aGxUKzKkWf8tA3nMy dpqYuP+MQJBkqlJ8hXuP/VWNveY9jWqsbDnqJDe390i22f7GNLaigJNfa/JPm0pv fqa58F9SI0syuFKy0HFzlOFqfCLLiLRH -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:06 2025 by rpki-client