$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json) Hash identifier: d1UiM6qGbx08RifoS7gXG45BKTl4p6EpEoKsF4prtaI= Subject key identifier: 36:A5:59:73:B9:05:08:44:6F:A5:FD:75:9D:5E:63:BB:A6:94:12:00 Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft Manifest number: 49 Signing time: Wed 23 Jul 2025 07:42:29 +0000 Manifest this update: Wed 23 Jul 2025 07:42:29 +0000 Manifest next update: Wed 30 Jul 2025 07:42:29 +0000 Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: ZXfxDwqoRorW0ykLal90dreu6A8PyYpfyhHmZzkIq+Q=) 2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=) 3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Validity Not Before: Jul 23 07:42:29 2025 GMT Not After : Jul 30 07:42:29 2025 GMT Subject: CN=68809265-74e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:be:f9:be:3e:f3:cd:c6:24:a5:9a:b1:6a: a4:ae:6d:29:a2:0c:e9:f2:99:77:5c:91:ed:b2:7f: cf:9f:dd:f8:ad:4a:a1:c4:eb:fc:7f:dc:f7:99:fa: ff:7f:0f:87:e8:a6:63:6e:d1:c5:dc:43:95:68:06: 0c:12:28:cc:97:f9:f2:52:1f:46:d9:e6:d2:7e:fb: ed:f5:19:ba:66:ce:72:a6:4a:fc:e3:4d:97:20:5b: 63:b1:20:39:78:95:c5:d3:cb:53:95:98:c1:be:90: 65:c0:e5:41:3a:2a:e1:f1:d6:95:3d:a4:27:0d:d7: 08:c3:ab:a7:6d:7d:73:d3:59:89:81:87:e1:22:aa: 1a:de:58:4c:83:95:28:88:5e:7c:cf:09:5d:ab:da: bf:dc:0a:23:3c:e4:41:3a:c2:08:35:0a:e8:13:0a: 83:f9:65:21:88:ca:b6:8e:7a:4d:8c:c7:a7:be:79: 3f:13:f9:74:c9:fe:c5:69:94:e2:cd:84:27:a8:e4: df:30:fe:84:56:10:1d:55:e5:ae:eb:2b:1f:7d:18: 83:2c:07:d5:57:61:f5:c3:3d:ec:97:3d:23:cd:80: c7:d6:c7:7a:fe:ea:0a:28:7f:0c:98:6f:5a:24:40: 7f:88:a2:f9:9d:8f:ee:11:91:cd:f2:a2:a0:89:fb: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A5:59:73:B9:05:08:44:6F:A5:FD:75:9D:5E:63:BB:A6:94:12:00 X509v3 Authority Key Identifier: keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:30:f4:9b:06:80:5a:0e:b7:75:b1:d2:15:7d:22:52:02:33: 55:fc:4f:ae:70:de:39:c1:aa:c4:a0:84:1e:cc:cb:e5:c9:bc: a4:4e:fc:bb:bf:b2:46:2f:28:af:24:cc:d4:bc:67:8b:35:93: 24:b0:2d:c2:b0:ab:22:2c:28:25:b1:ac:8d:6f:e3:a2:d9:7c: a1:61:25:d7:36:72:d8:d8:60:5a:87:9f:a6:68:0b:1b:2f:bb: dd:22:a1:5e:15:1a:55:a2:d4:da:b8:bf:43:ad:80:60:0d:f7: 30:00:8a:c2:18:4c:aa:5e:56:92:53:69:0d:a6:ab:8b:72:c1: 34:a0:b8:30:fa:93:21:5a:53:1d:e1:75:55:71:c3:45:17:20: 05:34:82:51:f8:04:22:e6:ae:6c:76:8e:8d:37:8d:f1:bf:ea: ff:e9:9e:eb:c0:2f:e2:2c:27:42:0a:73:c8:0f:d2:37:e2:2c: f2:3c:de:3c:c1:80:2d:9e:06:03:95:be:8a:fe:ab:ba:81:f1: 33:f9:f0:41:63:8b:e6:2f:53:43:6f:6c:4d:6f:21:14:f6:c0: d1:68:63:1a:0a:23:7d:6f:92:69:35:b9:f0:62:ea:f8:16:c3: c2:ef:11:ef:f0:51:ed:37:14:01:59:68:8c:cf:0c:6f:cf:c6: 37:55:6f:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzYzRTExMC8GA1UEBRMoNjkwQzE2QTk3RUU0MEI4OUE2NENCMzFGNjJBOTlBNTYz MDA4MkRDMzAeFw0yNTA3MjMwNzQyMjlaFw0yNTA3MzAwNzQyMjlaMBgxFjAUBgNV BAMTDTY4ODA5MjY1LTc0ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41L75vj7zzcYkpZqxaqSubSmiDOnymXdcke2yf8+f3fitSqHE6/x/3PeZ+v9/ D4fopmNu0cXcQ5VoBgwSKMyX+fJSH0bZ5tJ+++31GbpmznKmSvzjTZcgW2OxIDl4 lcXTy1OVmMG+kGXA5UE6KuHx1pU9pCcN1wjDq6dtfXPTWYmBh+EiqhreWEyDlSiI XnzPCV2r2r/cCiM85EE6wgg1CugTCoP5ZSGIyraOek2Mx6e+eT8T+XTJ/sVplOLN hCeo5N8w/oRWEB1V5a7rKx99GIMsB9VXYfXDPeyXPSPNgMfWx3r+6goofwyYb1ok QH+Iovmdj+4Rkc3yoqCJ+y8hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNqVZc7kF CERvpf11nV5ju6aUEgAwHwYDVR0jBBgwFoAUaQwWqX7kC4mmTLMfYqmaVjAILcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjNFLzg1Nzk1RkVDRjkw MTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRtbVRMTWZZcW1hVmpBSUxj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVF3V3FYN2tDNG1tVExNZllxbWFWakFJTGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjNFLzg1Nzk1RkVDRjkwMTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRt bVRMTWZZcW1hVmpBSUxjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4w9JsGgFoOt3Wx0hV9IlICM1X8T65w3jnBqsSghB7My+XJvKRO/Lu/ skYvKK8kzNS8Z4s1kySwLcKwqyIsKCWxrI1v46LZfKFhJdc2ctjYYFqHn6ZoCxsv u90ioV4VGlWi1Nq4v0OtgGAN9zAAisIYTKpeVpJTaQ2mq4tywTSguDD6kyFaUx3h dVVxw0UXIAU0glH4BCLmrmx2jo03jfG/6v/pnuvAL+IsJ0IKc8gP0jfiLPI83jzB gC2eBgOVvor+q7qB8TP58EFji+YvU0NvbE1vIRT2wNFoYxoKI31vkmk1ufBi6vgW w8LvEe/wUe03FAFZaIzPDG/PxjdVb0E= -----END CERTIFICATE-----Generated at Wed Jul 23 18:09:17 2025 by rpki-client