$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json) Hash identifier: ZGuztRmSN14eevxblR2KZm+7lesr80AhmBBL3dTm8/U= Subject key identifier: 29:64:D7:1B:A6:86:63:5F:EA:3D:8A:D9:A2:8A:F7:35:3A:F9:E6:8C Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft Manifest number: 73 Signing time: Sat 19 Jul 2025 07:05:33 +0000 Manifest this update: Sat 19 Jul 2025 07:05:33 +0000 Manifest next update: Sat 26 Jul 2025 07:05:33 +0000 Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: kddUsBjWceYj8gy21yUXD87TCM+Up7YorSQVtwn9J1I=) 2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: 3X4IEvNoArraBKAuq5CyT+VKjti9XVZccQ9OUFJ9p8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Jul 19 07:05:33 2025 GMT Not After : Jul 26 07:05:33 2025 GMT Subject: CN=687b43bd-1719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:29:6e:d1:ca:d2:13:97:e7:ce:97:60:d6: c7:11:bf:2f:74:62:ec:d2:15:18:fb:78:3b:3e:a9: 93:23:23:2d:03:31:42:f0:6b:7f:15:2d:1d:be:80: 27:a2:bb:10:5a:4d:52:b6:f4:c7:3c:4a:ff:9a:58: 7f:fe:11:1f:c6:5c:a5:15:c2:07:42:91:b6:46:97: 36:ce:9e:f9:bb:31:9d:a5:b5:19:45:38:0b:0d:af: c0:e9:d7:c5:52:b3:50:ca:4c:44:17:51:55:6c:d2: ef:e4:8f:02:fd:32:22:3e:2c:f4:01:06:7f:5e:91: 28:5a:07:73:5e:32:3c:58:a8:7a:71:42:6b:ad:fc: c6:b7:a5:46:4a:ff:9c:04:44:b6:73:b1:b1:d6:98: 20:66:18:0f:d1:cf:89:47:50:d8:a5:7b:87:26:9b: 29:98:31:47:27:bb:a9:90:7b:6a:53:05:24:ce:b1: 41:62:4a:d9:47:ce:3e:7f:c4:08:e0:45:a9:d5:38: c1:c8:41:ab:4b:39:29:da:45:8c:bd:14:07:ba:ab: 88:81:9b:6b:67:ec:1d:11:01:8b:a0:24:78:c1:18: 0b:38:19:56:be:1d:c9:3a:80:7b:a5:ff:27:1c:0c: 30:33:70:f8:7b:cb:05:7d:8b:6a:09:0a:d3:f8:33: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:D7:1B:A6:86:63:5F:EA:3D:8A:D9:A2:8A:F7:35:3A:F9:E6:8C X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:17:d6:30:a5:e8:3f:51:a7:cc:b3:e8:90:8d:4b:4d:9e: bc:6f:a3:83:95:ce:c1:fb:d8:1e:50:e5:5d:45:1f:72:55:9f: 7e:22:48:86:fd:0e:45:0a:b6:d8:53:cc:9b:21:a0:49:a6:85: 70:c9:8b:55:3e:16:f5:8a:3a:dc:bc:71:5c:9e:21:1a:b8:52: be:08:06:1b:48:b7:94:7c:15:8b:bc:b1:93:c5:b9:50:73:31: f7:80:0c:50:b0:bf:65:66:6a:38:7d:5b:f8:84:7d:de:0b:8c: 29:5f:62:94:61:d2:c0:dd:11:ba:bd:34:45:f6:b6:96:79:72: d7:9b:7d:8c:bc:b7:95:f8:c8:96:ae:af:f6:ce:29:1f:fd:b8: 8f:88:40:55:b9:ca:32:39:e6:d2:7f:92:27:00:97:44:d6:a0: 39:60:cc:01:fe:2b:1a:3c:e9:62:18:94:08:57:62:1c:2d:17: f5:45:75:98:af:bb:7b:3a:11:72:f5:42:64:12:ab:17:f2:4d: d3:d1:c3:69:85:30:d4:e9:f6:a1:51:60:17:25:c8:7f:6b:d2: da:8a:f2:69:b5:5a:28:be:d6:3d:f6:18:78:76:53:4c:07:4c: fd:86:e3:ad:74:80:3d:27:53:ab:87:f8:e4:4b:ed:6a:3e:db: 2d:ad:f1:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkFDQjExMC8GA1UEBRMoNDAyRDFEMEJEOTFGNDM4MDJDN0EwRDcwNzM2MTg4QkVC QTBBMDgxMjAeFw0yNTA3MTkwNzA1MzNaFw0yNTA3MjYwNzA1MzNaMBgxFjAUBgNV BAMTDTY4N2I0M2JkLTE3MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAPilu0crSE5fnzpdg1scRvy90YuzSFRj7eDs+qZMjIy0DMULwa38VLR2+gCei uxBaTVK29Mc8Sv+aWH/+ER/GXKUVwgdCkbZGlzbOnvm7MZ2ltRlFOAsNr8Dp18VS s1DKTEQXUVVs0u/kjwL9MiI+LPQBBn9ekShaB3NeMjxYqHpxQmut/Ma3pUZK/5wE RLZzsbHWmCBmGA/Rz4lHUNile4cmmymYMUcnu6mQe2pTBSTOsUFiStlHzj5/xAjg RanVOMHIQatLOSnaRYy9FAe6q4iBm2tn7B0RAYugJHjBGAs4GVa+Hck6gHul/ycc DDAzcPh7ywV9i2oJCtP4M77/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKWTXG6aG Y1/qPYrZoor3NTr55owwHwYDVR0jBBgwFoAUQC0dC9kfQ4Aseg1wc2GIvroKCBIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGQUNCLzFDOTQ2QUYyQjQ2 NTExRUY5QkZCQUE2N0M0RjlBRTAyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUMwZEM5a2ZRNEFzZWcxd2MyR0l2cm9LQ0JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG QUNCLzFDOTQ2QUYyQjQ2NTExRUY5QkZCQUE2N0M0RjlBRTAyL1FDMGRDOWtmUTRB c2VnMXdjMkdJdnJvS0NCSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJ2F9Ywpeg/UafMs+iQjUtNnrxvo4OVzsH72B5Q5V1FH3JVn34iSIb9 DkUKtthTzJshoEmmhXDJi1U+FvWKOty8cVyeIRq4Ur4IBhtIt5R8FYu8sZPFuVBz MfeADFCwv2Vmajh9W/iEfd4LjClfYpRh0sDdEbq9NEX2tpZ5ctebfYy8t5X4yJau r/bOKR/9uI+IQFW5yjI55tJ/kicAl0TWoDlgzAH+Kxo86WIYlAhXYhwtF/VFdZiv u3s6EXL1QmQSqxfyTdPRw2mFMNTp9qFRYBclyH9r0tqK8mm1Wii+1j32GHh2U0wH TP2G4610gD0nU6uH+ORL7Wo+2y2t8Sg= -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:11 2025 by rpki-client