$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json) Hash identifier: 5Eeodu+fMFrRgxV9/Zo8PtKYbRNUXu/QCynJgw6/gQM= Subject key identifier: 1A:B7:53:E1:30:40:5D:27:DB:1D:E1:10:C0:1B:A1:57:E9:AE:20:72 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft Manifest number: 0C51 Signing time: Thu 04 Sep 2025 19:14:01 +0000 Manifest this update: Thu 04 Sep 2025 19:14:01 +0000 Manifest next update: Thu 11 Sep 2025 19:14:01 +0000 Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: 6TRCqJ+oyGeZAT+crhofbYJpPEQl1KyL/8k7divah3Q=) 2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=) 3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=) 4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=) 5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=) 6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: IncpLcKA56KouK4nJfe3cMJBEi1TzpOjSfCTV1wFUog=) 7: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: +yIXmJbCdMTZC3e7y+K7ZSmGxQFt4WPyrNXjRz6xTWc=) 8: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=) 9: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=) 10: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=) 11: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=) 12: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=) 13: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=) 14: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: 2GnDplQiwMAlUAy3xpN879Pw+i4tKoxvTJrAxvUorrE=) 15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=) 16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=) 17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=) 18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=) 19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=) 20: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=) 21: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: 7InJtR6Cn1ch7c1XpQQ6/w3PhjmqyqgTlZD0H0dlaLQ=) 22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=) 23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=) 24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Sep 4 19:14:01 2025 GMT Not After : Sep 11 19:14:01 2025 GMT Subject: CN=68b9e4f9-8cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:32:7a:8a:e6:90:d7:a4:38:8c:61:2b:a3:3e: f4:1b:80:a5:b8:8f:f5:30:cb:e6:98:07:fa:56:7c: be:e6:9b:5f:b6:57:10:70:26:cd:9b:14:56:a6:eb: d8:3d:b8:80:e0:16:fb:47:cb:18:12:8f:b8:d3:a7: 69:d5:cd:da:87:d6:ba:5b:f8:8a:21:78:8e:d4:ff: 74:8a:6f:14:e5:4c:43:8b:59:6d:4f:61:b5:46:76: 78:32:80:be:3c:f5:26:f3:e7:fd:7f:db:f4:7d:12: 4d:6d:e0:4c:d5:c1:0e:28:b8:2b:21:f6:86:65:fd: 36:12:5f:f6:8d:92:13:26:bd:0c:2d:21:cc:05:e2: 98:4c:38:64:dd:cf:be:25:cb:32:5a:d3:dd:df:e0: cf:12:e4:1e:b6:e8:ee:da:73:00:b4:dc:77:8a:10: 34:32:9a:84:81:8e:a7:be:76:8c:e9:fa:80:b1:77: 5d:24:fa:74:d8:85:73:bb:b2:0a:f3:b5:1c:f3:d2: f0:b3:07:9f:39:f0:0e:3f:0c:ca:0d:ae:db:ae:55: 4f:61:55:6a:7e:5d:3a:16:07:01:ee:d3:e1:48:ce: 83:b7:fb:63:ac:f7:c7:5c:d2:cf:33:96:99:60:08: 6d:15:e1:ba:09:2a:3e:75:fd:ca:41:93:0e:bb:e7: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B7:53:E1:30:40:5D:27:DB:1D:E1:10:C0:1B:A1:57:E9:AE:20:72 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:97:82:9d:39:88:cb:e7:b7:6e:8e:ea:29:61:9c:c5:34:28: bf:cf:da:b5:2d:a4:38:a3:89:eb:15:eb:88:5c:19:aa:d1:8c: b1:d3:61:31:d6:35:3e:4d:3c:b2:37:10:6d:37:49:5e:5a:53: 33:6b:75:d3:2f:6c:20:3a:90:8c:46:fa:0d:a3:6d:00:28:c2: d5:35:95:fc:53:54:33:8c:5b:a4:99:76:0e:40:57:54:55:6a: 33:b1:15:f5:7c:92:3d:0b:1c:77:ef:f3:b9:ed:db:d7:8d:22: 77:08:82:fe:91:7d:23:dc:64:84:e2:01:00:4e:ba:51:64:d1: 8a:57:e0:34:e3:5a:99:18:f0:07:5a:22:01:14:ec:62:6f:ff: 03:73:5e:91:6b:1f:46:66:61:79:fb:49:cd:58:b6:cd:5d:60: 8b:2f:3a:8a:2c:1e:83:d2:40:91:09:89:4d:57:66:01:99:6a: ef:2d:4d:57:71:81:fa:16:a5:8d:62:4b:04:d3:b7:b9:53:6f: 07:83:b9:66:d3:b1:d6:b0:91:67:4b:c1:a5:c1:49:d5:be:3a: 74:0d:60:2b:39:ef:e0:e5:eb:e4:df:c0:57:b2:9f:5b:fc:06: 21:40:89:69:dc:3a:7c:24:1b:3a:66:60:26:47:1b:6f:f3:b9: 52:5d:d8:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUwOTA0MTkxNDAxWhcNMjUwOTExMTkxNDAxWjAYMRYwFAYD VQQDEw02OGI5ZTRmOS04Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TJ6iuaQ16Q4jGEroz70G4CluI/1MMvmmAf6Vny+5ptftlcQcCbNmxRWpuvY PbiA4Bb7R8sYEo+406dp1c3ah9a6W/iKIXiO1P90im8U5UxDi1ltT2G1RnZ4MoC+ PPUm8+f9f9v0fRJNbeBM1cEOKLgrIfaGZf02El/2jZITJr0MLSHMBeKYTDhk3c++ JcsyWtPd3+DPEuQetuju2nMAtNx3ihA0MpqEgY6nvnaM6fqAsXddJPp02IVzu7IK 87Uc89LwswefOfAOPwzKDa7brlVPYVVqfl06FgcB7tPhSM6Dt/tjrPfHXNLPM5aZ YAhtFeG6CSo+df3KQZMOu+dj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq3U+Ew QF0n2x3hEMAboVfpriByMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC9CRTg4NDZEMjM1RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4 bkhEX3libWJZTHZzMGRjN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAal4KdOYjL57dujuopYZzFNCi/z9q1LaQ4o4nrFeuIXBmq0Yyx02Ex 1jU+TTyyNxBtN0leWlMza3XTL2wgOpCMRvoNo20AKMLVNZX8U1QzjFukmXYOQFdU VWozsRX1fJI9Cxx37/O57dvXjSJ3CIL+kX0j3GSE4gEATrpRZNGKV+A041qZGPAH WiIBFOxib/8Dc16Rax9GZmF5+0nNWLbNXWCLLzqKLB6D0kCRCYlNV2YBmWrvLU1X cYH6FqWNYksE07e5U28Hg7lm07HWsJFnS8GlwUnVvjp0DWArOe/g5evk38BXsp9b /AYhQIlp3Dp8JBs6ZmAmRxtv87lSXdg0 -----END CERTIFICATE-----Generated at Sat Sep 6 04:17:41 2025 by rpki-client