$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: DEywm3sgsy9ydcVaaK+90ueNtijogvDhkyp4BftpG70= Subject key identifier: 39:23:8C:C0:F0:E5:9F:90:DD:CF:D8:AF:E5:B1:C1:39:7B:49:BE:FA Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 069F Signing time: Fri 22 Aug 2025 22:21:13 +0000 Manifest this update: Fri 22 Aug 2025 22:21:12 +0000 Manifest next update: Fri 29 Aug 2025 22:21:12 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: z38MfE38asC8g+LOsy+fL6nsBLmwCnPk5G13nmHeN7Q=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: Aug 22 22:21:12 2025 GMT Not After : Aug 29 22:21:12 2025 GMT Subject: CN=68a8ed58-ca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:05:10:6b:75:33:38:3e:dc:9b:7d:09:cf: e8:7d:b3:c9:72:8f:20:5b:d1:63:4e:55:af:7d:7a: e0:f5:22:7b:62:71:55:13:5e:7d:63:75:43:8f:2f: 70:07:35:0c:b4:13:21:0b:4a:76:35:af:ae:bf:cd: 88:ad:51:d7:76:93:c2:b1:87:5a:b3:79:06:9f:63: 85:d2:58:ab:51:f2:41:96:62:16:e9:e9:3d:0e:c1: 3f:63:f1:8e:88:01:d5:e0:97:1c:7f:3a:a5:9d:e7: b2:c2:c7:6f:54:73:f4:03:86:a3:60:e5:cf:48:5b: 61:de:8d:44:63:e7:24:62:3f:8b:7f:09:e0:06:87: be:9e:6c:b5:b7:5b:3b:33:91:ae:ac:54:52:26:94: ed:e5:21:5f:22:f3:f4:14:70:9a:63:4d:85:cc:89: 97:f8:3d:82:5c:46:96:cd:d9:9b:fd:6a:7d:69:6b: c4:7e:b3:e7:02:9b:e0:fd:11:d7:92:d7:bb:f1:e9: 01:0e:18:14:df:0d:40:b4:77:48:22:23:c9:8d:96: a1:9b:19:6b:3a:ec:67:d4:1f:50:e8:7f:96:74:c7: 8f:06:90:36:e3:f4:2c:4e:f4:8a:4c:92:ed:6e:36: 39:31:a4:6d:05:9a:9f:cf:de:bc:f1:14:3e:f8:c9: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:8C:C0:F0:E5:9F:90:DD:CF:D8:AF:E5:B1:C1:39:7B:49:BE:FA X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d5:0a:ec:a3:ad:a5:16:a1:d1:66:3a:6a:d4:b5:25:07:9f: 66:ea:5e:e3:50:b4:d1:93:df:a8:f3:3e:41:c4:33:9c:52:aa: 54:b0:a3:88:d1:50:79:b4:20:b7:94:02:23:a7:0a:f0:c7:5a: 92:3e:7d:34:e3:7d:e3:68:44:32:f4:d3:fb:81:c8:53:b4:b5: 33:92:52:30:26:4b:ba:33:19:63:18:7e:62:ed:f0:d2:02:56: ba:d4:2e:de:14:ca:4b:95:be:3f:6b:7f:a1:88:e4:15:bd:e0: 63:bd:7e:2e:67:38:62:9e:4b:0a:7b:2a:0d:77:c4:58:1d:92: 15:fc:d0:87:fb:d4:c6:eb:48:03:39:83:f0:cf:ec:a3:58:0e: c3:e9:91:43:e4:92:04:d6:1a:26:d3:11:87:82:85:a9:0e:c1: 24:ed:ba:03:39:53:f2:48:00:68:94:2f:35:3e:31:7c:12:ff: c4:8a:52:1a:05:b3:be:ce:34:70:5d:97:1d:1e:30:a3:c4:7d: dc:99:fa:39:2a:c3:3d:8b:fe:56:ee:dd:d4:29:10:7e:5a:76: 8f:a9:db:27:0c:34:52:0d:11:82:d6:2f:fa:43:50:41:19:f8: ba:ee:49:51:30:6c:f8:4b:8f:60:82:fb:d4:c6:13:69:ba:89: 91:70:29:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjUwODIyMjIyMTEyWhcNMjUwODI5MjIyMTEyWjAYMRYwFAYD VQQDEw02OGE4ZWQ1OC1jYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6oFEGt1Mzg+3Jt9Cc/ofbPJco8gW9FjTlWvfXrg9SJ7YnFVE159Y3VDjy9w BzUMtBMhC0p2Na+uv82IrVHXdpPCsYdas3kGn2OF0lirUfJBlmIW6ek9DsE/Y/GO iAHV4JccfzqlneeywsdvVHP0A4ajYOXPSFth3o1EY+ckYj+LfwngBoe+nmy1t1s7 M5GurFRSJpTt5SFfIvP0FHCaY02FzImX+D2CXEaWzdmb/Wp9aWvEfrPnApvg/RHX kte78ekBDhgU3w1AtHdIIiPJjZahmxlrOuxn1B9Q6H+WdMePBpA24/QsTvSKTJLt bjY5MaRtBZqfz9688RQ++MlZUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkjjMDw 5Z+Q3c/Yr+WxwTl7Sb76MB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA91Qrso62lFqHRZjpq1LUlB59m6l7jULTRk9+o8z5BxDOcUqpUsKOI 0VB5tCC3lAIjpwrwx1qSPn00433jaEQy9NP7gchTtLUzklIwJku6MxljGH5i7fDS Ala61C7eFMpLlb4/a3+hiOQVveBjvX4uZzhinksKeyoNd8RYHZIV/NCH+9TG60gD OYPwz+yjWA7D6ZFD5JIE1hom0xGHgoWpDsEk7boDOVPySABolC81PjF8Ev/EilIa BbO+zjRwXZcdHjCjxH3cmfo5KsM9i/5W7t3UKRB+WnaPqdsnDDRSDRGC1i/6Q1BB Gfi67klRMGz4S49ggvvUxhNpuomRcCmA -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:53 2025 by rpki-client