$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json) Hash identifier: sTAOakOUwIt4mehWhuiioQtqccwCnxx9SerCmg+X5aE= Subject key identifier: F9:06:E1:67:39:A0:A7:69:1A:65:97:8C:5A:D4:1D:12:58:41:26:5B Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft Manifest number: 0C38 Signing time: Sun 24 Aug 2025 18:35:05 +0000 Manifest this update: Sun 24 Aug 2025 18:35:04 +0000 Manifest next update: Sun 31 Aug 2025 18:35:04 +0000 Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: vD3jKosCGpuYVFZYa/FcZ+nPlLjGPH57ME2y21OeO98=) 2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: fVpTiz95zT96q52Sv8C+QJmIZKHHi2b0N2xlEcRtgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Validity Not Before: Aug 24 18:35:04 2025 GMT Not After : Aug 31 18:35:04 2025 GMT Subject: CN=68ab5b59-9788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:f1:0f:7b:b6:61:22:98:bc:1f:d4:10:59: 69:0f:af:99:85:11:03:ce:f5:9b:00:2c:3b:ba:23: 09:69:55:31:57:ba:88:6c:80:22:a2:9e:4f:e9:ba: 33:e1:40:e4:f9:0d:70:81:60:de:b4:2e:39:19:7d: 96:cf:53:56:a5:ab:05:06:be:d1:23:05:a6:3d:9f: ad:d6:87:f5:85:38:56:bc:49:19:f1:dc:14:fc:ec: db:b9:34:9e:60:84:c3:c0:68:f5:9e:3c:97:db:3a: 3b:cd:79:d0:ee:e3:27:2c:e1:8d:5d:c6:29:9e:96: 8b:d4:ee:ac:e0:d9:70:83:73:bd:fb:c3:82:3b:4b: 21:55:63:97:d3:4f:e1:c8:ae:ac:ed:00:0e:19:77: bb:f7:59:de:ac:54:d2:ed:6a:1a:6f:ef:c4:49:51: 37:77:72:ef:21:98:30:66:8e:02:ab:fc:61:88:52: 85:8d:47:61:dd:71:f2:41:59:c6:60:39:f8:99:b8: 80:30:f9:ab:12:6b:cc:99:6d:8f:bb:06:a6:09:76: 68:b3:77:a1:ad:3d:29:84:ad:49:ed:86:fb:73:f5: d3:d2:23:c4:2e:80:8a:4f:c5:89:c3:58:20:62:da: bb:6d:95:4f:8a:50:d0:1f:4f:49:e8:91:a5:4d:72: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:E1:67:39:A0:A7:69:1A:65:97:8C:5A:D4:1D:12:58:41:26:5B X509v3 Authority Key Identifier: keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:92:86:b4:bb:25:00:33:85:b5:41:5d:46:c4:79:87:24:73: df:d1:52:27:63:b2:6d:9f:bc:55:55:fc:aa:c1:20:cc:2d:23: e8:c2:2d:f1:55:3e:69:53:de:8d:b1:81:6f:2d:5a:8a:99:42: 14:f2:17:57:13:49:c3:ef:63:9c:22:77:97:e5:ac:8e:2b:c1: 23:06:aa:7e:d3:22:55:a0:f4:8e:b2:80:89:51:1d:81:31:56: 2f:d0:6e:76:90:ae:ee:ed:04:f5:27:6c:4f:3d:a8:15:29:d6: f4:3c:c8:09:ff:fd:02:84:a8:e2:11:0e:25:fb:55:b6:48:78: 04:a2:d0:c6:84:14:fe:a7:16:a3:c0:3e:94:df:9e:71:d5:0f: 26:8b:36:1e:90:f5:c3:e6:b1:ad:da:b8:76:15:64:78:73:0d: df:30:53:c4:88:89:ca:e8:1a:4f:c7:33:2c:6e:18:a0:0b:bb: eb:f6:2e:05:ae:9d:49:0c:ac:3c:fc:88:c9:f8:d4:5c:48:d5: 81:0b:c2:17:ea:ea:8e:8f:f0:29:6c:47:fd:40:c7:89:5d:e8: 0c:8e:65:4e:c8:81:2c:b9:88:a7:fa:aa:8c:6e:71:8b:f9:74: 5f:0e:ff:cc:1b:34:2d:4e:31:cb:00:2c:0e:1e:6f:aa:f4:90: 34:9b:f8:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUExMTAvBgNVBAUTKEJCNzQxMDU2QjcxQzc1NUQwM0ZCOUNGMjE0QTQxMjRD QTRGMzc2MEMwHhcNMjUwODI0MTgzNTA0WhcNMjUwODMxMTgzNTA0WjAYMRYwFAYD VQQDEw02OGFiNWI1OS05Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF/xD3u2YSKYvB/UEFlpD6+ZhREDzvWbACw7uiMJaVUxV7qIbIAiop5P6boz 4UDk+Q1wgWDetC45GX2Wz1NWpasFBr7RIwWmPZ+t1of1hThWvEkZ8dwU/OzbuTSe YITDwGj1njyX2zo7zXnQ7uMnLOGNXcYpnpaL1O6s4Nlwg3O9+8OCO0shVWOX00/h yK6s7QAOGXe791nerFTS7Woab+/ESVE3d3LvIZgwZo4Cq/xhiFKFjUdh3XHyQVnG YDn4mbiAMPmrEmvMmW2PuwamCXZos3ehrT0phK1J7Yb7c/XT0iPELoCKT8WJw1gg Ytq7bZVPilDQH09J6JGlTXIKGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkG4Wc5 oKdpGmWXjFrUHRJYQSZbMB8GA1UdIwQYMBaAFLt0EFa3HHVdA/uc8hSkEkyk83YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBQS82QTRGRkM3QTBG MTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RWMEQtNXp5RktRU1RLVHpk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzUVFWcmNjZFYwRC01enlGS1FTVEtUemRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBQS82QTRGRkM3QTBGMTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RW MEQtNXp5RktRU1RLVHpkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCokoa0uyUAM4W1QV1GxHmHJHPf0VInY7Jtn7xVVfyqwSDMLSPowi3x VT5pU96NsYFvLVqKmUIU8hdXE0nD72OcIneX5ayOK8EjBqp+0yJVoPSOsoCJUR2B MVYv0G52kK7u7QT1J2xPPagVKdb0PMgJ//0ChKjiEQ4l+1W2SHgEotDGhBT+pxaj wD6U355x1Q8mizYekPXD5rGt2rh2FWR4cw3fMFPEiInK6BpPxzMsbhigC7vr9i4F rp1JDKw8/IjJ+NRcSNWBC8IX6uqOj/ApbEf9QMeJXegMjmVOyIEsuYin+qqMbnGL +XRfDv/MGzQtTjHLACwOHm+q9JA0m/g1 -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:11 2025 by rpki-client