$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json) Hash identifier: MEkhDGq3N7/5aUAnPjsL2dTeDV4tRQLvkn1mzM120ro= Subject key identifier: CA:11:BA:7C:13:6E:29:E7:6F:77:E0:8F:30:ED:D7:31:5E:09:C3:3E Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft Manifest number: 04C7 Signing time: Wed 20 Aug 2025 23:57:37 +0000 Manifest this update: Wed 20 Aug 2025 23:57:36 +0000 Manifest next update: Wed 27 Aug 2025 23:57:36 +0000 Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: rAMpbkXbgv4XQny7VmiBmU9M4nL3y7E+gOv3CPBTjoA=) 2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: xRvy8+EZ4EWMUGqE/C33LsDCdW9x6WHrip13g/dJz5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Validity Not Before: Aug 20 23:57:36 2025 GMT Not After : Aug 27 23:57:36 2025 GMT Subject: CN=68a660f0-f2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:92:74:6f:a8:f5:54:32:20:8e:af:61:b0: a8:11:2a:06:50:4b:5a:72:51:03:ca:74:60:0b:98: 5e:d7:c5:5e:1b:35:70:49:28:30:ee:74:4e:29:7e: 25:62:19:ef:66:3d:e7:c0:6a:91:66:d2:44:1f:72: 1e:43:3a:21:db:61:6e:64:e2:6f:70:6d:b1:2a:a4: 2b:9e:c1:d9:3f:2c:2d:8b:80:c4:17:c1:67:7d:ef: 77:a8:aa:b2:e4:b0:b6:4c:b8:4f:e4:f2:35:4c:2f: 96:a3:38:ad:1a:70:3d:99:b3:07:78:f8:78:e8:72: 11:fd:22:ad:48:74:de:a3:ee:8e:ec:b3:c5:5a:d8: d8:2f:6a:49:ba:e1:83:65:30:38:1d:88:18:e7:61: 07:c2:bd:cf:20:78:ec:23:b7:f1:f1:f1:31:25:8f: a3:44:ad:83:f6:43:60:0f:6c:3d:84:3b:aa:7e:37: 9b:3c:28:ef:ad:7b:bf:a9:6a:bd:f9:85:35:4b:a1: 54:71:eb:1f:b2:9d:16:aa:0f:fc:0d:29:26:c2:63: 14:73:da:ca:71:73:88:cb:53:2d:c5:f6:e0:6e:32: dd:71:2f:c0:f1:96:48:3b:88:09:21:dd:ce:ba:52: dd:d3:34:fc:b8:d0:1f:fc:9d:1a:55:32:01:95:a2: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:BA:7C:13:6E:29:E7:6F:77:E0:8F:30:ED:D7:31:5E:09:C3:3E X509v3 Authority Key Identifier: keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f7:94:0d:35:45:c9:df:c2:bf:63:a9:d6:0d:f8:65:88:3f: e1:3a:5d:85:d7:37:a8:d3:46:72:e5:09:ad:97:79:a9:80:e5: 4c:51:24:6c:34:85:c5:c6:3a:09:b5:81:88:ca:2b:9f:53:2b: 5b:da:b3:19:b8:16:28:0e:36:84:bb:3f:81:f6:8b:88:43:00: 70:8f:df:16:ef:1e:c6:23:24:43:6d:b8:f7:7a:02:13:21:24: a6:f4:20:36:4e:ae:ef:57:7d:16:9c:6a:46:9b:07:de:59:8b: 1f:cb:6c:50:de:d5:3f:a3:29:85:fc:2e:0d:bc:21:9e:77:00: d5:13:d7:2a:32:6b:bc:0d:3e:ce:0a:82:e8:62:e4:bc:3f:c0: a0:a3:a3:cf:02:75:3f:14:47:7e:30:6b:d2:a1:c4:e7:08:b9: 8e:da:7d:98:35:ec:37:f3:62:73:47:7e:5e:2c:44:58:5a:f4: a4:3d:b1:e8:ed:51:b5:cb:b0:3e:1b:b7:4d:1c:6a:84:ec:d3: f2:ab:b9:be:84:62:df:3f:54:e6:02:00:df:1a:67:65:88:ca: 47:61:c0:0c:89:50:53:af:5b:a6:7a:96:4a:c9:59:a7:24:01: 01:b0:8d:e8:d0:70:c4:62:fa:2d:84:b2:07:64:9d:2c:9a:85: e6:d6:ae:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZCMTc5NTRGNEFB QUREQzlDM0YwHhcNMjUwODIwMjM1NzM2WhcNMjUwODI3MjM1NzM2WjAYMRYwFAYD VQQDEw02OGE2NjBmMC1mMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTSSdG+o9VQyII6vYbCoESoGUEtaclEDynRgC5he18VeGzVwSSgw7nROKX4l YhnvZj3nwGqRZtJEH3IeQzoh22FuZOJvcG2xKqQrnsHZPywti4DEF8Fnfe93qKqy 5LC2TLhP5PI1TC+WozitGnA9mbMHePh46HIR/SKtSHTeo+6O7LPFWtjYL2pJuuGD ZTA4HYgY52EHwr3PIHjsI7fx8fExJY+jRK2D9kNgD2w9hDuqfjebPCjvrXu/qWq9 +YU1S6FUcesfsp0Wqg/8DSkmwmMUc9rKcXOIy1MtxfbgbjLdcS/A8ZZIO4gJId3O ulLd0zT8uNAf/J0aVTIBlaJvxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoRunwT binnb3fgjzDt1zFeCcM+MB8GA1UdIwQYMBaAFK0G28xTNMbXUTcvsXlU9Kqt3Jw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjU1Qy85RjE5Rjk2RTM3 MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0ZFJOeS14ZVZUMHFxM2Nu RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRYmJ6Rk0weHRkUk55LXhlVlQwcXEzY25EOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0 ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN95QNNUXJ38K/Y6nWDfhliD/hOl2F1zeo00Zy5Qmtl3mpgOVMUSRs NIXFxjoJtYGIyiufUytb2rMZuBYoDjaEuz+B9ouIQwBwj98W7x7GIyRDbbj3egIT ISSm9CA2Tq7vV30WnGpGmwfeWYsfy2xQ3tU/oymF/C4NvCGedwDVE9cqMmu8DT7O CoLoYuS8P8Cgo6PPAnU/FEd+MGvSocTnCLmO2n2YNew382JzR35eLERYWvSkPbHo 7VG1y7A+G7dNHGqE7NPyq7m+hGLfP1TmAgDfGmdliMpHYcAMiVBTr1umepZKyVmn JAEBsI3o0HDEYvothLIHZJ0smoXm1q7G -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:09 2025 by rpki-client