$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: 8wXbhR8hWHQ7mL5p5qeVt+X8qPk8SzQgjtm3iR5SMKk= Subject key identifier: 76:0B:10:80:40:78:01:05:9A:EF:B4:E6:03:06:56:CB:EF:DD:5E:47 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 074C Signing time: Fri 22 Aug 2025 19:40:01 +0000 Manifest this update: Fri 22 Aug 2025 19:40:01 +0000 Manifest next update: Fri 29 Aug 2025 19:40:01 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: sadKsuuB/vK1P1sqDmmMb8Zu57C7ks33kkEH6tyHIR4=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Aug 22 19:40:01 2025 GMT Not After : Aug 29 19:40:01 2025 GMT Subject: CN=68a8c791-d46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:56:56:cb:98:81:dd:54:ba:35:83:c4:0c: d4:c2:6a:cd:b2:bc:a9:14:86:ce:80:2c:e8:f9:6c: 9a:13:99:8a:d0:c8:14:d4:f2:04:4b:20:d8:cc:81: da:6c:5d:63:a8:26:5c:d8:51:51:8b:b4:7e:95:58: fc:3a:2e:66:92:76:cd:9f:0e:66:56:65:48:10:22: 1c:f0:0a:f8:80:27:7a:e4:ed:de:fe:3f:c4:4b:50: 91:79:18:e8:75:8a:b8:9f:5e:f8:48:19:f0:55:b5: e5:ca:23:28:83:66:22:50:cb:91:26:a8:6c:92:0e: 43:f3:f9:cc:86:b6:0b:32:68:d1:48:dc:bb:8e:87: 0b:af:47:26:af:3f:b2:28:d5:44:75:ad:47:bd:e2: 91:52:36:82:2e:2b:4e:ba:b3:e0:4b:0c:fe:70:48: 42:c5:eb:cf:e4:68:75:56:f9:82:af:d3:d3:b2:0d: 46:80:36:25:81:c0:66:ac:56:49:1b:9e:78:d0:e4: ce:d0:3e:9b:c7:a6:85:b4:7a:7d:50:9c:15:b6:11: 30:e1:e5:d2:a1:88:fb:01:18:d1:1b:37:a9:93:5c: e2:c5:6f:ea:aa:06:54:33:98:5a:1a:b5:00:8c:64: 08:6d:df:6e:b4:c8:d6:93:0e:8b:6f:68:3c:8d:3a: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0B:10:80:40:78:01:05:9A:EF:B4:E6:03:06:56:CB:EF:DD:5E:47 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ea:e5:53:f7:94:f1:35:c2:52:be:b2:58:b7:f1:73:0e:30: 51:b7:d9:5f:aa:19:7b:27:0d:73:cd:b3:e2:a3:b8:c8:b9:c4: 34:40:e1:47:3e:23:54:6b:06:73:48:61:d4:b3:4c:c4:92:c6: 67:da:70:ab:ea:bb:12:af:72:fb:b2:4c:4b:de:8c:a2:2b:76: 33:c0:ac:83:b3:bc:b4:2d:45:ca:21:31:66:60:52:0b:f8:7a: b2:da:42:c5:e1:ff:0a:a1:b0:86:e8:38:6c:3a:43:0a:dc:3f: fc:5e:e9:05:24:ef:7a:b5:8e:b6:d2:53:70:0b:ed:67:56:cd: c4:8e:8b:f4:97:89:d5:07:53:26:d5:36:dd:66:7d:6e:aa:ac: 90:90:8c:12:01:ca:cd:c3:e7:25:6e:9f:df:3c:c9:7f:fa:93: f9:c5:28:46:2d:1a:da:a2:b8:bd:d3:3c:30:a6:b4:7b:cb:9e: 8e:ce:09:17:05:60:dd:30:36:5a:60:99:65:b2:6b:06:1c:b7: 2d:dd:24:72:fb:d6:a6:74:aa:a1:26:99:a5:1e:8c:cd:45:23: 05:c7:96:94:cf:29:d2:78:ca:48:c0:a1:a5:5e:be:4e:81:ab: c8:2b:4d:ff:26:7e:06:d9:6a:72:1f:6f:a7:25:2e:f2:9b:fb: c4:15:42:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUwODIyMTk0MDAxWhcNMjUwODI5MTk0MDAxWjAYMRYwFAYD VQQDEw02OGE4Yzc5MS1kNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWJWVsuYgd1UujWDxAzUwmrNsrypFIbOgCzo+WyaE5mK0MgU1PIESyDYzIHa bF1jqCZc2FFRi7R+lVj8Oi5mknbNnw5mVmVIECIc8Ar4gCd65O3e/j/ES1CReRjo dYq4n174SBnwVbXlyiMog2YiUMuRJqhskg5D8/nMhrYLMmjRSNy7jocLr0cmrz+y KNVEda1HveKRUjaCLitOurPgSwz+cEhCxevP5Gh1VvmCr9PTsg1GgDYlgcBmrFZJ G5540OTO0D6bx6aFtHp9UJwVthEw4eXSoYj7ARjRGzepk1zixW/qqgZUM5haGrUA jGQIbd9utMjWkw6Lb2g8jTqWEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYLEIBA eAEFmu+05gMGVsvv3V5HMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX6uVT95TxNcJSvrJYt/FzDjBRt9lfqhl7Jw1zzbPio7jIucQ0QOFH PiNUawZzSGHUs0zEksZn2nCr6rsSr3L7skxL3oyiK3YzwKyDs7y0LUXKITFmYFIL +Hqy2kLF4f8KobCG6DhsOkMK3D/8XukFJO96tY620lNwC+1nVs3Ejov0l4nVB1Mm 1TbdZn1uqqyQkIwSAcrNw+clbp/fPMl/+pP5xShGLRraori90zwwprR7y56OzgkX BWDdMDZaYJllsmsGHLct3SRy+9amdKqhJpmlHozNRSMFx5aUzynSeMpIwKGlXr5O gavIK03/Jn4G2WpyH2+nJS7ym/vEFUIs -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:16 2025 by rpki-client