$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json) Hash identifier: Q9jo6J53ZlPhIAjh9rxx0y/5uqdlzdE21W+TPxTEl3w= Subject key identifier: 65:47:DB:CE:04:34:FB:5D:A6:6B:E3:6D:BF:BC:E9:6A:A4:C0:7D:8F Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 1889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft Manifest number: 1872 Signing time: Fri 22 Aug 2025 16:35:56 +0000 Manifest this update: Fri 22 Aug 2025 16:35:55 +0000 Manifest next update: Fri 29 Aug 2025 16:35:55 +0000 Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: mvmunL3CxIDNBtzXVBK6U4KJdHqhUgMWfrUP2P1xegk=) 2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=) 3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=) 4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=) 5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6281 (0x1889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 22 16:35:55 2025 GMT Not After : Aug 29 16:35:55 2025 GMT Subject: CN=68a89c6b-f471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:0e:52:c7:17:62:1d:94:9b:fa:6b:02:94: 64:f8:d6:0d:ec:fa:d3:83:1c:d5:1b:87:9c:40:fb: 3e:24:52:a9:d7:6e:6e:03:ab:14:bf:35:18:ab:0e: 1f:8c:57:3a:0c:39:38:ae:e1:46:e8:41:f9:d8:82: 0e:39:cd:6c:4e:4a:e5:08:a5:2c:fe:ac:51:b7:5d: 79:30:b9:c8:31:a8:cc:c4:23:4e:ac:23:60:6c:11: 29:eb:af:46:68:0e:8c:9b:3f:a9:99:4c:5b:0d:df: 1d:47:17:ac:de:67:09:82:85:d0:5d:c1:05:d5:5b: 23:ed:bd:99:a5:7b:65:d4:a8:18:08:dc:dd:0f:64: a3:00:c5:15:b3:fc:67:00:e7:98:66:38:ba:ab:6c: a0:fb:a3:0c:92:a1:76:d4:d6:ae:1e:e3:8a:4f:69: 40:1d:3b:69:2c:1b:62:27:90:89:65:af:a7:3c:4c: 81:41:a7:00:d7:ee:6a:6e:b1:a5:16:1c:15:ec:22: 23:fa:e8:2a:79:78:21:20:a5:5a:5f:b8:a1:d7:06: d7:85:93:af:c4:06:75:c8:aa:93:da:74:58:0b:31: 87:ff:49:81:07:5d:54:7c:df:b3:d9:92:2f:b8:b0: 57:87:52:76:89:6f:95:74:d4:f9:c6:bf:7e:df:30: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:47:DB:CE:04:34:FB:5D:A6:6B:E3:6D:BF:BC:E9:6A:A4:C0:7D:8F X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ef:cf:08:d2:22:a8:c6:b2:f7:94:cf:9e:86:ed:25:1d:28: f4:1b:75:e1:5b:db:f9:bb:2b:72:51:c2:a3:3c:7e:8f:d8:a4: 72:ea:c2:94:06:d5:f2:b7:46:08:c2:5d:b8:3b:b6:6d:e6:28: 5a:ec:a1:27:19:ee:5f:01:7c:17:d0:66:c6:f6:54:47:24:67: 45:30:a1:55:68:98:d5:15:91:e8:17:f8:4e:8a:96:6a:4e:ff: fc:5e:51:84:11:5d:da:89:e7:d1:4b:4f:c4:ab:85:c5:4f:96: 1e:50:ef:f0:9a:c2:9f:06:3b:55:53:4f:8c:2c:c1:e4:6f:b6: 8f:32:75:6f:84:d4:2f:d6:16:cb:4b:56:c2:1d:33:a0:65:5c: e7:a4:c1:ee:d8:ab:a5:a1:56:53:2b:7a:bc:00:f3:b9:86:4c: f9:4e:d3:64:e3:5e:0d:56:8d:71:60:ec:ba:d2:c2:68:0a:63: 23:83:98:f6:8e:c7:e8:36:c5:63:a4:29:cf:b3:d2:80:06:e6: d0:eb:f2:a1:98:dc:07:c6:24:62:73:94:23:4e:a8:81:ec:b3: 78:ca:1e:ba:88:8d:e8:53:4d:2c:81:b6:77:2b:77:84:90:97: dd:5d:8b:bc:cc:46:68:06:7d:ed:9d:9c:ba:de:c7:12:58:ed: 19:fe:af:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwODIyMTYzNTU1WhcNMjUwODI5MTYzNTU1WjAYMRYwFAYD VQQDEw02OGE4OWM2Yi1mNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVwOUscXYh2Um/prApRk+NYN7PrTgxzVG4ecQPs+JFKp125uA6sUvzUYqw4f jFc6DDk4ruFG6EH52IIOOc1sTkrlCKUs/qxRt115MLnIMajMxCNOrCNgbBEp669G aA6Mmz+pmUxbDd8dRxes3mcJgoXQXcEF1Vsj7b2ZpXtl1KgYCNzdD2SjAMUVs/xn AOeYZji6q2yg+6MMkqF21NauHuOKT2lAHTtpLBtiJ5CJZa+nPEyBQacA1+5qbrGl FhwV7CIj+ugqeXghIKVaX7ih1wbXhZOvxAZ1yKqT2nRYCzGH/0mBB11UfN+z2ZIv uLBXh1J2iW+VdNT5xr9+3zASewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVH284E NPtdpmvjbb+86WqkwH2PMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky bkhNNWRGYkJLNUQyUWtiSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE788I0iKoxrL3lM+ehu0lHSj0G3XhW9v5uytyUcKjPH6P2KRy6sKU BtXyt0YIwl24O7Zt5iha7KEnGe5fAXwX0GbG9lRHJGdFMKFVaJjVFZHoF/hOipZq Tv/8XlGEEV3aiefRS0/Eq4XFT5YeUO/wmsKfBjtVU0+MLMHkb7aPMnVvhNQv1hbL S1bCHTOgZVznpMHu2KuloVZTK3q8APO5hkz5TtNk414NVo1xYOy60sJoCmMjg5j2 jsfoNsVjpCnPs9KABubQ6/KhmNwHxiRic5QjTqiB7LN4yh66iI3oU00sgbZ3K3eE kJfdXYu8zEZoBn3tnZy63scSWO0Z/q/R -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:30 2025 by rpki-client