$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: doSECP8nyf7XovL/BwJ0o3lKKuiIkoom8eC4gxC6ZrE= Subject key identifier: 58:DB:CC:B8:60:05:E8:57:A6:95:7D:E8:F2:CA:F6:A9:91:B8:BC:8F Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 0617 Signing time: Fri 22 Aug 2025 23:00:57 +0000 Manifest this update: Fri 22 Aug 2025 23:00:56 +0000 Manifest next update: Fri 29 Aug 2025 23:00:56 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: G6slNNWN8XaUjh7uuStE3acPyb3p24EBjBPdCglOQ6A=) 2: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: yctT4YUUP20tQCvJN7CWg3MrC6O8Tuq96ZLx+s4UkRo=) 3: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: ufcIsYDdxZ7JHQere7GH/LJcOYs+a2XI1MSL+ZvwbhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: Aug 22 23:00:56 2025 GMT Not After : Aug 29 23:00:56 2025 GMT Subject: CN=68a8f6a9-2335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:86:a1:fa:70:df:b7:0e:e0:9c:45:63:f9: 30:39:34:19:ae:10:cf:7c:b6:c7:48:79:30:05:38: 65:3a:97:87:1f:d5:db:9e:39:eb:85:0b:9d:50:dd: e3:20:13:cc:5d:74:64:f4:38:a5:ef:da:3f:e9:99: 23:ed:96:96:2f:0b:0a:57:54:af:ff:1f:d9:81:a9: ca:f9:a1:42:7b:e0:db:37:b8:f5:9c:69:a6:ed:aa: 82:17:a5:8a:19:72:e7:17:29:6c:0d:17:46:b6:70: d5:98:0e:c9:aa:41:35:e5:fc:a1:7f:e1:a5:de:2d: dc:92:56:f3:b6:72:95:e3:d9:e8:54:1c:dc:89:13: 1c:ac:bf:86:73:9d:a6:ad:de:f0:ef:92:c6:88:8f: 2b:3b:44:3f:a1:f6:02:29:99:73:9d:5f:bb:92:e2: 29:d5:1c:a6:63:a2:1d:32:fc:3d:b0:bd:dd:34:5b: 3f:f9:1b:8f:fc:e8:b7:26:55:e8:39:2f:9d:f0:59: 67:57:f5:e5:4d:cd:00:15:0c:2a:33:86:4e:e5:4a: 3d:c7:94:c6:f3:1f:59:6e:4c:4a:b1:b5:70:6d:f6: c6:48:9b:e7:71:08:b3:c2:90:fb:93:90:ed:73:da: 95:7d:e7:c3:dc:f6:bc:05:fd:72:63:2b:06:95:46: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:CC:B8:60:05:E8:57:A6:95:7D:E8:F2:CA:F6:A9:91:B8:BC:8F X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:4d:5a:50:c8:77:8a:a6:33:ba:b0:38:95:2f:e5:1a:62: dc:69:a6:49:79:c5:d4:a1:33:0e:72:4d:dc:7f:1d:8a:e2:52: b2:cc:70:9c:36:f9:2d:9b:f2:18:e9:18:c1:d1:02:5a:91:6d: 1e:98:50:98:6e:ba:28:65:bc:a0:1e:d2:01:ce:fd:0d:99:81: 60:5b:9f:c9:fa:59:9f:25:63:76:de:bc:59:34:d5:93:11:ff: 9e:c4:b0:8f:6b:9e:15:4c:ae:74:71:cd:28:77:23:9a:f5:87: c7:8d:2e:95:94:bf:5e:5e:e0:55:08:86:15:4d:e0:db:ab:08: 74:a3:42:8e:b1:95:b3:72:25:d0:b7:e2:90:bc:45:ea:dc:c6: 49:3f:76:29:8e:74:7b:ee:5d:d6:b9:72:06:a1:5f:c5:70:ac: 96:92:7e:38:5d:c8:38:05:c1:46:2d:fd:07:df:40:98:d7:97: 1a:ea:75:bc:46:25:39:b8:95:37:69:58:77:31:a1:95:e2:6d: 36:d1:10:f2:f7:65:a5:60:50:7d:11:56:7e:dd:35:11:a1:99: 0e:86:66:ba:53:78:2b:50:07:cb:09:95:6e:5e:7a:f4:10:86: 05:db:f6:65:f1:c3:d2:20:7e:fd:e2:e1:0c:a1:fc:c7:0f:d6: 20:35:8f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjUwODIyMjMwMDU2WhcNMjUwODI5MjMwMDU2WjAYMRYwFAYD VQQDEw02OGE4ZjZhOS0yMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9CGofpw37cO4JxFY/kwOTQZrhDPfLbHSHkwBThlOpeHH9XbnjnrhQudUN3j IBPMXXRk9Dil79o/6Zkj7ZaWLwsKV1Sv/x/ZganK+aFCe+DbN7j1nGmm7aqCF6WK GXLnFylsDRdGtnDVmA7JqkE15fyhf+Gl3i3cklbztnKV49noVBzciRMcrL+Gc52m rd7w75LGiI8rO0Q/ofYCKZlznV+7kuIp1RymY6IdMvw9sL3dNFs/+RuP/Oi3JlXo OS+d8FlnV/XlTc0AFQwqM4ZO5Uo9x5TG8x9ZbkxKsbVwbfbGSJvncQizwpD7k5Dt c9qVfefD3Pa8Bf1yYysGlUbXYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjbzLhg BehXppV96PLK9qmRuLyPMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQU1aUMh3iqYzurA4lS/lGmLcaaZJecXUoTMOck3cfx2K4lKyzHCc Nvktm/IY6RjB0QJakW0emFCYbrooZbygHtIBzv0NmYFgW5/J+lmfJWN23rxZNNWT Ef+exLCPa54VTK50cc0odyOa9YfHjS6VlL9eXuBVCIYVTeDbqwh0o0KOsZWzciXQ t+KQvEXq3MZJP3YpjnR77l3WuXIGoV/FcKyWkn44Xcg4BcFGLf0H30CY15ca6nW8 RiU5uJU3aVh3MaGV4m020RDy92WlYFB9EVZ+3TURoZkOhma6U3grUAfLCZVuXnr0 EIYF2/Zl8cPSIH794uEMofzHD9YgNY8R -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:47 2025 by rpki-client