$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: u8B8zhbCUfSzZ0c9eVHFZ+bEoozjB8ujCDiv64HbQEs= Subject key identifier: D5:BE:D5:F3:C8:4F:8E:D6:46:7F:ED:49:3E:17:CB:1B:4F:54:D6:BC Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 0761 Signing time: Fri 22 Aug 2025 21:47:22 +0000 Manifest this update: Fri 22 Aug 2025 21:47:22 +0000 Manifest next update: Fri 29 Aug 2025 21:47:22 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: R0vxKS+ApniNRy8PUVMXj4+l/2j3pBhvA+MSvA5UiQo=) 2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: bx4OdIF/hMTyewKQzRXbYDvV0LVN5invBqXfdlpkEUg=) 3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DlksN9MScupAjFsSOvELPpNk78Lxd9jwsZlpaixwA5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: Aug 22 21:47:22 2025 GMT Not After : Aug 29 21:47:22 2025 GMT Subject: CN=68a8e56a-073c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:5b:d5:f9:c8:b4:cc:cd:58:c6:30:74:45: dd:25:f5:55:27:de:8c:f5:33:5a:6d:84:f8:20:23: c8:32:b8:0d:a2:bd:2e:a9:39:9b:b1:1a:bf:28:ab: 39:67:6d:2f:03:1b:5a:0d:4d:f4:c2:e4:90:92:aa: fa:b7:0a:c4:de:14:1c:ff:7a:70:15:a0:ad:63:eb: c8:3c:12:94:3c:6f:95:f9:88:c4:a3:c7:2a:61:f8: 05:12:30:d5:b2:d4:e0:9e:3f:24:bf:fc:54:8a:e0: 14:10:23:15:61:af:d5:4c:62:3e:8f:b0:a7:42:2a: d8:e4:d1:1c:06:1f:ee:9e:3b:21:79:eb:64:5d:db: 15:3c:b5:c6:11:29:d2:04:57:cd:eb:ef:4e:f9:96: 86:f7:e1:32:c6:04:a1:9e:21:2a:ee:76:70:89:d6: 2b:b2:0a:28:17:eb:a0:89:75:6b:c0:ef:40:ae:05: b5:9b:bb:b6:05:2f:72:93:99:6a:5f:c9:6a:ad:23: 07:06:52:8c:90:1f:a3:99:61:00:85:a9:1a:c3:6a: b2:71:eb:67:73:90:35:6c:20:b6:e8:cb:58:e0:cb: b6:81:07:c8:ff:5c:12:2f:d9:c3:2e:fc:07:6a:43: 09:87:78:a5:be:17:9a:bf:d8:a5:af:65:78:50:24: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:D5:F3:C8:4F:8E:D6:46:7F:ED:49:3E:17:CB:1B:4F:54:D6:BC X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:f0:2e:3e:24:16:71:dc:cf:c7:90:41:24:f8:d7:d2:5e:df: c4:b3:f2:80:19:44:f3:66:a8:ab:a9:8b:ef:00:12:3d:cc:76: 0e:36:d8:27:09:0e:17:01:c5:f6:70:12:fb:96:67:6e:62:61: cc:c5:e0:b7:b3:51:14:9c:e4:8d:1f:65:bd:f2:e9:61:82:9a: 76:bd:c4:51:70:14:52:64:9e:cb:b6:2d:43:64:2f:94:29:49: 28:9e:33:f3:55:9b:12:97:ec:04:64:22:11:eb:3c:fb:68:9f: bd:d1:db:82:b8:8d:c1:18:55:c1:d0:43:a9:66:c6:e1:e4:f4: bd:8f:15:c9:59:97:70:17:f6:1e:a7:fe:2a:02:dd:00:c8:8d: 2d:4e:a6:26:b9:43:78:df:d6:7e:78:7c:03:8e:ad:9d:5f:3c: fe:21:f3:71:e6:d0:e5:fe:e8:32:06:9c:5a:ee:72:75:6b:fa: ce:45:2e:e1:6a:19:31:39:3e:1d:56:ab:f6:d0:0b:6e:da:57: e0:84:c0:73:af:f8:5d:51:21:39:aa:79:2f:8c:b0:d3:7d:94: e9:0b:09:fb:45:58:46:3d:b8:a5:50:dd:f5:da:34:43:ca:38: e6:75:4b:71:92:42:c1:f9:ae:64:3c:02:a6:6c:4c:07:d5:17: 31:f3:e0:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjUwODIyMjE0NzIyWhcNMjUwODI5MjE0NzIyWjAYMRYwFAYD VQQDEw02OGE4ZTU2YS0wNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wJb1fnItMzNWMYwdEXdJfVVJ96M9TNabYT4ICPIMrgNor0uqTmbsRq/KKs5 Z20vAxtaDU30wuSQkqr6twrE3hQc/3pwFaCtY+vIPBKUPG+V+YjEo8cqYfgFEjDV stTgnj8kv/xUiuAUECMVYa/VTGI+j7CnQirY5NEcBh/unjsheetkXdsVPLXGESnS BFfN6+9O+ZaG9+EyxgShniEq7nZwidYrsgooF+ugiXVrwO9ArgW1m7u2BS9yk5lq X8lqrSMHBlKMkB+jmWEAhakaw2qycetnc5A1bCC26MtY4Mu2gQfI/1wSL9nDLvwH akMJh3ilvheav9ilr2V4UCQ/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNW+1fPI T47WRn/tST4XyxtPVNa8MB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC98C4+JBZx3M/HkEEk+NfSXt/Es/KAGUTzZqirqYvvABI9zHYONtgn CQ4XAcX2cBL7lmduYmHMxeC3s1EUnOSNH2W98ulhgpp2vcRRcBRSZJ7Lti1DZC+U KUkonjPzVZsSl+wEZCIR6zz7aJ+90duCuI3BGFXB0EOpZsbh5PS9jxXJWZdwF/Ye p/4qAt0AyI0tTqYmuUN439Z+eHwDjq2dXzz+IfNx5tDl/ugyBpxa7nJ1a/rORS7h ahkxOT4dVqv20Atu2lfghMBzr/hdUSE5qnkvjLDTfZTpCwn7RVhGPbilUN312jRD yjjmdUtxkkLB+a5kPAKmbEwH1Rcx8+As -----END CERTIFICATE-----Generated at Sat Aug 23 11:41:52 2025 by rpki-client