$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: L+dwUFCBcY+3ZUSA+LvY3McK/Rq1ezeBG7BrAQ+gJAE= Subject key identifier: D2:3D:1F:BD:B6:66:FD:E3:7D:20:25:1D:55:4C:52:A8:27:F1:4C:71 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 026B Signing time: Sat 23 Aug 2025 01:58:59 +0000 Manifest this update: Sat 23 Aug 2025 01:58:58 +0000 Manifest next update: Sat 30 Aug 2025 01:58:58 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: xb7vwLnAh3azdhKce3e3vPRgiQB6+yzNrgrKSvBzrZo=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Aug 23 01:58:58 2025 GMT Not After : Aug 30 01:58:58 2025 GMT Subject: CN=68a92063-11a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:7e:4d:62:27:9c:0c:1c:4d:91:ef:8f:5f: ce:63:1c:7d:7d:48:81:2c:85:b9:08:23:eb:32:d2: 7b:76:a8:29:21:95:68:d7:70:1e:87:e8:4c:c4:fc: 05:3f:e5:9b:20:c7:5e:84:7f:f4:4d:92:35:24:20: 4c:8e:06:ee:c1:93:09:78:5e:9f:82:1a:49:2a:86: 1d:be:09:14:87:d0:08:47:3e:96:05:13:35:76:5a: 07:55:d3:f7:9a:e0:96:9f:3b:14:52:fc:02:64:43: 7d:a0:01:57:d3:f9:be:1b:4d:c2:20:1f:1d:1c:2d: c5:c1:42:2d:35:c0:3d:06:cc:9d:b1:6c:d2:96:bb: b2:d1:ae:f9:3d:b8:3d:ca:b4:ec:fc:3b:b5:58:a1: 50:fc:c9:d4:e0:a6:45:45:4a:2d:78:7d:4e:07:20: 11:1a:1e:b7:ad:f3:34:82:74:85:1d:06:6b:62:56: 3f:93:23:42:66:6f:23:ef:03:82:ba:74:90:20:33: 51:6a:80:15:1d:a2:d2:cf:58:28:b2:c0:95:9e:2a: bd:00:89:e3:61:98:e7:06:d0:26:49:73:db:79:b5: 69:91:8f:62:40:b2:9c:4b:8c:96:0e:02:8b:13:09: 7e:46:e6:51:c2:04:86:c4:ee:70:43:39:d2:e0:d7: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3D:1F:BD:B6:66:FD:E3:7D:20:25:1D:55:4C:52:A8:27:F1:4C:71 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:96:b5:0e:70:99:8f:d1:0f:4c:42:24:f8:52:11:50:43:de: 9f:56:5a:39:4a:54:25:bf:f0:8c:42:e2:b5:42:f1:82:49:69: cf:09:93:73:82:9f:28:15:0a:95:a3:10:cb:b3:86:43:65:a9: 78:80:18:ef:c6:21:9d:b7:c7:30:cc:43:f2:32:4a:94:a8:2a: 9a:bd:a0:fe:14:fc:47:ba:f1:e4:db:9d:8e:59:c3:d5:2d:c4: 90:88:79:6b:8c:c6:f9:12:11:2a:f2:97:d1:0c:18:21:59:fc: f0:ab:8d:d5:c8:77:5d:27:96:e1:ca:1c:fa:ad:97:12:c3:a9: 6a:52:90:11:df:38:43:d0:8c:ec:d7:d7:e0:f2:01:94:1e:dc: e0:d7:99:6c:f4:6e:d9:40:f3:d2:3d:2b:57:25:78:e2:fb:05: 1a:1e:f2:18:ea:4a:1b:04:f9:d0:8c:d3:a4:23:76:55:1f:f7: 40:31:c4:b4:56:1f:9a:f4:d9:14:a3:36:42:c4:d3:83:ab:47: 4d:7e:f0:ab:3b:4e:a0:02:ae:d4:19:0d:31:23:5b:74:33:39: 3f:8a:80:bc:22:46:ba:b9:a4:9e:c0:f2:73:0d:1d:1c:5c:19: 4b:b0:14:d8:b7:05:6d:35:2e:0f:4d:eb:e2:e0:bc:57:ac:c8: 37:8c:c7:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUwODIzMDE1ODU4WhcNMjUwODMwMDE1ODU4WjAYMRYwFAYD VQQDEw02OGE5MjA2My0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9x+TWInnAwcTZHvj1/OYxx9fUiBLIW5CCPrMtJ7dqgpIZVo13Aeh+hMxPwF P+WbIMdehH/0TZI1JCBMjgbuwZMJeF6fghpJKoYdvgkUh9AIRz6WBRM1dloHVdP3 muCWnzsUUvwCZEN9oAFX0/m+G03CIB8dHC3FwUItNcA9BsydsWzSlruy0a75Pbg9 yrTs/Du1WKFQ/MnU4KZFRUoteH1OByARGh63rfM0gnSFHQZrYlY/kyNCZm8j7wOC unSQIDNRaoAVHaLSz1gossCVniq9AInjYZjnBtAmSXPbebVpkY9iQLKcS4yWDgKL Ewl+RuZRwgSGxO5wQznS4NdjrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI9H722 Zv3jfSAlHVVMUqgn8UxxMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9lrUOcJmP0Q9MQiT4UhFQQ96fVlo5SlQlv/CMQuK1QvGCSWnPCZNz gp8oFQqVoxDLs4ZDZal4gBjvxiGdt8cwzEPyMkqUqCqavaD+FPxHuvHk252OWcPV LcSQiHlrjMb5EhEq8pfRDBghWfzwq43VyHddJ5bhyhz6rZcSw6lqUpAR3zhD0Izs 19fg8gGUHtzg15ls9G7ZQPPSPStXJXji+wUaHvIY6kobBPnQjNOkI3ZVH/dAMcS0 Vh+a9NkUozZCxNODq0dNfvCrO06gAq7UGQ0xI1t0Mzk/ioC8Ika6uaSewPJzDR0c XBlLsBTYtwVtNS4PTevi4LxXrMg3jMdP -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:41 2025 by rpki-client