$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: /AKXY2+dzeMNd0TvxUQoqcLvpNQ0SBbZUUCIAKQoQL4= Subject key identifier: B0:D7:50:B6:9F:97:4F:15:0E:2A:7F:49:F4:91:F3:36:28:D1:53:19 Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0CF1 Signing time: Wed 02 Jul 2025 18:24:47 +0000 Manifest this update: Wed 02 Jul 2025 18:24:46 +0000 Manifest next update: Wed 09 Jul 2025 18:24:46 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: FCsyG3URnGiz/VA1pjtx7qK0kAalnQW3N3nS3YFTeFc=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: OxkEmLMGkxV9qU2vxCISEVaV7VxznjkiRbOpszB8G5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Jul 2 18:24:46 2025 GMT Not After : Jul 9 18:24:46 2025 GMT Subject: CN=6865796e-5f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:18:f5:de:a3:b4:70:ab:44:9d:2e:a0:66: 5e:74:7c:9b:74:ad:3d:57:f0:d6:c4:04:e2:0f:3c: 12:49:94:cb:a9:a3:32:d3:07:24:74:67:6e:c8:20: fb:e0:8d:9b:9d:fb:c0:73:6d:9a:5f:89:5a:28:36: ba:7b:80:09:41:7e:ac:e6:19:00:b1:41:5c:be:d9: 2f:be:2f:aa:9b:92:d4:fd:7a:03:1e:03:87:27:46: 6c:43:db:68:7f:d5:83:f2:01:6e:57:68:96:c1:87: e5:c3:ec:20:27:8c:17:e9:02:c1:58:30:53:a8:b0: f1:ab:5a:a7:89:15:ff:4e:b8:c3:1e:da:aa:c9:7e: a5:4e:aa:29:fa:c0:e5:5a:e3:a0:94:0a:06:84:b2: 64:ef:19:10:72:52:c1:8c:e0:2c:3a:cf:f1:56:86: 51:1c:5c:27:a5:79:0d:e6:b5:2e:2e:77:72:41:e3: a4:37:a2:5e:83:71:6c:15:ab:15:4a:ae:9c:6d:5f: b0:7a:1e:05:fb:86:56:09:5b:d6:88:86:a5:0c:5f: 91:be:50:6e:1a:60:a0:3c:cd:95:b3:89:50:4f:6a: aa:f2:6f:56:36:15:44:23:52:8a:14:41:64:21:cb: 78:a7:a0:ce:15:1f:68:26:a0:2a:33:b7:48:65:70: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:50:B6:9F:97:4F:15:0E:2A:7F:49:F4:91:F3:36:28:D1:53:19 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:88:19:64:c1:33:7a:43:b1:0b:c2:65:ff:e5:bc:58:a0:12: 89:ad:22:ec:33:5c:c2:41:46:4b:0a:50:12:85:4a:0a:8c:79: e2:ea:24:b1:2e:fc:4e:ca:1a:ca:fd:f1:a6:2d:81:cf:8d:f6: 0a:64:65:82:cd:c4:b4:b2:ae:be:8c:0b:7d:23:b5:0e:86:76: 63:0f:40:46:a7:e1:1d:fb:b2:28:a9:72:c6:d1:38:f2:62:5f: 24:c8:33:3a:3c:a4:5a:2f:eb:6f:95:71:3d:7a:f5:2f:99:f8: 55:59:27:55:e0:aa:47:4a:96:a7:aa:00:73:32:1d:f1:3d:6f: a3:03:59:e7:77:eb:c4:4f:35:0a:d7:13:8f:94:8f:3e:d7:c8: 1d:d4:12:98:28:07:12:fb:33:47:e1:40:c7:3f:04:f0:e5:38: 9a:b7:49:77:16:47:83:19:1a:fb:1c:70:a7:3a:44:f1:4d:38: 4d:33:fd:7f:3a:e3:f6:e7:02:22:8a:35:1b:db:4f:fa:5a:37: a3:53:04:a2:1b:44:a6:f6:39:27:e4:a2:4a:e7:f9:51:df:dd: e2:95:26:25:51:1c:73:cb:bc:99:fd:4f:62:ba:92:bb:a8:ee: 47:39:2b:b6:5a:de:86:33:38:dc:76:df:45:5f:55:3a:5b:e8: e0:fd:d2:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUwNzAyMTgyNDQ2WhcNMjUwNzA5MTgyNDQ2WjAYMRYwFAYD VQQDEw02ODY1Nzk2ZS01Zjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fQY9d6jtHCrRJ0uoGZedHybdK09V/DWxATiDzwSSZTLqaMy0wckdGduyCD7 4I2bnfvAc22aX4laKDa6e4AJQX6s5hkAsUFcvtkvvi+qm5LU/XoDHgOHJ0ZsQ9to f9WD8gFuV2iWwYflw+wgJ4wX6QLBWDBTqLDxq1qniRX/TrjDHtqqyX6lTqop+sDl WuOglAoGhLJk7xkQclLBjOAsOs/xVoZRHFwnpXkN5rUuLndyQeOkN6Jeg3FsFasV Sq6cbV+weh4F+4ZWCVvWiIalDF+RvlBuGmCgPM2Vs4lQT2qq8m9WNhVEI1KKFEFk Ict4p6DOFR9oJqAqM7dIZXABRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDXULaf l08VDip/SfSR8zYo0VMZMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkiBlkwTN6Q7ELwmX/5bxYoBKJrSLsM1zCQUZLClAShUoKjHni6iSx LvxOyhrK/fGmLYHPjfYKZGWCzcS0sq6+jAt9I7UOhnZjD0BGp+Ed+7IoqXLG0Tjy Yl8kyDM6PKRaL+tvlXE9evUvmfhVWSdV4KpHSpanqgBzMh3xPW+jA1nnd+vETzUK 1xOPlI8+18gd1BKYKAcS+zNH4UDHPwTw5Tiat0l3FkeDGRr7HHCnOkTxTThNM/1/ OuP25wIiijUb20/6WjejUwSiG0Sm9jkn5KJK5/lR393ilSYlURxzy7yZ/U9iupK7 qO5HOSu2Wt6GMzjcdt9FX1U6W+jg/dL1 -----END CERTIFICATE-----Generated at Thu Jul 3 12:22:45 2025 by rpki-client