$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json) Hash identifier: wbAAJ+msIFwTt+3ctpgGhmIRkqbZ+euw3/Q1k5BSLVQ= Subject key identifier: 51:8F:6A:7A:9D:09:C7:85:40:AF:53:8C:05:98:6F:28:DA:21:30:DF Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0BA3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft Manifest number: 0B9C Signing time: Fri 08 Aug 2025 15:16:11 +0000 Manifest this update: Fri 08 Aug 2025 15:16:11 +0000 Manifest next update: Fri 15 Aug 2025 15:16:11 +0000 Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: FpwAEpxG5yBK6QQMcs4vdJAmsrqdjHxLt2Vpa0jhpIM=) 2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /8fEEtPdMyUdjQ1z+LPnGcbnmSc1TogzrljlPk/+Zoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: Aug 8 15:16:11 2025 GMT Not After : Aug 15 15:16:11 2025 GMT Subject: CN=689614bb-36b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:a8:ea:4e:f9:a8:95:ac:06:fd:bf:91:be: 41:a8:8d:ca:6c:6d:c8:c3:41:d6:fc:8e:b4:d2:b2: 1b:b8:58:2c:71:b3:07:51:b2:16:cd:1a:de:7e:94: fd:d4:a5:7a:95:c5:f3:ad:a9:2e:85:18:28:69:f3: 9f:51:35:6b:e1:f2:09:a0:8d:ef:e5:fd:ab:50:c4: 6e:02:e3:31:d9:dd:c0:2e:77:76:7f:34:16:16:f0: 8b:bd:b7:68:bd:c6:81:69:aa:8a:26:27:91:24:25: 52:22:0a:5b:db:89:4f:01:04:a1:65:70:6d:e8:84: 76:c5:d2:ca:0e:26:56:fd:3a:80:88:d6:61:f5:bd: 67:ac:d5:ca:90:aa:70:47:77:25:ca:bc:84:8e:ce: 80:b6:5a:b5:fc:7f:50:15:70:4a:e4:d6:5a:ec:ac: 3d:2d:be:2d:04:be:b8:27:06:8d:25:db:a3:80:d1: 01:35:80:f0:ad:1f:37:28:32:2b:95:49:fa:fb:11: 87:c9:9c:2e:26:3b:a6:eb:34:56:45:81:d0:1c:8b: bd:d2:ec:26:5a:26:1a:12:c8:8e:34:e9:38:37:f9: 00:07:f6:13:b7:da:65:64:11:71:70:1e:8a:87:c9: d8:80:5a:1a:eb:30:ca:fd:6d:93:80:a8:5f:cd:c2: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8F:6A:7A:9D:09:C7:85:40:AF:53:8C:05:98:6F:28:DA:21:30:DF X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:5e:e0:87:d4:12:57:76:90:65:a9:5b:85:18:64:3c:65:cf: 97:0c:b4:e7:92:3b:ea:46:1e:50:46:58:f3:b0:87:d3:ea:a4: 29:77:9e:f2:e6:f3:6c:90:a7:28:5c:7a:7f:2d:41:90:af:94: 7f:c0:e7:7e:10:1e:70:83:41:07:c0:e8:27:f6:d0:40:96:71: 20:ca:bb:89:13:bd:41:04:4e:6b:e4:7e:43:69:c2:3a:9f:10: 61:ab:5b:41:f2:b5:7e:f5:3e:c5:c7:74:fb:75:5a:aa:80:79: cd:20:c9:77:91:8d:8a:d9:a4:61:3b:92:20:39:d4:40:6c:53: ff:e8:20:02:6a:b5:2b:b3:39:f6:bc:47:1b:5c:0c:8d:4f:c8: 7e:2f:48:56:1f:94:d7:6a:75:ea:9b:21:8e:67:a0:e0:9f:0d: 64:51:f0:53:a1:e4:3d:ac:79:8c:db:65:f4:2b:93:f8:4b:7f: 92:63:36:ec:cd:0b:9e:7d:58:eb:79:5c:fd:2a:87:4f:38:f9: 04:40:61:1a:e5:a4:6f:b7:79:51:3f:3b:65:f7:89:fd:33:f3: b5:90:7d:d4:59:63:ad:3d:65:73:b3:66:4b:27:78:09:16:83: 21:e3:25:75:99:a6:87:a8:26:ff:2a:2c:46:ad:5d:72:a8:0f: 49:c3:cb:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjUwODA4MTUxNjExWhcNMjUwODE1MTUxNjExWjAYMRYwFAYD VQQDEw02ODk2MTRiYi0zNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArteo6k75qJWsBv2/kb5BqI3KbG3Iw0HW/I600rIbuFgscbMHUbIWzRrefpT9 1KV6lcXzrakuhRgoafOfUTVr4fIJoI3v5f2rUMRuAuMx2d3ALnd2fzQWFvCLvbdo vcaBaaqKJieRJCVSIgpb24lPAQShZXBt6IR2xdLKDiZW/TqAiNZh9b1nrNXKkKpw R3clyryEjs6Atlq1/H9QFXBK5NZa7Kw9Lb4tBL64JwaNJdujgNEBNYDwrR83KDIr lUn6+xGHyZwuJjum6zRWRYHQHIu90uwmWiYaEsiONOk4N/kAB/YTt9plZBFxcB6K h8nYgFoa6zDK/W2TgKhfzcJ6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGPanqd CceFQK9TjAWYbyjaITDfMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi83QTc1MEEwQTJERDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFL X0xpNmdWbWM0d1owVkVfWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxXuCH1BJXdpBlqVuFGGQ8Zc+XDLTnkjvqRh5QRljzsIfT6qQpd57y 5vNskKcoXHp/LUGQr5R/wOd+EB5wg0EHwOgn9tBAlnEgyruJE71BBE5r5H5DacI6 nxBhq1tB8rV+9T7Fx3T7dVqqgHnNIMl3kY2K2aRhO5IgOdRAbFP/6CACarUrszn2 vEcbXAyNT8h+L0hWH5TXanXqmyGOZ6Dgnw1kUfBToeQ9rHmM22X0K5P4S3+SYzbs zQuefVjreVz9KodPOPkEQGEa5aRvt3lRPztl94n9M/O1kH3UWWOtPWVzs2ZLJ3gJ FoMh4yV1maaHqCb/KixGrV1yqA9Jw8st -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:24 2025 by rpki-client