$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: gkLa0RDShwjjFtrtDu0USyE7WPXmw67FlZguApbAgV4= Subject key identifier: 27:36:38:02:C4:CD:03:47:E8:37:6C:25:82:04:2D:9E:27:1A:E9:F4 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 0156 Signing time: Sat 09 Aug 2025 04:57:11 +0000 Manifest this update: Sat 09 Aug 2025 04:57:10 +0000 Manifest next update: Sat 16 Aug 2025 04:57:10 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: I9vcBt3KphHtZSLhWPXpnoEt0wAO+qj5Jv4n1Eo6nnE=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Aug 9 04:57:10 2025 GMT Not After : Aug 16 04:57:10 2025 GMT Subject: CN=6896d527-5f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:f9:49:f4:a6:a1:39:58:4d:28:9d:7a:cd: 1f:0f:c9:32:f3:a6:e3:ee:25:2f:c6:ac:69:8e:cc: d6:cc:8c:23:44:fd:d7:da:bc:15:b8:61:dc:80:90: 3f:a2:7e:8b:85:5a:96:76:29:51:22:1d:78:f9:0d: 5b:24:ee:25:bf:89:4a:f7:aa:3a:fd:02:9c:a6:1c: 0c:b9:79:09:be:b9:7d:c5:22:3a:51:da:90:21:ed: 4d:5c:0c:c6:00:07:f8:b1:a7:f1:12:8e:12:16:c2: f9:e2:81:48:68:4b:e0:0c:5b:93:a4:b5:ec:05:2c: 32:cd:ff:f9:61:ed:2f:6e:21:0e:b3:f7:b6:60:a4: 5b:2e:89:79:3a:31:55:fc:aa:04:db:0d:7b:75:0f: 0a:69:b1:93:0a:00:40:b6:a6:db:2d:b1:b1:78:45: e5:1a:1e:b7:46:64:f5:77:5d:c1:fc:92:43:7c:a9: eb:3f:ae:37:79:a3:5b:64:ef:8b:e9:e1:72:2e:f4: 5c:87:cd:33:d5:62:ab:31:8c:c7:a6:88:5f:5e:63: f4:fa:e7:93:ec:a7:b3:02:de:94:0b:63:fc:a9:3b: 44:12:b4:64:6b:bd:0c:68:c1:92:40:2f:ae:b3:41: 13:50:84:23:34:cb:0b:47:3e:cc:db:dd:3f:1e:1d: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:36:38:02:C4:CD:03:47:E8:37:6C:25:82:04:2D:9E:27:1A:E9:F4 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:aa:fe:cf:dd:34:7b:80:93:59:b6:63:e3:9e:fc:03:af:09: 8a:4d:e2:ab:67:87:95:20:01:87:2a:38:fd:f8:a1:90:c7:16: 0c:db:48:d1:be:ff:71:cc:28:5a:94:90:87:48:bd:15:ac:5a: fa:dc:b6:c5:f7:34:ef:85:34:23:b2:33:9c:8c:af:9b:5e:4a: 25:11:bf:80:bc:2b:9f:a0:5e:a1:ac:6d:68:bc:02:a9:72:2e: c9:2c:f0:e0:e1:ce:ec:45:2e:2c:c1:2d:60:67:98:33:c2:18: dd:15:88:c3:a9:21:3a:b8:cc:a3:81:cb:53:a5:2e:f5:27:4d: e1:cf:b2:2a:d6:74:60:bc:39:31:28:fc:79:13:55:bc:73:f4: 9f:5c:7b:ad:8c:2d:3c:f6:17:36:02:ad:fc:43:ec:6e:8f:91: 11:f3:da:71:d2:a4:91:f6:98:ab:87:c3:c6:2e:da:d4:69:52: d7:73:c9:d2:80:db:51:f2:25:90:73:df:01:94:14:9e:d0:8e: 24:82:5a:3b:26:f6:41:12:0b:1d:e7:9b:96:27:e1:2d:2d:5e: 7a:3f:93:53:9a:e6:b6:65:bf:3b:72:07:dc:e6:2b:ad:58:26: bf:c2:ca:36:1e:c5:5d:9b:94:6d:8b:61:24:e8:c6:f3:37:19: 7d:0b:01:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwODA5MDQ1NzEwWhcNMjUwODE2MDQ1NzEwWjAYMRYwFAYD VQQDEw02ODk2ZDUyNy01ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8v5SfSmoTlYTSides0fD8ky86bj7iUvxqxpjszWzIwjRP3X2rwVuGHcgJA/ on6LhVqWdilRIh14+Q1bJO4lv4lK96o6/QKcphwMuXkJvrl9xSI6UdqQIe1NXAzG AAf4safxEo4SFsL54oFIaEvgDFuTpLXsBSwyzf/5Ye0vbiEOs/e2YKRbLol5OjFV /KoE2w17dQ8KabGTCgBAtqbbLbGxeEXlGh63RmT1d13B/JJDfKnrP643eaNbZO+L 6eFyLvRch80z1WKrMYzHpohfXmP0+ueT7KezAt6UC2P8qTtEErRka70MaMGSQC+u s0ETUIQjNMsLRz7M290/Hh2O8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc2OALE zQNH6DdsJYIELZ4nGun0MB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXqv7P3TR7gJNZtmPjnvwDrwmKTeKrZ4eVIAGHKjj9+KGQxxYM20jR vv9xzChalJCHSL0VrFr63LbF9zTvhTQjsjOcjK+bXkolEb+AvCufoF6hrG1ovAKp ci7JLPDg4c7sRS4swS1gZ5gzwhjdFYjDqSE6uMyjgctTpS71J03hz7Iq1nRgvDkx KPx5E1W8c/SfXHutjC089hc2Aq38Q+xuj5ER89px0qSR9pirh8PGLtrUaVLXc8nS gNtR8iWQc98BlBSe0I4kglo7JvZBEgsd55uWJ+EtLV56P5NTmua2Zb87cgfc5iut WCa/wso2HsVdm5Rti2Ek6MbzNxl9CwFm -----END CERTIFICATE-----Generated at Sat Aug 9 15:17:44 2025 by rpki-client