$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: MxIyTOALacOGHYibY+ArgO396vIMNTngWvz+bHwV2Oo= Subject key identifier: 5F:AF:7A:3C:74:F5:A7:98:B3:82:5F:A9:E4:D5:59:39:41:1F:64:6B Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 0684 Signing time: Fri 08 Aug 2025 22:47:36 +0000 Manifest this update: Fri 08 Aug 2025 22:47:35 +0000 Manifest next update: Fri 15 Aug 2025 22:47:35 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: HIogY0dc6vueQjW4WXAEPSmGx2TbnFcqAmtz6T5nd9I=) 2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: Aug 8 22:47:35 2025 GMT Not After : Aug 15 22:47:35 2025 GMT Subject: CN=68967e87-2895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:18:ff:c6:99:5b:96:07:eb:0d:b3:56:5a: 9f:ca:94:c8:ea:2c:31:76:ac:e3:9d:e7:ee:52:21: 64:e5:43:91:36:3d:d4:99:f2:db:30:58:d1:c2:9d: 5e:3f:cd:6d:ce:1f:c4:d4:43:9d:d4:11:2a:82:30: 10:41:eb:8b:41:ee:14:c9:83:25:03:79:57:7b:b6: e5:e3:77:09:30:ef:ae:86:22:d8:df:ea:0e:93:17: 1a:aa:c3:dd:05:06:a5:45:ea:b7:1d:78:33:b6:b1: bf:ce:23:4c:16:b8:46:41:10:f9:b0:fc:86:06:82: 83:9d:fe:ad:1e:99:f2:db:47:db:d3:ac:7c:0b:5c: c0:77:67:9e:a0:20:04:9c:d3:c5:19:54:27:67:16: 0f:ed:e2:8e:3f:2a:41:82:d5:7b:5f:8e:6a:f8:28: e8:2a:3c:e7:a6:96:ae:4f:33:3a:ed:73:2f:38:f0: 7a:78:5b:3e:ca:9e:2c:6f:a7:51:6f:ae:75:9b:7c: 59:f4:65:6f:ca:c8:a7:30:d3:2e:1d:26:ff:3b:e8: ae:60:3d:f9:cc:ac:f1:86:22:f2:9f:22:4d:19:28: 32:5d:41:96:b3:71:e8:30:62:2b:be:f1:55:da:fc: cc:c6:ca:aa:e9:f3:77:de:d4:9a:bc:66:73:33:f9: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AF:7A:3C:74:F5:A7:98:B3:82:5F:A9:E4:D5:59:39:41:1F:64:6B X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:20:61:1b:cc:11:04:43:bd:6b:43:9a:73:a9:94:69:08:ce: 9a:e4:e1:86:55:97:00:ca:33:9b:57:1b:ec:82:d6:22:e6:46: 0a:3f:2b:1e:ee:b1:d3:8e:f3:b8:58:da:e1:5c:8e:28:4a:ee: 79:67:58:23:a2:61:7b:32:bd:ad:16:f4:37:05:e2:53:eb:c1: 16:e8:f6:8e:06:d5:25:8e:39:e7:69:10:b5:1a:5d:34:5f:92: 94:0d:dd:38:00:16:ef:f9:1e:7a:85:10:65:a9:be:6a:b2:ed: 22:ed:a9:6a:ff:4d:76:b6:86:97:70:ee:88:aa:48:af:b4:33: 48:94:b4:a6:cc:5b:8b:f6:b8:ab:e9:63:fd:f3:3f:f7:1f:e1: 35:21:bc:bf:25:1f:15:51:e5:22:e4:42:68:42:b7:c5:ff:58: f7:99:3c:05:f2:bb:f1:81:93:3c:a3:65:9d:72:f4:6c:fe:f7: aa:78:d9:6e:8d:1f:04:a6:73:00:a9:ab:f6:84:46:32:cf:3f: d1:d4:38:27:60:d6:68:ef:14:52:54:a5:7b:b3:81:8d:58:4b: 08:03:45:d7:31:b0:66:87:d2:8a:7c:d7:30:45:de:04:71:c4: 3f:27:af:3f:f2:51:50:19:b6:6e:14:c6:11:02:cb:cd:cd:72: 6f:e0:2d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUwODA4MjI0NzM1WhcNMjUwODE1MjI0NzM1WjAYMRYwFAYD VQQDEw02ODk2N2U4Ny0yODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIgY/8aZW5YH6w2zVlqfypTI6iwxdqzjnefuUiFk5UORNj3UmfLbMFjRwp1e P81tzh/E1EOd1BEqgjAQQeuLQe4UyYMlA3lXe7bl43cJMO+uhiLY3+oOkxcaqsPd BQalReq3HXgztrG/ziNMFrhGQRD5sPyGBoKDnf6tHpny20fb06x8C1zAd2eeoCAE nNPFGVQnZxYP7eKOPypBgtV7X45q+CjoKjznppauTzM67XMvOPB6eFs+yp4sb6dR b651m3xZ9GVvysinMNMuHSb/O+iuYD35zKzxhiLynyJNGSgyXUGWs3HoMGIrvvFV 2vzMxsqq6fN33tSavGZzM/luqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+vejx0 9aeYs4JfqeTVWTlBH2RrMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwIGEbzBEEQ71rQ5pzqZRpCM6a5OGGVZcAyjObVxvsgtYi5kYKPyse 7rHTjvO4WNrhXI4oSu55Z1gjomF7Mr2tFvQ3BeJT68EW6PaOBtUljjnnaRC1Gl00 X5KUDd04ABbv+R56hRBlqb5qsu0i7alq/012toaXcO6IqkivtDNIlLSmzFuL9rir 6WP98z/3H+E1Iby/JR8VUeUi5EJoQrfF/1j3mTwF8rvxgZM8o2WdcvRs/veqeNlu jR8EpnMAqav2hEYyzz/R1DgnYNZo7xRSVKV7s4GNWEsIA0XXMbBmh9KKfNcwRd4E ccQ/J68/8lFQGbZuFMYRAsvNzXJv4C2R -----END CERTIFICATE-----Generated at Sat Aug 9 01:05:07 2025 by rpki-client