$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json) Hash identifier: /r81k02oiGltnjtRKB4XeuJ77fLRUY9+zwcFbNKOKOI= Subject key identifier: 5C:00:98:0E:E8:C5:58:EF:3B:AF:EF:F4:CC:43:E6:EE:64:D8:0D:B3 Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft Manifest number: 0B2E Signing time: Fri 08 Aug 2025 19:28:29 +0000 Manifest this update: Fri 08 Aug 2025 19:28:28 +0000 Manifest next update: Fri 15 Aug 2025 19:28:28 +0000 Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: YGDEFhafHx707B0gDROmbie9Sbf9w0qA1wYJQxV+qwI=) 2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: c6hB6o27DTn4G9KshxwwCrACiildcNHuM9kyD7kWDTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Validity Not Before: Aug 8 19:28:28 2025 GMT Not After : Aug 15 19:28:28 2025 GMT Subject: CN=68964fdd-6e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:b0:13:e8:66:f9:fe:04:56:7c:91:9a:50: 70:f6:df:84:e2:c0:f3:db:9c:86:c7:5f:c0:e6:f6: ce:e4:0c:dc:cb:74:8d:11:2b:64:cb:b3:9d:a3:e3: 2d:ae:7a:6a:d1:35:4c:fb:0c:ea:31:91:22:ea:17: 88:d2:74:ff:0a:f0:35:bf:ea:df:3e:24:1c:69:f8: 5b:6b:7a:c4:64:a2:6f:43:47:7e:8a:04:9b:90:fa: 10:00:fb:9e:f2:e3:72:8a:b6:d4:ab:25:1d:e9:63: 12:85:93:d0:d7:f3:79:6c:37:26:c2:b6:f2:1a:13: 9f:2f:3c:2a:5b:35:e8:9b:d4:8e:fd:9c:cf:67:ad: 82:db:1e:65:48:c0:5c:62:8f:e9:f0:35:18:6e:df: 33:ff:e4:a3:ed:a2:f2:16:ea:e2:56:49:c5:63:2b: 82:34:ec:0d:d9:66:8d:ad:c5:72:3b:84:f6:6e:58: 2a:3d:6d:93:68:79:f8:88:57:b5:c1:0d:e4:97:2a: 06:29:c1:bf:b3:4d:a4:54:87:25:4a:83:52:8c:f6: 95:e8:2b:a1:04:98:f4:1b:63:6e:ac:39:01:00:08: 63:1f:3f:81:63:95:bb:ad:93:b8:e7:92:6f:93:96: 75:37:e1:8e:67:1f:2f:b8:46:bc:2d:d7:78:24:0c: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:00:98:0E:E8:C5:58:EF:3B:AF:EF:F4:CC:43:E6:EE:64:D8:0D:B3 X509v3 Authority Key Identifier: keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e1:27:d4:ca:42:bb:5b:42:30:c9:75:c0:32:64:d0:b9:18: ef:9f:5b:0a:41:ed:a5:cb:12:d1:7c:2c:43:f2:60:fb:cd:53: de:f2:69:6c:f5:3a:50:2e:34:74:6b:5b:48:98:58:ec:8c:20: 09:3d:87:1c:12:9c:38:4e:d8:2a:41:3e:fc:33:16:45:f6:e5: dc:ff:77:f8:f1:d2:e0:50:41:07:61:39:e5:bd:00:18:e5:55: 49:fe:be:6d:1f:9b:13:b3:a9:60:83:a9:d4:71:70:03:04:5f: 8a:09:da:b1:43:8a:c9:9a:a1:fd:30:f7:c8:9d:75:da:ab:29: 9b:c1:0f:7b:1b:3a:05:a1:2b:2b:8c:0b:dd:da:5c:13:29:23: 16:ea:ad:5d:96:9c:9a:fd:d0:c7:49:f0:b1:87:6c:72:72:d9: 32:31:2e:50:b4:99:70:24:24:36:e4:23:50:4e:c4:2e:17:d5: 98:e6:4e:9d:09:61:fc:ec:d3:0f:e1:56:d2:c7:be:35:75:ba: 7c:32:55:07:0e:ad:39:dc:00:dd:dc:e3:fc:0f:ab:2b:7b:7f: 9f:44:53:22:1b:04:9b:ae:94:26:fa:ec:9f:8c:59:12:40:1c: 04:2f:de:ca:d8:6d:bf:ee:17:c7:67:94:2c:a1:bb:96:04:39: 2f:40:65:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0NTYxMTAvBgNVBAUTKDI5MEM0MDEwRkFEQzQ3Njk0N0UwMDkzRjQzRjcwMDRG MEQ3QzVDMUMwHhcNMjUwODA4MTkyODI4WhcNMjUwODE1MTkyODI4WjAYMRYwFAYD VQQDEw02ODk2NGZkZC02ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXSwE+hm+f4EVnyRmlBw9t+E4sDz25yGx1/A5vbO5Azcy3SNEStky7Odo+Mt rnpq0TVM+wzqMZEi6heI0nT/CvA1v+rfPiQcafhba3rEZKJvQ0d+igSbkPoQAPue 8uNyirbUqyUd6WMShZPQ1/N5bDcmwrbyGhOfLzwqWzXom9SO/ZzPZ62C2x5lSMBc Yo/p8DUYbt8z/+Sj7aLyFuriVknFYyuCNOwN2WaNrcVyO4T2blgqPW2TaHn4iFe1 wQ3klyoGKcG/s02kVIclSoNSjPaV6CuhBJj0G2NurDkBAAhjHz+BY5W7rZO455Jv k5Z1N+GOZx8vuEa8Ldd4JAzzpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwAmA7o xVjvO6/v9MxD5u5k2A2zMB8GA1UdIwQYMBaAFCkMQBD63EdpR+AJP0P3AE8NfFwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQ1Ni82QzI3RjI1QTQx QTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1IybEg0QWtfUV9jQVR3MThY QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tReEFFUHJjUjJsSDRBa19RX2NBVHcxOFhCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQ1Ni82QzI3RjI1QTQxQTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1Iy bEg0QWtfUV9jQVR3MThYQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv4SfUykK7W0IwyXXAMmTQuRjvn1sKQe2lyxLRfCxD8mD7zVPe8mls 9TpQLjR0a1tImFjsjCAJPYccEpw4TtgqQT78MxZF9uXc/3f48dLgUEEHYTnlvQAY 5VVJ/r5tH5sTs6lgg6nUcXADBF+KCdqxQ4rJmqH9MPfInXXaqymbwQ97GzoFoSsr jAvd2lwTKSMW6q1dlpya/dDHSfCxh2xyctkyMS5QtJlwJCQ25CNQTsQuF9WY5k6d CWH87NMP4VbSx741dbp8MlUHDq053ADd3OP8D6sre3+fRFMiGwSbrpQm+uyfjFkS QBwEL97K2G2/7hfHZ5QsobuWBDkvQGVJ -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:46 2025 by rpki-client