$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: KQRR/zZr02VdsgBkORKwkFBjIW6QL/9KNvkrc8UyTpM= Subject key identifier: 36:39:E4:3E:B5:43:2A:BB:07:FC:45:81:D0:71:0C:EC:C0:C2:C9:82 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 5E Signing time: Sat 09 Aug 2025 07:35:38 +0000 Manifest this update: Sat 09 Aug 2025 07:35:37 +0000 Manifest next update: Sat 16 Aug 2025 07:35:37 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: oTqnT9C+IjhBpHY1Sr1SUhU7IJT5kmJ3S4z6y5nRtVs=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Aug 9 07:35:37 2025 GMT Not After : Aug 16 07:35:37 2025 GMT Subject: CN=6896fa4a-b03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:74:2f:f0:35:64:ad:ea:25:c1:ce:cb:b7: 99:df:e3:76:a8:92:3c:20:8d:17:ac:29:5f:9c:6b: 6e:1f:9a:4d:28:1c:ac:c4:4a:50:11:44:b0:22:79: bc:55:e8:b8:ae:12:ff:46:0d:30:e7:1d:45:5c:79: e3:97:fb:6c:f0:47:98:c1:98:2c:a2:a6:1a:ef:bf: 26:ec:4e:78:e4:11:68:66:1c:5b:e3:85:4a:d6:20: 21:ff:89:b1:d3:eb:99:6e:3a:b7:fe:1b:f2:35:e9: b9:61:43:b8:96:51:77:96:59:a6:6e:00:65:3d:8f: dd:02:d4:a6:04:60:b3:ed:48:c8:ef:70:8b:05:02: 31:db:95:79:71:e0:74:c3:a9:7c:05:29:89:e9:c1: b3:7d:dd:bb:f9:76:19:f7:a3:3f:7d:93:55:3c:34: 9f:8b:ca:3b:e8:88:24:b8:45:52:83:b9:e0:ff:84: ed:7f:18:25:cc:ec:8a:fc:43:b9:3a:2f:d5:01:5b: 08:50:ed:e1:41:58:bb:78:be:24:c5:09:e0:cf:7d: d5:0b:61:2e:27:39:81:52:af:9b:64:23:ef:a6:3f: 15:00:8e:63:ac:7b:19:cd:85:b8:14:35:4d:0e:44: 65:6a:ad:aa:69:79:76:30:c4:30:05:1b:af:7a:89: bd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:39:E4:3E:B5:43:2A:BB:07:FC:45:81:D0:71:0C:EC:C0:C2:C9:82 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:fa:71:f4:ca:f9:04:48:47:e4:3c:bd:5e:b4:2a:a9:e4:23: 21:39:f3:ef:c9:7b:30:5e:a8:3c:15:ef:9b:90:b6:18:eb:1c: d4:c3:2d:14:0a:dc:3c:2e:14:4d:24:e2:3c:9c:40:33:79:bf: 84:32:42:6d:a9:cb:01:76:8b:19:36:49:bc:d1:19:77:8d:64: b5:87:1d:70:8a:f5:19:06:02:20:29:3a:37:e0:02:6e:02:65: dd:2b:bc:39:3b:c2:e7:63:cc:59:66:28:c5:76:43:86:b1:12: e6:02:40:cb:7f:79:3c:ac:2c:f2:88:85:ad:37:af:98:7f:86: dc:c1:90:63:88:d6:ce:b1:51:bb:c6:20:51:31:5c:a0:06:91: 0b:d3:d4:77:fc:70:af:19:2a:63:a8:6e:b3:7a:e6:83:48:48: 89:05:98:46:5e:04:ce:f1:7a:49:70:c5:9f:99:ee:64:e2:f7: 44:2a:8f:86:95:47:e7:d1:c8:6e:62:a2:5d:3f:3a:40:07:2b: 94:23:4d:8b:70:75:cf:f4:7e:16:25:27:cc:55:56:5e:84:f7: 8d:ca:42:ab:a9:0d:ae:0b:6b:da:68:05:43:46:a0:ad:93:6c: 91:6a:09:49:1c:8f:a4:be:b5:83:91:ef:4d:ea:45:82:68:58: d9:22:65:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoMDkwNjc4ODJDREMwMjAzNDkxNjFFMDkzQkYzNDczMUIz RjgyMkJENzAeFw0yNTA4MDkwNzM1MzdaFw0yNTA4MTYwNzM1MzdaMBgxFjAUBgNV BAMTDTY4OTZmYTRhLWIwM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfRnQv8DVkreolwc7Lt5nf43aokjwgjResKV+ca24fmk0oHKzESlARRLAiebxV 6LiuEv9GDTDnHUVceeOX+2zwR5jBmCyiphrvvybsTnjkEWhmHFvjhUrWICH/ibHT 65luOrf+G/I16blhQ7iWUXeWWaZuAGU9j90C1KYEYLPtSMjvcIsFAjHblXlx4HTD qXwFKYnpwbN93bv5dhn3oz99k1U8NJ+LyjvoiCS4RVKDueD/hO1/GCXM7Ir8Q7k6 L9UBWwhQ7eFBWLt4viTFCeDPfdULYS4nOYFSr5tkI++mPxUAjmOsexnNhbgUNU0O RGVqrappeXYwxDAFG696ib0nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNjnkPrVD KrsH/EWB0HEM7MDCyYIwHwYDVR0jBBgwFoAUCQZ4gs3AIDSRYeCTvzRzGz+CK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0YzRDIyQzJDRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1FaNGdzM0FJRFNSWWVDVHZ6UnpHei1DSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0YzRDIyQzJDRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURT UlllQ1R2elJ6R3otQ0s5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALn6cfTK+QRIR+Q8vV60KqnkIyE58+/JezBeqDwV75uQthjrHNTDLRQK 3DwuFE0k4jycQDN5v4QyQm2pywF2ixk2SbzRGXeNZLWHHXCK9RkGAiApOjfgAm4C Zd0rvDk7wudjzFlmKMV2Q4axEuYCQMt/eTysLPKIha03r5h/htzBkGOI1s6xUbvG IFExXKAGkQvT1Hf8cK8ZKmOobrN65oNISIkFmEZeBM7xeklwxZ+Z7mTi90Qqj4aV R+fRyG5iol0/OkAHK5QjTYtwdc/0fhYlJ8xVVl6E943KQqupDa4La9poBUNGoK2T bJFqCUkcj6S+tYOR703qRYJoWNkiZVQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:25 2025 by rpki-client