$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: RWMCPVxTkMkdSgy2EhH0E2VD/Fc92PU3myc+u2yoJm0= Subject key identifier: 62:C9:FB:63:CE:39:9C:5B:A3:AC:32:D5:6C:71:4F:EE:A6:AD:2B:D0 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 019A Signing time: Mon 11 Aug 2025 03:29:59 +0000 Manifest this update: Mon 11 Aug 2025 03:29:59 +0000 Manifest next update: Mon 18 Aug 2025 03:29:59 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: fTFOuiy9zTSGOMKZjxWZ+JGt4xJh1RmcO3eMGX4txPM=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: ZHAMruYyeptNNpeohfIoYoif7sb87BSzSS5PG7gezGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Aug 11 03:29:59 2025 GMT Not After : Aug 18 03:29:59 2025 GMT Subject: CN=689963b7-fc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:a8:f3:4e:63:fa:4b:06:23:42:37:4e:e6: 72:7c:2f:65:81:ac:93:f6:af:c3:5d:48:f9:7d:24: f7:2e:2b:35:31:da:2f:62:69:b6:a8:0c:09:9c:34: fa:53:29:a7:f1:11:f8:3e:9e:d9:86:ac:fa:8b:00: ab:73:b5:a9:35:cf:04:b7:80:da:4d:b1:9f:cb:50: e8:9e:5d:15:55:9d:1f:2a:05:f5:d6:d7:df:1a:19: 0f:c0:95:a7:28:94:ef:a8:c3:4c:8e:30:21:38:b7: b5:03:9c:38:13:59:b7:66:71:41:18:95:a2:6c:cd: f2:05:06:88:a5:f3:58:b8:04:9d:5b:0e:c2:b1:4a: cd:56:1c:47:b2:51:36:73:f6:67:32:77:ae:9e:b5: d9:4e:31:4d:aa:16:40:6c:f1:dc:e5:0b:ba:fa:f4: 7b:83:a0:41:44:1e:cf:cd:03:ab:d2:dc:3c:e9:d9: f6:64:34:0c:1b:e2:57:37:1d:e9:01:e3:a1:cf:dc: d4:89:bf:0e:c2:d2:36:c5:68:31:64:51:b7:02:8f: 00:ae:b0:c7:35:bd:79:6f:07:63:a3:9d:f1:1b:56: d4:4f:38:7b:a3:21:ea:99:06:d4:9d:91:52:a8:f4: ae:24:13:18:e3:0d:46:55:06:75:2b:4b:a0:38:ac: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C9:FB:63:CE:39:9C:5B:A3:AC:32:D5:6C:71:4F:EE:A6:AD:2B:D0 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e1:dc:94:04:3c:b5:c3:73:78:81:62:13:1d:9d:d0:79:53: 08:74:72:d7:11:47:20:53:52:3a:0c:79:8f:81:71:e6:51:ca: d8:dd:fb:16:04:39:31:da:c9:c5:d8:65:4c:36:3b:72:95:2a: 74:f7:5c:3d:8a:d1:22:00:0e:ad:f8:9e:5a:c2:1c:1c:7b:38: 7d:e7:52:7e:9c:c6:27:ba:8c:3a:fd:18:64:af:4a:50:e3:b6: 6a:a2:7c:21:90:fd:ea:29:7e:c5:19:29:54:26:54:81:09:50: 61:b9:be:df:5e:77:61:05:37:1e:09:c0:e2:8e:1d:2a:7c:dd: 14:1e:7a:85:d8:30:5b:12:57:70:57:73:e5:58:bc:e3:8c:2d: 19:f5:84:10:25:da:87:d1:9e:e4:1e:03:7c:3f:60:ae:db:b9: ec:55:81:9f:f7:5f:2e:bd:cc:2c:43:55:77:c1:78:2c:32:32: de:f1:35:d1:cf:66:9e:0c:e6:f3:f7:0e:13:0a:41:2e:00:bf: a2:e0:1a:fd:c8:41:87:44:5a:fe:59:63:66:fa:c7:3a:da:dd: 40:bd:22:31:36:6c:ca:80:45:21:5a:13:aa:4d:23:07:d5:0d: 00:4a:e4:f6:75:3b:63:1b:44:99:ea:0b:7b:74:c5:28:a6:37: ec:a1:0c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUwODExMDMyOTU5WhcNMjUwODE4MDMyOTU5WjAYMRYwFAYD VQQDEw02ODk5NjNiNy1mYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqao805j+ksGI0I3TuZyfC9lgayT9q/DXUj5fST3Lis1MdovYmm2qAwJnDT6 Uymn8RH4Pp7Zhqz6iwCrc7WpNc8Et4DaTbGfy1Donl0VVZ0fKgX11tffGhkPwJWn KJTvqMNMjjAhOLe1A5w4E1m3ZnFBGJWibM3yBQaIpfNYuASdWw7CsUrNVhxHslE2 c/ZnMneunrXZTjFNqhZAbPHc5Qu6+vR7g6BBRB7PzQOr0tw86dn2ZDQMG+JXNx3p AeOhz9zUib8OwtI2xWgxZFG3Ao8ArrDHNb15bwdjo53xG1bUTzh7oyHqmQbUnZFS qPSuJBMY4w1GVQZ1K0ugOKzxgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLJ+2PO OZxbo6wy1WxxT+6mrSvQMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA84dyUBDy1w3N4gWITHZ3QeVMIdHLXEUcgU1I6DHmPgXHmUcrY3fsW BDkx2snF2GVMNjtylSp091w9itEiAA6t+J5awhwcezh951J+nMYnuow6/Rhkr0pQ 47ZqonwhkP3qKX7FGSlUJlSBCVBhub7fXndhBTceCcDijh0qfN0UHnqF2DBbEldw V3PlWLzjjC0Z9YQQJdqH0Z7kHgN8P2Cu27nsVYGf918uvcwsQ1V3wXgsMjLe8TXR z2aeDObz9w4TCkEuAL+i4Br9yEGHRFr+WWNm+sc62t1AvSIxNmzKgEUhWhOqTSMH 1Q0ASuT2dTtjG0SZ6gt7dMUopjfsoQzp -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:42 2025 by rpki-client