$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: IcWHQ96nIG+rGldozrYSl7zYCVQHalGbSdHOnPc7i98= Subject key identifier: C5:49:CF:93:66:9A:33:0E:5A:71:DD:B0:A9:72:53:EF:C7:20:78:09 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0ACE Signing time: Sun 10 Aug 2025 19:29:23 +0000 Manifest this update: Sun 10 Aug 2025 19:29:22 +0000 Manifest next update: Sun 17 Aug 2025 19:29:22 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: YlTDQDFQbyzgCdi+Xmgsha80oS4yawenhfMkQt+jSwI=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Aug 10 19:29:22 2025 GMT Not After : Aug 17 19:29:22 2025 GMT Subject: CN=6898f313-e4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:7f:29:a1:7e:bc:db:10:29:4c:26:34:da: f7:03:0b:b7:6c:70:12:c9:75:b9:59:26:be:61:7a: cb:f4:4a:2b:d1:59:8d:50:97:87:15:34:7d:b4:f7: 8c:95:22:d5:3b:b7:e4:35:3a:00:b2:f9:55:87:20: 0a:1b:f6:a0:3a:af:47:31:d6:cb:12:aa:74:52:cf: c1:f5:4c:e4:2b:cb:3c:55:20:a5:37:14:65:9b:2d: 0f:d7:e9:88:e4:fe:6e:f0:c4:84:f4:08:68:f3:2d: fe:37:33:09:08:b2:e2:d2:a4:e9:e8:e4:f1:21:4b: e1:96:ed:b1:5a:90:75:cb:09:4e:c3:e3:db:eb:da: 9e:7a:07:e2:5e:9e:2c:f4:33:10:00:8f:af:dc:d1: ce:2f:34:67:61:e6:ee:f5:12:06:92:1f:78:07:8f: da:fc:0f:00:b4:34:72:d4:41:ee:d6:de:f1:c6:39: a5:f4:98:f4:ce:a9:4d:48:ce:33:ca:6b:72:7c:62: d5:9d:ce:1f:37:50:f3:6a:78:06:73:10:ac:81:5e: 0f:54:70:f1:60:87:92:70:b0:21:02:c2:9d:4b:84: 41:fc:58:55:12:a1:1d:d0:7c:6d:f9:a3:38:90:a3: 51:f6:46:10:b8:1a:f0:10:23:9b:a5:e0:3a:1d:65: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:49:CF:93:66:9A:33:0E:5A:71:DD:B0:A9:72:53:EF:C7:20:78:09 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0d:6d:7a:ff:db:1f:8b:2d:d4:84:7b:fa:9f:06:24:ec:6c: f4:b6:63:74:c6:bd:d1:8a:d5:7e:dd:b1:a6:29:b4:03:e7:0e: 21:66:21:7a:44:85:b1:b1:09:e9:cd:ee:d2:68:7a:49:77:bb: da:4f:d1:01:88:8d:7f:01:42:51:b1:7d:22:2c:fc:8a:ac:ab: 55:48:3e:25:e9:29:e5:57:e7:27:66:b2:af:ae:5e:cd:26:e4: 3b:5c:2e:69:ba:fd:ed:0f:b0:bf:2f:28:71:dd:a0:89:e7:8f: 16:0e:77:a0:26:6e:bc:02:b1:b8:cc:32:4d:56:11:0f:b9:4d: 1d:27:d8:0a:2c:c0:fa:3f:b2:04:50:d9:03:8c:a6:90:7c:23: 58:2c:2c:19:0a:a0:26:bc:f4:ba:5f:08:c5:5d:d8:8c:36:b5: 47:1d:0e:76:0e:fb:79:87:c9:1a:57:21:27:57:de:13:8d:83: 36:45:66:6d:ae:b0:b6:dd:97:5f:69:64:03:39:65:2d:05:4f: 75:0e:f6:41:fb:60:0b:28:f5:07:3a:15:89:bf:0a:65:25:7e: 24:6f:3e:b7:b4:48:c7:1e:cd:4b:ba:43:e3:ba:74:dc:ce:44: a1:fe:cd:47:84:7c:b2:17:6f:6e:ea:e5:ff:26:e2:d5:7a:97: b3:15:fc:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwODEwMTkyOTIyWhcNMjUwODE3MTkyOTIyWjAYMRYwFAYD VQQDEw02ODk4ZjMxMy1lNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9h/KaF+vNsQKUwmNNr3Awu3bHASyXW5WSa+YXrL9Eor0VmNUJeHFTR9tPeM lSLVO7fkNToAsvlVhyAKG/agOq9HMdbLEqp0Us/B9UzkK8s8VSClNxRlmy0P1+mI 5P5u8MSE9Aho8y3+NzMJCLLi0qTp6OTxIUvhlu2xWpB1ywlOw+Pb69qeegfiXp4s 9DMQAI+v3NHOLzRnYebu9RIGkh94B4/a/A8AtDRy1EHu1t7xxjml9Jj0zqlNSM4z ymtyfGLVnc4fN1DzangGcxCsgV4PVHDxYIeScLAhAsKdS4RB/FhVEqEd0Hxt+aM4 kKNR9kYQuBrwECObpeA6HWUrywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVJz5Nm mjMOWnHdsKlyU+/HIHgJMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAODW16/9sfiy3UhHv6nwYk7Gz0tmN0xr3RitV+3bGmKbQD5w4hZiF6 RIWxsQnpze7SaHpJd7vaT9EBiI1/AUJRsX0iLPyKrKtVSD4l6SnlV+cnZrKvrl7N JuQ7XC5puv3tD7C/Lyhx3aCJ548WDnegJm68ArG4zDJNVhEPuU0dJ9gKLMD6P7IE UNkDjKaQfCNYLCwZCqAmvPS6XwjFXdiMNrVHHQ52Dvt5h8kaVyEnV94TjYM2RWZt rrC23ZdfaWQDOWUtBU91DvZB+2ALKPUHOhWJvwplJX4kbz63tEjHHs1LukPjunTc zkSh/s1HhHyyF29u6uX/JuLVepezFfzo -----END CERTIFICATE-----Generated at Mon Aug 11 10:36:06 2025 by rpki-client