$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: 7llLtTJ2qPlZLMh/8FuoS05b+WE7G3dClzMQwn6yNQ4= Subject key identifier: C0:5D:DE:2A:F7:9A:65:50:5A:0D:99:0B:E5:61:68:66:4C:04:96:55 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 0193 Signing time: Tue 05 Aug 2025 03:52:27 +0000 Manifest this update: Tue 05 Aug 2025 03:52:27 +0000 Manifest next update: Tue 12 Aug 2025 03:52:27 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: UAS0eRdnrv7zwDJeyEdejejoX1afzpRsuIiP2aXx66c=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Aug 5 03:52:27 2025 GMT Not After : Aug 12 03:52:27 2025 GMT Subject: CN=68917ffb-0cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:d7:cc:1b:1c:77:7d:7d:3a:94:34:be:da: 32:27:a7:d0:f9:de:8b:78:dd:8d:06:3b:59:9f:44: 84:74:dc:13:47:99:ee:8c:66:43:cc:f8:d6:48:36: 41:8d:e5:35:f4:9b:26:3a:e0:80:ff:42:1d:78:3d: 89:11:20:b0:1c:2e:5c:d9:aa:81:c7:e6:05:d1:f3: 06:e4:05:57:05:cc:77:15:70:ee:5c:54:68:0c:2b: df:7f:ed:57:0b:fb:5e:55:06:02:32:b6:07:10:42: 2a:fc:d9:08:63:84:7d:fd:63:4f:2f:23:24:4b:97: b2:5f:e4:2c:c4:82:2a:02:a7:0b:d5:4c:0d:4f:cc: 30:29:4b:ba:d1:b0:03:f0:df:6b:aa:e4:f4:2d:32: 95:7d:07:7d:7b:65:a7:09:fa:a2:3d:9a:bd:92:13: 1f:a1:a8:93:9d:7f:a5:47:70:98:2a:46:b8:9d:b5: 5e:e3:1c:26:ec:c4:6a:7b:43:35:b7:92:8a:99:bb: 0a:3a:d7:55:e4:14:4b:80:d7:77:d8:65:7a:d6:ee: 6f:c3:bc:3d:60:76:a1:14:da:0a:1f:4e:74:45:b1: 8d:a1:28:5a:89:d6:cf:10:d0:7b:1a:03:9e:c3:0e: 80:e2:ab:b3:83:92:0c:47:e2:f1:c4:69:f2:04:40: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5D:DE:2A:F7:9A:65:50:5A:0D:99:0B:E5:61:68:66:4C:04:96:55 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:9b:42:47:45:28:97:98:71:d0:d0:42:fe:88:bc:4e:49:3b: 6f:f4:71:4d:a7:41:57:da:2d:f1:7e:bc:7d:b3:a3:ba:f6:64: 2e:3f:ec:80:e4:da:b6:11:75:d1:09:d6:b1:02:34:cd:2d:4f: 08:25:db:83:ab:a2:ff:30:e4:c7:bb:3a:b1:f4:71:f5:ea:a4: 7c:e2:b2:e4:f8:8d:b9:22:1f:8b:37:28:d3:f0:93:7d:49:77: 12:7b:6a:5a:1a:92:96:f8:7a:ad:75:cf:ba:88:b6:8b:fd:6a: 20:c0:96:99:7b:fc:6c:22:6d:39:eb:db:7e:31:c5:a5:0a:2a: 34:d6:7b:9e:91:e0:b5:e3:c9:46:c0:8b:df:79:01:11:07:50: a6:a0:22:a8:56:91:10:39:2a:53:37:27:e8:96:c0:c2:3b:5e: c2:c8:36:12:f7:25:f5:cd:a3:5f:c4:53:86:fb:98:d7:9b:59: 19:25:5e:1b:6b:c2:f6:3e:27:63:0e:d1:54:eb:64:8a:86:c2: fa:31:3f:f1:06:5d:a0:12:e3:a5:15:80:1d:9e:93:ec:28:23: dd:f8:9e:f2:c0:a5:a8:b5:2f:6d:49:b8:22:00:db:13:ab:94: d9:b3:70:f6:c9:08:89:ec:6e:de:0b:1c:b0:83:c7:68:ab:d4: 7b:ae:ef:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwODA1MDM1MjI3WhcNMjUwODEyMDM1MjI3WjAYMRYwFAYD VQQDEw02ODkxN2ZmYi0wY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvprXzBscd319OpQ0vtoyJ6fQ+d6LeN2NBjtZn0SEdNwTR5nujGZDzPjWSDZB jeU19JsmOuCA/0IdeD2JESCwHC5c2aqBx+YF0fMG5AVXBcx3FXDuXFRoDCvff+1X C/teVQYCMrYHEEIq/NkIY4R9/WNPLyMkS5eyX+QsxIIqAqcL1UwNT8wwKUu60bAD 8N9rquT0LTKVfQd9e2WnCfqiPZq9khMfoaiTnX+lR3CYKka4nbVe4xwm7MRqe0M1 t5KKmbsKOtdV5BRLgNd32GV61u5vw7w9YHahFNoKH050RbGNoShaidbPENB7GgOe ww6A4quzg5IMR+LxxGnyBEBuZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBd3ir3 mmVQWg2ZC+VhaGZMBJZVMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGm0JHRSiXmHHQ0EL+iLxOSTtv9HFNp0FX2i3xfrx9s6O69mQuP+yA 5Nq2EXXRCdaxAjTNLU8IJduDq6L/MOTHuzqx9HH16qR84rLk+I25Ih+LNyjT8JN9 SXcSe2paGpKW+Hqtdc+6iLaL/WogwJaZe/xsIm0569t+McWlCio01nuekeC148lG wIvfeQERB1CmoCKoVpEQOSpTNyfolsDCO17CyDYS9yX1zaNfxFOG+5jXm1kZJV4b a8L2PidjDtFU62SKhsL6MT/xBl2gEuOlFYAdnpPsKCPd+J7ywKWotS9tSbgiANsT q5TZs3D2yQiJ7G7eCxywg8doq9R7ru8z -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:24 2025 by rpki-client