$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: p44jDHX9LvwoC7j5XUZ1oeVa2dtPseoLUH0sY12Pm8c= Subject key identifier: 0E:6D:CA:F5:C7:64:41:2B:27:FA:CC:1A:C7:05:A2:F6:41:52:21:C0 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C3F Signing time: Fri 08 Aug 2025 18:50:25 +0000 Manifest this update: Fri 08 Aug 2025 18:50:24 +0000 Manifest next update: Fri 15 Aug 2025 18:50:24 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: lgbL+HUiKCeRc3/fA1Hi/Hr01283olk9HRGHDXT2aPM=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Aug 8 18:50:24 2025 GMT Not After : Aug 15 18:50:24 2025 GMT Subject: CN=689646f0-b09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f9:c3:59:c1:a4:2e:39:24:ae:97:c3:26:36: 56:d9:c8:15:8f:ff:ec:83:87:33:41:46:72:b5:c2: e9:40:bb:db:df:cd:70:44:6f:b1:af:70:4a:6c:95: 87:54:31:90:cb:5d:b8:36:a8:c1:40:e8:09:10:2b: a3:a9:15:98:04:a2:85:b5:75:a4:e7:15:c0:34:e1: fe:69:9e:b7:8b:f1:f9:b4:89:d9:72:47:d4:c4:3c: c4:66:83:6e:7f:ea:8a:85:62:4c:2f:47:78:45:5f: a8:e0:45:e3:c8:f5:aa:e9:08:12:63:ac:f6:91:e3: 9b:cf:3c:ad:42:85:fa:af:49:d6:eb:b0:28:46:41: cf:f0:d2:35:cc:8e:f1:c6:7a:ca:f8:1e:89:6c:97: 9a:92:8c:34:7b:54:cc:cb:e7:83:98:40:fe:fb:49: 9b:9d:90:17:48:d7:31:6c:01:37:99:a0:23:56:22: 35:6c:5e:9a:5f:e4:83:4d:b1:42:d4:ab:c6:4a:4d: 6c:ed:46:5a:f0:14:8a:22:75:f0:8a:4b:b9:70:86: b0:f0:94:59:44:ca:c5:0f:53:4e:1d:c7:f1:02:20: 0a:84:42:7e:dd:e9:29:72:7c:bc:b5:37:68:dd:46: 70:43:a1:49:a3:b5:e0:61:a9:24:f3:87:79:8e:ef: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:CA:F5:C7:64:41:2B:27:FA:CC:1A:C7:05:A2:F6:41:52:21:C0 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:36:36:ae:23:21:4f:c7:0b:06:a5:35:87:00:7d:b4:86:8e: 09:c4:be:c3:03:00:05:f0:12:cd:c1:c7:15:5b:c4:12:5c:75: 26:05:12:4c:9f:f3:c1:f8:9a:b8:08:d9:ee:09:b1:bf:21:f3: 6e:8f:7b:e1:c3:d3:35:eb:85:a3:11:8d:cd:ea:2d:03:2a:9a: d7:55:31:d5:55:9b:bd:7e:11:cd:03:b0:42:3c:03:b8:f0:af: a6:67:7c:e2:96:8f:2f:5a:60:e9:2c:65:d7:c6:04:f3:e6:de: 35:ca:98:1a:6a:2d:51:03:16:ff:58:20:d9:9e:70:bc:3b:5d: b4:a8:3b:83:97:01:9a:bf:5c:85:a8:bc:32:36:59:42:e2:e2: 23:cb:95:5c:d6:de:64:86:39:aa:57:ef:8e:4f:02:47:93:91: cc:3c:3e:25:77:5a:04:31:6f:3b:5a:94:ac:84:87:7f:78:a1: 1f:08:57:5c:4e:d3:25:35:8c:6e:5c:d6:1b:8d:d1:42:28:a1: 0a:f8:fc:45:4e:ae:16:b9:e4:e4:c8:de:ae:90:5c:36:cc:0a: 6c:d7:56:36:46:3d:4b:87:b2:2c:9b:44:50:8e:95:77:8b:ca: 00:c6:76:b7:55:45:83:87:b9:ae:a7:b5:fa:39:a6:14:58:53: 69:69:a6:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwODA4MTg1MDI0WhcNMjUwODE1MTg1MDI0WjAYMRYwFAYD VQQDEw02ODk2NDZmMC1iMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PnDWcGkLjkkrpfDJjZW2cgVj//sg4czQUZytcLpQLvb381wRG+xr3BKbJWH VDGQy124NqjBQOgJECujqRWYBKKFtXWk5xXANOH+aZ63i/H5tInZckfUxDzEZoNu f+qKhWJML0d4RV+o4EXjyPWq6QgSY6z2keObzzytQoX6r0nW67AoRkHP8NI1zI7x xnrK+B6JbJeakow0e1TMy+eDmED++0mbnZAXSNcxbAE3maAjViI1bF6aX+SDTbFC 1KvGSk1s7UZa8BSKInXwiku5cIaw8JRZRMrFD1NOHcfxAiAKhEJ+3ekpcny8tTdo 3UZwQ6FJo7XgYakk84d5ju/FPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5tyvXH ZEErJ/rMGscFovZBUiHAMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8NjauIyFPxwsGpTWHAH20ho4JxL7DAwAF8BLNwccVW8QSXHUmBRJM n/PB+Jq4CNnuCbG/IfNuj3vhw9M164WjEY3N6i0DKprXVTHVVZu9fhHNA7BCPAO4 8K+mZ3zilo8vWmDpLGXXxgTz5t41ypgaai1RAxb/WCDZnnC8O120qDuDlwGav1yF qLwyNllC4uIjy5Vc1t5khjmqV++OTwJHk5HMPD4ld1oEMW87WpSshId/eKEfCFdc TtMlNYxuXNYbjdFCKKEK+PxFTq4WueTkyN6ukFw2zAps11Y2Rj1Lh7Ism0RQjpV3 i8oAxna3VUWDh7mup7X6OaYUWFNpaabo -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:35 2025 by rpki-client