$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: f2EH27LE/Hyu0PrCmjTIMgTuZyo9fzMCW3L9JcqvVgA= Subject key identifier: 28:F5:16:76:13:30:8D:BF:03:7E:B3:D9:C8:67:A6:2B:AE:CA:DB:5C Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 34A8 Signing time: Fri 08 Aug 2025 15:19:34 +0000 Manifest this update: Fri 08 Aug 2025 15:19:33 +0000 Manifest next update: Fri 15 Aug 2025 15:19:33 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: GOOSNSNuJE0FNTl8vOO1a96N7fYIMOJwlVK7VzvFCpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: Aug 8 15:19:33 2025 GMT Not After : Aug 15 15:19:33 2025 GMT Subject: CN=68961586-ddde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:03:21:4a:75:aa:03:9c:07:28:55:27:0d: b1:83:69:f4:8f:3c:35:3b:91:84:91:a0:2d:fe:28: 98:1b:5c:c3:93:dc:31:c2:c8:f5:92:80:93:b8:80: 2c:db:71:43:ca:70:a2:ab:f8:f8:2e:31:aa:53:25: 2b:cd:0b:63:20:c7:0b:a8:aa:f9:ca:3a:ef:7b:85: af:8c:f8:72:5b:a7:0f:9d:d6:2b:2e:d2:dd:33:4a: 7a:76:dd:3f:73:74:bd:8d:f0:b2:5c:a6:e9:46:65: 68:d4:90:0b:18:3a:d8:49:78:49:ae:43:e0:36:f8: 2c:2f:30:0a:b7:6e:45:9e:67:ae:10:9a:56:0b:de: eb:6f:39:ba:cc:85:b7:3f:1f:72:0d:24:31:c9:16: 13:3b:4f:5d:02:a6:2b:0f:1f:fe:3b:01:de:8a:e1: e7:a4:79:89:92:54:c6:09:4d:e5:7f:ff:5a:63:b4: f0:2d:92:1e:48:8c:ce:b3:e2:47:b8:fa:f6:20:57: ed:26:91:8c:2b:ed:01:e6:57:a3:84:c6:8f:2c:5b: 24:e6:8e:2e:23:19:12:c4:16:15:c2:59:dd:36:c8: f8:98:e5:2a:5e:1f:c6:d2:cf:1f:00:97:86:d2:d9: 80:ae:f0:bd:80:21:7e:9e:4b:16:ef:3f:2b:bc:d9: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F5:16:76:13:30:8D:BF:03:7E:B3:D9:C8:67:A6:2B:AE:CA:DB:5C X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:31:32:5d:3e:9c:df:22:6c:bb:c9:02:ce:b1:35:50:9e:19: 0f:46:c9:19:0e:75:03:61:1e:f4:d8:4d:ec:1c:53:e9:80:9d: 06:0d:6f:92:85:7d:35:0f:09:50:e1:c9:4f:7b:44:46:a2:bb: 87:36:c9:e8:c6:83:51:fd:5e:22:e1:92:99:54:b0:39:83:11: 68:0f:1d:24:f4:8d:49:fb:1e:45:33:7d:dd:24:d5:3e:50:76: 0e:4d:05:c4:8c:02:92:1d:d6:0d:8d:14:83:ad:35:09:ed:af: e3:8f:2e:d3:8e:0b:e1:4a:29:03:17:44:5c:10:db:a2:a5:07: c6:59:69:65:1b:77:2e:9d:e2:0a:43:03:82:a8:d9:9a:80:8e: 9c:da:ca:e1:90:d8:cb:37:10:d0:65:37:27:1a:26:a5:92:91: 35:cc:ff:34:25:15:5c:cf:88:38:68:2c:5e:63:4a:a3:6f:60: 63:58:88:e5:8c:0e:2f:0a:ea:17:8d:be:78:1b:82:91:e5:d8: dc:10:5d:88:25:35:14:0a:38:84:3a:5b:1a:d1:ee:21:a9:85: 56:b6:77:32:60:f6:f6:8c:74:75:d9:68:ca:f4:52:fc:7f:ab: d7:4d:b6:2a:52:0e:bf:3e:c7:2f:4e:17:ac:fd:e3:a4:10:e1: b4:cf:c0:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjUwODA4MTUxOTMzWhcNMjUwODE1MTUxOTMzWjAYMRYwFAYD VQQDEw02ODk2MTU4Ni1kZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjsDIUp1qgOcByhVJw2xg2n0jzw1O5GEkaAt/iiYG1zDk9wxwsj1koCTuIAs 23FDynCiq/j4LjGqUyUrzQtjIMcLqKr5yjrve4WvjPhyW6cPndYrLtLdM0p6dt0/ c3S9jfCyXKbpRmVo1JALGDrYSXhJrkPgNvgsLzAKt25FnmeuEJpWC97rbzm6zIW3 Px9yDSQxyRYTO09dAqYrDx/+OwHeiuHnpHmJklTGCU3lf/9aY7TwLZIeSIzOs+JH uPr2IFftJpGMK+0B5lejhMaPLFsk5o4uIxkSxBYVwlndNsj4mOUqXh/G0s8fAJeG 0tmArvC9gCF+nksW7z8rvNkU+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCj1FnYT MI2/A36z2chnpiuuyttcMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxMTJdPpzfImy7yQLOsTVQnhkPRskZDnUDYR702E3sHFPpgJ0GDW+S hX01DwlQ4clPe0RGoruHNsnoxoNR/V4i4ZKZVLA5gxFoDx0k9I1J+x5FM33dJNU+ UHYOTQXEjAKSHdYNjRSDrTUJ7a/jjy7TjgvhSikDF0RcENuipQfGWWllG3cuneIK QwOCqNmagI6c2srhkNjLNxDQZTcnGialkpE1zP80JRVcz4g4aCxeY0qjb2BjWIjl jA4vCuoXjb54G4KR5djcEF2IJTUUCjiEOlsa0e4hqYVWtncyYPb2jHR12WjK9FL8 f6vXTbYqUg6/PscvThes/eOkEOG0z8A/ -----END CERTIFICATE-----Generated at Fri Aug 8 21:03:18 2025 by rpki-client