$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: b9L2fA+LsvVoePGYB7YV7hNF3Hr4v4VIfmkPDE7wylo= Subject key identifier: 71:A9:1A:55:13:46:D5:61:8C:9E:29:01:D5:1F:0C:85:AC:D5:05:CD Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 0129 Signing time: Sat 09 Aug 2025 04:59:54 +0000 Manifest this update: Sat 09 Aug 2025 04:59:54 +0000 Manifest next update: Sat 16 Aug 2025 04:59:54 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: +B74dsI2DJAC93mETpeI+CU71jLxu2pG/JpeMQdobnk=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Aug 9 04:59:54 2025 GMT Not After : Aug 16 04:59:54 2025 GMT Subject: CN=6896d5ca-6345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bb:d2:83:f8:ee:c1:da:75:37:91:4e:d5:72: 9f:d0:48:47:46:df:42:93:d2:f7:b2:fb:f1:6b:b2: 49:22:e4:84:99:10:76:2a:02:eb:a9:3c:c4:c3:cb: 1a:6f:51:c3:89:7c:b5:af:35:62:ad:7d:66:ae:3d: 2d:03:7f:f6:3c:06:43:92:a3:5b:e4:f3:45:72:c4: 2b:6d:8b:50:76:80:f9:43:d2:79:f9:a7:d3:5c:df: 99:9e:b8:69:cb:0b:c7:1d:77:84:d8:11:ab:ac:7f: 27:63:af:f9:5c:92:da:2a:87:b3:36:4f:d2:39:23: 11:52:65:75:5e:75:7e:64:3b:7b:11:db:7f:f5:39: fc:e4:a4:28:9c:09:e8:c3:b2:b7:55:b5:a7:46:e8: 44:fc:95:fb:c7:90:be:af:55:19:8e:3c:64:ae:97: d6:57:0a:83:e2:03:6a:40:c5:c2:9d:d4:17:1a:1c: 35:96:36:a5:65:b2:38:9e:ed:11:9c:08:b2:81:3d: 5f:fb:8e:02:ad:96:1e:29:88:57:9d:76:64:a4:be: 7f:8e:7a:a5:b8:cb:22:29:fc:af:06:c2:30:9a:c5: b1:81:f6:86:92:97:36:f4:ea:be:81:92:01:3e:9d: af:91:93:c3:53:27:df:6e:aa:3e:80:18:4b:84:24: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A9:1A:55:13:46:D5:61:8C:9E:29:01:D5:1F:0C:85:AC:D5:05:CD X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:61:cd:3e:df:93:d1:52:a3:a2:46:21:9f:62:19:ad:82:4c: dd:bf:93:08:7d:b5:ec:0b:6d:48:11:fc:2a:b0:ae:a7:5f:c1: ce:6d:24:e2:30:16:e5:42:33:40:4b:c7:64:b9:39:f9:90:e0: d0:3b:0c:28:86:3b:3a:40:cd:0e:ab:46:a9:0e:f8:f0:c8:9d: 1d:10:66:70:77:8d:bf:80:d5:a7:c2:43:9c:42:67:b2:ac:e1: 59:f1:3f:35:66:f6:a9:a0:cb:27:89:dd:00:0a:5a:e4:de:f3: 5b:8c:9c:d8:98:7f:10:b1:7a:20:fe:7d:26:c1:09:01:d7:b0: 31:52:07:7f:93:f2:34:ae:cd:91:07:41:6a:ca:a5:71:93:7c: 9e:3e:b1:eb:dc:47:c0:e3:20:40:57:6e:20:20:6c:81:08:a4: ff:b8:4d:e3:01:2a:55:2a:44:03:38:62:66:8f:e5:5a:55:4a: 6e:af:9c:2b:f3:2a:8b:72:df:f8:17:2f:ba:8c:03:ee:20:bf: 85:cd:71:e9:d6:8a:25:7e:2f:4a:47:40:d2:01:de:ed:1c:4b: 92:1e:5e:c2:f5:29:3e:20:8b:09:1d:01:ac:fd:4c:d4:a2:4f: 50:ab:9f:fe:c6:99:7e:10:a0:ca:a1:9d:b8:b6:85:80:74:41: 40:57:4c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwODA5MDQ1OTU0WhcNMjUwODE2MDQ1OTU0WjAYMRYwFAYD VQQDEw02ODk2ZDVjYS02MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rvSg/juwdp1N5FO1XKf0EhHRt9Ck9L3svvxa7JJIuSEmRB2KgLrqTzEw8sa b1HDiXy1rzVirX1mrj0tA3/2PAZDkqNb5PNFcsQrbYtQdoD5Q9J5+afTXN+Znrhp ywvHHXeE2BGrrH8nY6/5XJLaKoezNk/SOSMRUmV1XnV+ZDt7Edt/9Tn85KQonAno w7K3VbWnRuhE/JX7x5C+r1UZjjxkrpfWVwqD4gNqQMXCndQXGhw1ljalZbI4nu0R nAiygT1f+44CrZYeKYhXnXZkpL5/jnqluMsiKfyvBsIwmsWxgfaGkpc29Oq+gZIB Pp2vkZPDUyffbqo+gBhLhCQyQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGpGlUT RtVhjJ4pAdUfDIWs1QXNMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjYc0+35PRUqOiRiGfYhmtgkzdv5MIfbXsC21IEfwqsK6nX8HObSTi MBblQjNAS8dkuTn5kODQOwwohjs6QM0Oq0apDvjwyJ0dEGZwd42/gNWnwkOcQmey rOFZ8T81ZvapoMsnid0AClrk3vNbjJzYmH8QsXog/n0mwQkB17AxUgd/k/I0rs2R B0FqyqVxk3yePrHr3EfA4yBAV24gIGyBCKT/uE3jASpVKkQDOGJmj+VaVUpur5wr 8yqLct/4Fy+6jAPuIL+FzXHp1oolfi9KR0DSAd7tHEuSHl7C9Sk+IIsJHQGs/UzU ok9Qq5/+xpl+EKDKoZ24toWAdEFAV0y9 -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:38 2025 by rpki-client