$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: 5oH7zVCcsz0DOEiLpygftDdokHR0zQV7jC1C0qCzWvs= Subject key identifier: 00:6B:EE:4E:9F:7C:A5:E5:EB:2E:33:C7:64:73:A5:03:71:91:D6:A1 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0B36 Signing time: Mon 04 Aug 2025 19:27:44 +0000 Manifest this update: Mon 04 Aug 2025 19:27:43 +0000 Manifest next update: Mon 11 Aug 2025 19:27:43 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: 2CwsZP3eMqAZYxe7fLX9Vt7op9tgSpn3lTWfdQHGEl8=) 2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: gD5Iq8akoAlTIS4ryMBL5JIYOH1ViK0S3xNtIRVVfYc=) 3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: 2OIryrqTJwARaXm6rXTbRJKfK80d24FVCzeiupTYqAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Aug 4 19:27:43 2025 GMT Not After : Aug 11 19:27:43 2025 GMT Subject: CN=689109b0-32e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:4c:90:52:3d:71:c2:fd:09:c9:ed:fa:98: 0b:b7:92:d1:36:88:e3:a5:e2:31:ee:d0:e5:ab:6a: 4a:36:48:ea:7c:5f:76:1f:f3:e3:be:e7:6d:f4:bf: 95:01:08:e4:92:13:d3:81:5e:d1:74:f3:17:d3:11: be:aa:0d:87:fb:fe:18:2a:2d:4b:f3:fc:ab:19:ec: 6e:e9:29:de:15:54:ec:9c:6e:aa:32:df:80:69:94: e7:fb:f1:46:16:91:56:e6:99:38:a3:fc:9b:6f:53: 93:26:9b:29:2d:80:4f:45:0f:09:d3:e5:ef:ec:5c: ed:48:c1:29:0b:2a:dc:28:42:12:ac:67:fa:d1:52: 62:e3:db:8e:24:b8:b5:11:4f:e7:ff:cd:db:20:62: 06:8b:aa:78:d4:f7:86:a8:b3:f9:a4:5e:dd:a7:45: d0:33:3c:80:e1:cc:7e:be:fe:af:9d:79:ea:b4:dc: f4:7f:80:4e:6b:f0:a4:ed:ba:68:09:bd:88:e5:ec: c4:17:82:be:8d:b0:39:d1:24:3d:15:34:bd:4f:3a: bb:34:ea:56:52:ac:88:4b:78:65:ee:1a:3f:f0:ab: d2:d8:01:e7:d3:b5:ee:91:8f:c0:71:0e:57:f7:56: 16:cd:67:fd:b2:75:25:50:30:5b:37:22:c6:c6:c7: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6B:EE:4E:9F:7C:A5:E5:EB:2E:33:C7:64:73:A5:03:71:91:D6:A1 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4e:c3:7b:78:36:16:e5:3b:5b:cf:82:62:1a:df:82:fb:3f: ba:24:8c:cb:17:2a:cd:07:6d:e2:28:ac:fc:60:ac:2f:22:52: a8:4a:58:8e:87:fe:a4:f7:40:c1:e5:75:72:f9:2d:86:42:82: e9:59:d4:db:83:1b:0e:cc:87:62:a7:ea:16:15:b1:fe:17:e1: d6:78:55:a3:69:95:0a:27:1e:bc:f6:f8:c1:60:3a:1e:40:50: 8e:6b:d5:00:1a:ca:59:d1:c5:64:32:51:ed:90:8f:ce:67:a1: 59:3c:3d:69:eb:bc:82:2d:f9:13:fa:3b:d9:dd:7a:cf:0a:b9: 2d:0e:d0:78:b8:3a:0b:f6:1d:7a:b4:79:9e:1f:f5:4c:46:05: 02:12:3c:65:12:e0:fa:6e:35:90:55:6c:28:a5:f2:0f:f6:88: c6:f1:1e:7a:e5:e2:87:1f:ea:86:b8:2e:a0:24:20:ee:7d:f3: ac:ad:a8:a4:c7:2f:05:ec:ad:6f:85:b5:62:9d:76:d9:50:7b: 99:fe:c1:b1:6a:27:7a:bd:27:38:28:35:c3:e0:f8:69:54:db: c0:be:2f:27:97:13:53:5a:28:66:a4:64:58:5e:05:d2:37:e2: 1e:0d:ec:a6:ee:96:7e:b4:73:ba:d3:e5:ed:0f:43:2f:9f:83: f2:cb:da:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUwODA0MTkyNzQzWhcNMjUwODExMTkyNzQzWjAYMRYwFAYD VQQDEw02ODkxMDliMC0zMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vZMkFI9ccL9Ccnt+pgLt5LRNojjpeIx7tDlq2pKNkjqfF92H/Pjvudt9L+V AQjkkhPTgV7RdPMX0xG+qg2H+/4YKi1L8/yrGexu6SneFVTsnG6qMt+AaZTn+/FG FpFW5pk4o/ybb1OTJpspLYBPRQ8J0+Xv7FztSMEpCyrcKEISrGf60VJi49uOJLi1 EU/n/83bIGIGi6p41PeGqLP5pF7dp0XQMzyA4cx+vv6vnXnqtNz0f4BOa/Ck7bpo Cb2I5ezEF4K+jbA50SQ9FTS9Tzq7NOpWUqyIS3hl7ho/8KvS2AHn07XukY/AcQ5X 91YWzWf9snUlUDBbNyLGxsd5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABr7k6f fKXl6y4zx2RzpQNxkdahMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/TsN7eDYW5Ttbz4JiGt+C+z+6JIzLFyrNB23iKKz8YKwvIlKoSliO h/6k90DB5XVy+S2GQoLpWdTbgxsOzIdip+oWFbH+F+HWeFWjaZUKJx689vjBYDoe QFCOa9UAGspZ0cVkMlHtkI/OZ6FZPD1p67yCLfkT+jvZ3XrPCrktDtB4uDoL9h16 tHmeH/VMRgUCEjxlEuD6bjWQVWwopfIP9ojG8R565eKHH+qGuC6gJCDuffOsraik xy8F7K1vhbVinXbZUHuZ/sGxaid6vSc4KDXD4PhpVNvAvi8nlxNTWihmpGRYXgXS N+IeDeym7pZ+tHO60+XtD0Mvn4Pyy9qZ -----END CERTIFICATE-----Generated at Wed Aug 6 13:23:40 2025 by rpki-client