$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json) Hash identifier: sBLbTTWEEosl+cEG/MnIKsR675Apif2N5GyzG52gqzE= Subject key identifier: 19:13:BD:D7:7B:E8:86:33:4C:23:E7:D2:3E:66:74:C5:C9:E5:69:35 Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft Manifest number: 014C Signing time: Sat 09 Aug 2025 04:38:57 +0000 Manifest this update: Sat 09 Aug 2025 04:38:57 +0000 Manifest next update: Sat 16 Aug 2025 04:38:57 +0000 Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: HkLe3hM7OnYX6BuyBO1RVDDf+Cv6l5haKegLlPiOh34=) 2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB916, serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Validity Not Before: Aug 9 04:38:57 2025 GMT Not After : Aug 16 04:38:57 2025 GMT Subject: CN=6896d0e1-c549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:2c:68:af:7d:6f:27:84:63:41:4e:00:36: 2c:29:6d:1b:d9:5c:92:86:3e:bf:48:57:f9:11:9b: d2:9c:58:65:52:15:63:a1:e3:2b:a8:01:bf:c3:99: 5a:d0:da:21:0e:f8:b5:8f:f6:61:79:51:da:84:26: 14:bf:65:d0:e0:93:bf:b1:ca:74:9a:6b:c4:9a:4a: b5:c0:8d:29:85:e9:70:6e:97:19:07:fa:d2:8a:fe: 2a:74:54:95:1a:70:f9:78:76:a7:39:8c:54:09:d0: ba:92:aa:da:35:43:c3:73:06:02:54:2c:97:e5:a4: 1a:c5:a8:31:53:7b:20:67:cc:c5:4a:60:51:40:e3: c9:8a:e3:d7:3b:4a:11:ad:d7:df:bd:c2:8e:b5:2d: ae:d4:cc:70:49:37:ee:89:b7:a1:59:d6:1d:3b:b1: 4a:1b:92:2d:6f:4d:f6:7e:26:0c:48:09:ee:39:8e: 96:91:51:9b:d3:ea:4a:1f:8d:ae:59:b8:68:d1:f2: 74:46:b1:2d:b0:0d:d6:f3:ff:e7:09:69:6c:23:36: 0a:e8:cd:1e:8d:4f:c6:3b:b6:0f:be:57:84:6b:6a: b5:04:44:5e:33:79:ea:d5:0b:7e:ac:57:5a:53:e4: eb:d8:6a:43:5c:1b:df:69:99:4d:bc:d5:3d:ba:8b: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:13:BD:D7:7B:E8:86:33:4C:23:E7:D2:3E:66:74:C5:C9:E5:69:35 X509v3 Authority Key Identifier: keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:21:09:0d:3f:7f:9f:b9:2a:50:46:f4:75:8b:6d:e8:58:11: 2c:cb:98:94:e7:5b:67:12:29:48:f5:61:2d:ed:7a:ce:df:65: 64:3e:1e:c1:ba:e4:be:39:a9:1b:8c:38:d3:58:2d:68:ba:e7: df:d1:7c:5e:64:02:48:08:12:90:51:f6:2c:5b:1a:99:9c:f0: f6:09:c2:2d:60:1d:64:0e:64:63:a9:27:fa:ff:af:eb:e5:1a: 39:7b:46:2b:02:03:f4:89:4a:14:16:ae:78:91:de:86:b8:53: 8c:96:2e:15:39:45:b4:98:0e:49:61:01:64:8a:02:9c:fa:76: 9b:05:12:15:ca:3c:8a:83:84:9d:f2:12:91:d9:4d:b2:a5:04: 46:26:88:5d:f0:83:ec:54:f3:d0:b8:3f:17:30:5b:d8:af:28: f5:75:12:28:9a:85:7c:8c:8e:77:cb:9b:03:8a:7a:c3:7f:40: 0a:55:5e:a8:6b:d1:16:b3:9c:e5:65:5c:82:63:6e:48:7b:bc: 6a:e1:d0:7a:9d:48:8b:8b:b0:56:b7:56:38:47:d5:2e:14:bf: 9c:18:c4:4d:ad:09:74:79:b8:ce:8d:f6:a7:f0:e9:d3:ae:a7: 3b:28:3b:b5:25:08:48:11:bf:bb:30:60:0a:79:44:eb:87:da: 4f:17:3c:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG QzAxNDg1NEMwHhcNMjUwODA5MDQzODU3WhcNMjUwODE2MDQzODU3WjAYMRYwFAYD VQQDEw02ODk2ZDBlMS1jNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7wsaK99byeEY0FOADYsKW0b2VyShj6/SFf5EZvSnFhlUhVjoeMrqAG/w5la 0NohDvi1j/ZheVHahCYUv2XQ4JO/scp0mmvEmkq1wI0phelwbpcZB/rSiv4qdFSV GnD5eHanOYxUCdC6kqraNUPDcwYCVCyX5aQaxagxU3sgZ8zFSmBRQOPJiuPXO0oR rdffvcKOtS2u1MxwSTfuibehWdYdO7FKG5Itb032fiYMSAnuOY6WkVGb0+pKH42u Wbho0fJ0RrEtsA3W8//nCWlsIzYK6M0ejU/GO7YPvleEa2q1BEReM3nq1Qt+rFda U+Tr2GpDXBvfaZlNvNU9uosPtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkTvdd7 6IYzTCPn0j5mdMXJ5Wk1MB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjkxNi83NEVDMzk3RTdEM0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4 OFZwMTgxRmtQN2Y4QVVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfIQkNP3+fuSpQRvR1i23oWBEsy5iU51tnEilI9WEt7XrO32VkPh7B uuS+OakbjDjTWC1ouuff0XxeZAJICBKQUfYsWxqZnPD2CcItYB1kDmRjqSf6/6/r 5Ro5e0YrAgP0iUoUFq54kd6GuFOMli4VOUW0mA5JYQFkigKc+nabBRIVyjyKg4Sd 8hKR2U2ypQRGJohd8IPsVPPQuD8XMFvYryj1dRIomoV8jI53y5sDinrDf0AKVV6o a9EWs5zlZVyCY25Ie7xq4dB6nUiLi7BWt1Y4R9UuFL+cGMRNrQl0ebjOjfan8OnT rqc7KDu1JQhIEb+7MGAKeUTrh9pPFzw6 -----END CERTIFICATE-----Generated at Sat Aug 9 22:46:08 2025 by rpki-client