$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: pS94EO9CjXZ/DjRmhQp6r2ESMkUhnsVwSY27ipPCVZ8= Subject key identifier: 90:A1:37:B4:31:14:5C:F0:22:90:8E:5D:60:24:C5:53:9E:C1:29:E6 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 01EF Signing time: Tue 05 Aug 2025 03:08:32 +0000 Manifest this update: Tue 05 Aug 2025 03:08:32 +0000 Manifest next update: Tue 12 Aug 2025 03:08:32 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: i8MeB9U2paz+jT9y1aZQ5qpkOI58/fMPwzAfIzzQQ6Y=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: jnHEv+tk9LEmiC9T0eLpIu0ka8tlgw/1HGmQA/hDw9s=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: Tod+meVH3/YYDYyQo78I9vVyyLfaumC1ya5cnKT+hFM=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 3zWqR+4/bbh/62pxX54wkuJs0uKg6zeZhN4dCLWwFho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Aug 5 03:08:32 2025 GMT Not After : Aug 12 03:08:32 2025 GMT Subject: CN=689175b0-9fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:8d:81:b5:c0:ad:ea:7b:10:23:2f:d8:72: 32:6a:8d:7a:83:47:a1:9d:1c:b3:30:fa:9b:84:4e: 15:4a:43:38:66:91:ee:b0:05:48:a3:02:86:00:31: ca:e1:b1:72:b8:e1:9c:14:50:07:f0:c3:fe:cb:0a: 85:ed:03:21:7a:20:7c:7c:1a:e1:b2:01:ee:f3:76: eb:5d:ff:81:4a:3d:b0:0b:9d:a3:d7:c8:d6:02:9e: 47:4c:2b:bc:03:ab:aa:4f:05:c7:cb:48:ce:44:db: b5:99:ee:d2:b9:58:5f:99:39:a1:5b:ac:aa:1b:0f: 35:1c:b2:32:de:e8:54:54:06:6a:3e:e4:27:f9:c3: b1:82:5a:5d:0d:5b:3c:d5:83:14:00:65:62:7b:ea: c8:de:b4:ca:94:26:27:9a:05:ad:93:26:12:b2:f5: d8:1e:0c:9b:d8:8b:f9:16:a6:a1:69:b1:0c:db:f2: d5:cd:d1:6b:8c:57:41:64:21:1b:9f:93:2b:eb:9a: da:44:30:d8:7a:fc:7e:65:43:7a:ca:05:a7:5b:63: fd:21:84:31:fd:e0:c5:39:85:ad:33:a7:8c:b9:40: cd:7c:73:3f:ed:24:da:9b:e5:ec:55:eb:31:97:46: b3:0b:9a:7a:5b:5a:aa:13:c4:27:64:b5:01:1c:71: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A1:37:B4:31:14:5C:F0:22:90:8E:5D:60:24:C5:53:9E:C1:29:E6 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0a:56:20:8e:55:4a:94:19:5e:45:ce:6e:c3:67:1b:3e:e1: 9a:f9:23:92:d4:dc:4f:55:f7:fa:6e:f9:64:4a:0f:9e:33:2f: b5:99:4f:06:83:22:eb:e5:35:25:57:17:79:2a:8f:97:a5:4a: 19:d2:e1:52:33:9e:e3:2b:97:42:39:64:9c:01:d8:a8:e8:ff: 77:1b:4d:c9:41:9b:ce:36:7a:4f:bd:5e:97:57:e7:98:66:4d: 74:82:c1:7f:8f:ce:fa:4b:5a:5f:81:d4:84:d6:b6:df:59:78: be:45:5e:7c:82:8c:37:e1:d8:1c:dd:22:88:6f:b9:01:9f:c3: ae:17:2a:5d:30:09:63:ce:00:fc:8c:05:f6:62:02:20:6f:95: 02:f0:6d:c8:6b:e2:f4:4f:f9:19:3e:36:55:37:01:87:92:dd: b6:df:da:50:d6:01:6d:a4:c1:be:85:7c:d4:6c:49:0a:c7:43: 44:cb:ae:9d:ba:a3:ce:92:7d:0e:4d:50:e2:a0:f3:8c:4c:ea: 97:92:f4:7e:cf:fa:f8:db:75:2e:63:0f:c3:38:8f:bc:79:aa: 86:f9:47:18:07:ea:f2:20:9c:a6:92:1e:c5:b8:5d:78:77:63: d2:e6:d4:ba:21:49:c2:dd:56:6b:25:c9:6f:1e:b9:0c:fc:ad: 2c:93:21:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwODA1MDMwODMyWhcNMjUwODEyMDMwODMyWjAYMRYwFAYD VQQDEw02ODkxNzViMC05ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU+NgbXArep7ECMv2HIyao16g0ehnRyzMPqbhE4VSkM4ZpHusAVIowKGADHK 4bFyuOGcFFAH8MP+ywqF7QMheiB8fBrhsgHu83brXf+BSj2wC52j18jWAp5HTCu8 A6uqTwXHy0jORNu1me7SuVhfmTmhW6yqGw81HLIy3uhUVAZqPuQn+cOxglpdDVs8 1YMUAGVie+rI3rTKlCYnmgWtkyYSsvXYHgyb2Iv5FqahabEM2/LVzdFrjFdBZCEb n5Mr65raRDDYevx+ZUN6ygWnW2P9IYQx/eDFOYWtM6eMuUDNfHM/7STam+XsVesx l0azC5p6W1qqE8QnZLUBHHGj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJChN7Qx FFzwIpCOXWAkxVOewSnmMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoClYgjlVKlBleRc5uw2cbPuGa+SOS1NxPVff6bvlkSg+eMy+1mU8G gyLr5TUlVxd5Ko+XpUoZ0uFSM57jK5dCOWScAdio6P93G03JQZvONnpPvV6XV+eY Zk10gsF/j876S1pfgdSE1rbfWXi+RV58gow34dgc3SKIb7kBn8OuFypdMAljzgD8 jAX2YgIgb5UC8G3Ia+L0T/kZPjZVNwGHkt2239pQ1gFtpMG+hXzUbEkKx0NEy66d uqPOkn0OTVDioPOMTOqXkvR+z/r423UuYw/DOI+8eaqG+UcYB+ryIJymkh7FuF14 d2PS5tS6IUnC3VZrJclvHrkM/K0skyFd -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:42 2025 by rpki-client