$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: oqNgSdMl3wURRI5gBJzbjjI6wQg1nMzJmQa2T9y5TaI= Subject key identifier: D0:16:8F:F1:9C:6B:38:E6:A0:93:6A:8A:21:A3:0D:38:12:7D:18:D8 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 04E4 Signing time: Wed 13 Aug 2025 00:12:29 +0000 Manifest this update: Wed 13 Aug 2025 00:12:28 +0000 Manifest next update: Wed 20 Aug 2025 00:12:28 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: 1+VTd0zJ5nKlt1aYkPK6Cgi31JGqPZSLNqhbsFb/Wws=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Aug 13 00:12:28 2025 GMT Not After : Aug 20 00:12:28 2025 GMT Subject: CN=689bd86c-fc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:f9:c3:75:24:0e:03:99:7e:02:a9:7f:86: 61:5a:f5:ad:24:b6:82:20:e0:8a:3c:d9:ae:70:8c: f9:5f:28:e9:b2:e5:21:20:26:e3:a4:a9:23:5d:e4: a5:b4:e7:70:e3:17:6d:56:d5:7e:9c:4f:8a:ea:46: 5e:43:ed:2b:27:65:a7:94:3e:26:00:18:ad:97:da: d0:66:bd:8f:91:29:03:7f:aa:62:3e:ad:ff:91:1e: e4:0e:d9:ff:40:44:dd:99:6a:f0:8f:7c:7c:46:21: f0:60:33:62:eb:64:16:77:b3:ab:50:f3:5a:3d:2f: cf:61:e2:3b:ce:e3:c2:ef:98:df:f3:d8:8a:7d:5d: 66:33:29:e5:bb:47:65:92:25:7b:fb:5d:69:2c:59: 5a:ee:98:aa:fe:e3:68:fa:27:11:c4:62:41:d9:60: a6:92:a2:a3:11:a9:55:73:fb:d5:1d:51:45:e7:32: f7:25:99:96:57:46:a8:14:4d:2b:52:10:7f:50:bb: b7:ef:d1:af:73:95:91:79:db:ab:6a:e8:51:72:b1: 56:7d:20:c1:cd:02:19:65:51:0f:eb:8f:c6:25:00: 4a:83:ff:6d:be:e1:a3:67:51:f6:58:15:33:d5:2f: 1a:06:99:fb:a6:31:53:89:63:4c:5e:5d:f5:96:bf: 95:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:16:8F:F1:9C:6B:38:E6:A0:93:6A:8A:21:A3:0D:38:12:7D:18:D8 X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:35:96:e3:cb:f3:e0:96:c0:f8:1f:3f:ff:23:ce:ff:ca:9a: 90:e6:36:a9:be:85:47:97:13:cf:77:4d:64:47:65:e7:3a:c4: ae:87:34:5e:41:52:e6:2c:86:48:76:b0:f1:08:64:bb:84:96: de:3e:25:aa:17:33:1d:98:83:59:c9:7b:03:4b:0b:0a:30:ef: 6e:1e:1b:6b:2e:11:a0:cd:fc:e3:87:46:00:3d:42:72:21:e1: 40:66:b3:28:3e:ba:95:13:a4:8d:54:37:cf:5f:a0:af:1d:0f: bb:a4:bf:f7:24:36:26:25:06:fe:23:29:45:4a:32:83:56:5e: 30:e6:ed:c4:61:c5:4e:be:35:c5:83:d3:01:44:2b:93:d1:3d: 50:db:b0:1f:19:fc:6c:ae:47:22:d6:52:39:1c:8c:1f:bc:99: 27:fd:1b:a5:5b:fa:26:3f:fd:30:28:e8:00:7e:a8:c2:8c:a7: d4:a3:bb:c8:35:e8:e0:ef:0f:e6:1e:c2:7e:df:14:16:38:09: 8e:41:43:9b:75:12:a8:54:4d:53:d7:ea:5a:bf:80:84:95:b4: 72:d2:a4:e8:bd:8b:32:1c:4a:36:24:2a:3d:53:76:b3:0e:65: 84:8b:cd:6b:6a:db:51:72:b8:ce:28:99:ec:c3:75:15:aa:ec: 50:bf:5a:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwODEzMDAxMjI4WhcNMjUwODIwMDAxMjI4WjAYMRYwFAYD VQQDEw02ODliZDg2Yy1mYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/j5w3UkDgOZfgKpf4ZhWvWtJLaCIOCKPNmucIz5XyjpsuUhICbjpKkjXeSl tOdw4xdtVtV+nE+K6kZeQ+0rJ2WnlD4mABitl9rQZr2PkSkDf6piPq3/kR7kDtn/ QETdmWrwj3x8RiHwYDNi62QWd7OrUPNaPS/PYeI7zuPC75jf89iKfV1mMynlu0dl kiV7+11pLFla7piq/uNo+icRxGJB2WCmkqKjEalVc/vVHVFF5zL3JZmWV0aoFE0r UhB/ULu379Gvc5WRedurauhRcrFWfSDBzQIZZVEP64/GJQBKg/9tvuGjZ1H2WBUz 1S8aBpn7pjFTiWNMXl31lr+VxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAWj/Gc azjmoJNqiiGjDTgSfRjYMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/NZbjy/PglsD4Hz//I87/ypqQ5japvoVHlxPPd01kR2XnOsSuhzRe QVLmLIZIdrDxCGS7hJbePiWqFzMdmINZyXsDSwsKMO9uHhtrLhGgzfzjh0YAPUJy IeFAZrMoPrqVE6SNVDfPX6CvHQ+7pL/3JDYmJQb+IylFSjKDVl4w5u3EYcVOvjXF g9MBRCuT0T1Q27AfGfxsrkci1lI5HIwfvJkn/RulW/omP/0wKOgAfqjCjKfUo7vI Nejg7w/mHsJ+3xQWOAmOQUObdRKoVE1T1+pav4CElbRy0qTovYsyHEo2JCo9U3az DmWEi81rattRcrjOKJnsw3UVquxQv1rs -----END CERTIFICATE-----Generated at Wed Aug 13 02:17:26 2025 by rpki-client