$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft File: qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft (raw, json) Hash identifier: E3XOY9kPquAy2xU0gEq1Eg6QOMem2IDGnjDZsm8GzBs= Subject key identifier: 40:F1:B8:B8:ED:2F:52:F7:3F:DE:18:2A:1F:68:71:59:8A:0D:62:B4 Authority key identifier: A8:9D:0F:D4:F4:8A:BF:69:4F:D9:DF:77:04:E5:96:46:4D:ED:21:79 Certificate issuer: /CN=A91E6CCA/serialNumber=A89D0FD4F48ABF694FD9DF7704E596464DED2179 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft Manifest number: 44 Signing time: Tue 05 Aug 2025 08:07:06 +0000 Manifest this update: Tue 05 Aug 2025 08:07:05 +0000 Manifest next update: Tue 12 Aug 2025 08:07:05 +0000 Files and hashes: 1: qJ0P1PSKv2lP2d93BOWWRk3tIXk.crl (hash: wL3XpaDIauJgnNd4k0GSJ5ekhAPSrBA2An5axub0PUI=) 2: A94836600F7111F08BC42022C4F9AE02.roa (hash: P0ugR8U/wyMnqraRD80X5tdZACXWqmlF+Xy2XfETkeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=A89D0FD4F48ABF694FD9DF7704E596464DED2179 Validity Not Before: Aug 5 08:07:05 2025 GMT Not After : Aug 12 08:07:05 2025 GMT Subject: CN=6891bba9-7760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:60:84:de:e4:e2:7a:e1:7a:82:a9:74:0e: 9f:d0:00:73:9a:7f:7f:dd:a6:b6:55:ce:37:ed:87: d0:2c:34:b5:7b:c4:ed:bd:cf:37:f5:3d:97:5d:9d: f2:4e:3d:8d:f9:11:0c:04:46:a2:a9:5b:e0:ea:d3: b2:c5:c7:1d:41:71:d5:27:38:7f:36:ae:8b:de:49: 9e:fa:c5:17:12:7a:ac:ae:28:9f:4e:64:9e:76:d9: ca:ee:9c:d9:0d:0a:18:5a:ec:34:60:f5:84:57:2b: 94:4f:bf:cd:91:b8:91:32:63:ae:0e:49:fa:c0:2b: ec:ac:e7:9a:eb:18:d4:26:57:79:51:19:6c:ae:1c: 1d:e1:32:8d:1b:ab:9e:84:eb:2f:29:15:e7:92:3b: f7:58:65:47:84:0f:cf:88:e7:85:e0:2c:ea:12:fc: 19:f8:fd:c4:06:29:2d:6a:9a:cf:8f:8f:fc:ee:9d: d2:f5:3e:09:2a:bc:4c:ae:10:35:1b:b3:04:c7:a8: 02:8e:a4:eb:00:9e:db:b2:40:fc:d0:75:16:df:70: 5c:75:50:d5:5f:83:26:25:88:4e:79:e6:4f:af:d0: d6:da:21:9a:53:43:39:8e:26:bb:40:df:b4:b4:0d: 59:93:2f:1b:00:ef:2d:95:8c:3d:b6:fc:ff:1a:cb: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F1:B8:B8:ED:2F:52:F7:3F:DE:18:2A:1F:68:71:59:8A:0D:62:B4 X509v3 Authority Key Identifier: keyid:A8:9D:0F:D4:F4:8A:BF:69:4F:D9:DF:77:04:E5:96:46:4D:ED:21:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8b:be:0a:dc:6e:f9:6f:54:60:dc:e1:3b:74:d1:98:40:56: 10:a8:80:81:ac:07:03:c1:3d:9a:8d:76:ca:bd:92:e1:f5:a8: 37:5f:67:07:23:c0:53:0d:f8:f3:d4:55:f9:e1:fe:b7:fa:23: 9a:a8:88:2f:7b:c1:86:c1:75:31:a6:e7:be:81:ae:d1:71:00: 45:7f:54:37:ce:77:7b:37:f4:a5:e9:cd:5b:1f:cf:c0:60:34: ff:94:2a:f4:98:65:38:15:ea:a1:a7:8b:16:5c:1b:e4:98:8e: 51:d5:21:62:f3:05:8c:bd:d7:e2:58:b7:2e:06:43:cb:a2:f1: 16:1a:c3:03:0c:01:31:84:6a:75:e2:2c:e2:0f:c2:27:87:ed: a2:19:58:e8:85:0d:57:d2:2f:d9:b3:6e:88:1f:07:f9:11:0b: c9:30:f5:13:51:09:58:92:cc:a8:a3:07:ac:01:af:ab:c6:51: a0:85:cb:85:35:0a:d8:68:b7:ec:4a:e2:56:48:b2:68:f4:3f: f1:46:0a:61:96:cd:5a:77:35:a5:2a:cd:e0:88:08:68:46:0b: 2d:98:cc:57:5e:b4:17:f3:9b:1d:70:5a:ac:ad:86:b5:be:5e: dd:2b:c1:e7:0c:f8:8c:d9:8f:82:5f:55:10:26:18:1c:ae:56: c6:90:16:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoQTg5RDBGRDRGNDhBQkY2OTRGRDlERjc3MDRFNTk2NDY0 REVEMjE3OTAeFw0yNTA4MDUwODA3MDVaFw0yNTA4MTIwODA3MDVaMBgxFjAUBgNV BAMTDTY4OTFiYmE5LTc3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVc2CE3uTieuF6gql0Dp/QAHOaf3/dprZVzjfth9AsNLV7xO29zzf1PZddnfJO PY35EQwERqKpW+Dq07LFxx1BcdUnOH82roveSZ76xRcSeqyuKJ9OZJ522crunNkN Chha7DRg9YRXK5RPv82RuJEyY64OSfrAK+ys55rrGNQmV3lRGWyuHB3hMo0bq56E 6y8pFeeSO/dYZUeED8+I54XgLOoS/Bn4/cQGKS1qms+Pj/zundL1PgkqvEyuEDUb swTHqAKOpOsAntuyQPzQdRbfcFx1UNVfgyYliE555k+v0NbaIZpTQzmOJrtA37S0 DVmTLxsA7y2VjD22/P8ay0VhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQPG4uO0v Uvc/3hgqH2hxWYoNYrQwHwYDVR0jBBgwFoAUqJ0P1PSKv2lP2d93BOWWRk3tIXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzFBN0FERUNBMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyL3FKMFAxUFNLdjJsUDJkOTNCT1dXUmszdElY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUowUDFQU0t2MmxQMmQ5M0JPV1dSazN0SVhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzFBN0FERUNBMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyL3FKMFAxUFNLdjJs UDJkOTNCT1dXUmszdElYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADaLvgrcbvlvVGDc4Tt00ZhAVhCogIGsBwPBPZqNdsq9kuH1qDdfZwcj wFMN+PPUVfnh/rf6I5qoiC97wYbBdTGm576BrtFxAEV/VDfOd3s39KXpzVsfz8Bg NP+UKvSYZTgV6qGnixZcG+SYjlHVIWLzBYy91+JYty4GQ8ui8RYawwMMATGEanXi LOIPwieH7aIZWOiFDVfSL9mzbogfB/kRC8kw9RNRCViSzKijB6wBr6vGUaCFy4U1 Cthot+xK4lZIsmj0P/FGCmGWzVp3NaUqzeCICGhGCy2YzFdetBfzmx1wWqythrW+ Xt0rwecM+IzZj4JfVRAmGByuVsaQFmg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:55 2025 by rpki-client