$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: mlpjUGWVUYyR4tMyE/MkqYxoGKuSkXMrdgTJKXfXcqs= Subject key identifier: 37:34:B1:17:4F:2C:88:82:95:E5:C1:1E:BD:F5:6B:4F:95:D2:8F:BF Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 3515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 34D6 Signing time: Mon 04 Aug 2025 14:25:27 +0000 Manifest this update: Mon 04 Aug 2025 14:25:27 +0000 Manifest next update: Mon 11 Aug 2025 14:25:27 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: cmKRd38PcKHwJpcrOC6FlEehsVzXk2UIOYVYVh45CnA=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13589 (0x3515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Aug 4 14:25:27 2025 GMT Not After : Aug 11 14:25:27 2025 GMT Subject: CN=6890c2d7-9a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:67:13:65:cc:df:2f:60:b6:c5:5f:02:99: fa:16:67:bc:4f:15:fa:b6:70:6c:5d:d9:54:21:ac: 70:60:6c:b6:87:5a:ba:d2:7b:41:a3:03:75:c5:1d: a5:fd:e9:12:ba:d3:03:45:1f:17:c2:3f:ee:2d:1b: f2:ef:d9:9b:40:f9:2f:86:ac:5a:81:d9:7d:91:45: 88:fb:6d:3e:12:64:c5:ce:37:a0:38:ca:9c:9d:fb: 48:ce:8c:2f:e8:40:65:ba:6d:1f:1c:e0:0d:ce:a1: 1a:69:d3:a6:7a:eb:77:40:ed:d4:de:e4:5c:08:bc: 5d:a7:83:e5:1c:f9:05:89:5d:d3:c0:67:63:c8:c1: 1a:3f:50:6f:a0:a0:fb:17:3a:15:5b:78:68:04:0b: d5:e2:5d:39:b4:b8:13:41:e4:9b:f6:43:f2:43:92: cb:9f:d2:03:0b:41:7d:8f:bb:0b:26:93:7f:6e:78: d1:93:50:82:58:62:15:f2:0b:1c:5b:31:8b:b1:40: 9b:98:60:d2:f8:71:ac:82:1f:4d:d0:86:e2:62:39: 30:1e:73:81:2b:46:44:42:53:36:37:bd:39:44:c3: 2c:bd:64:34:bc:bd:c4:ad:b3:bb:78:08:20:85:96: eb:30:ff:b3:f5:11:9d:2c:f9:81:23:c3:aa:80:af: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:B1:17:4F:2C:88:82:95:E5:C1:1E:BD:F5:6B:4F:95:D2:8F:BF X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9a:61:e1:76:cf:63:06:c8:f6:e8:48:67:8b:94:45:ce:05: 32:a2:ae:e6:86:ed:5f:58:3c:50:41:81:eb:a4:d5:45:46:6f: 63:fa:aa:8e:43:56:15:cb:40:9a:06:b5:07:59:23:8a:31:85: 22:31:31:e2:2d:5d:61:db:fa:a0:9c:0d:a9:5a:40:92:9e:86: bc:29:d8:ca:27:f8:0c:18:9c:a8:a6:05:de:78:45:1f:e7:21: f6:f5:a5:23:14:20:d2:1c:4c:86:e0:3b:7e:4e:ec:92:76:29: 5f:03:12:af:27:f0:84:ce:ac:b8:97:62:fc:a6:e0:a2:06:32: 83:9f:b1:97:fb:6d:00:fa:74:fd:ec:2b:7d:d4:18:a4:76:4c: 09:83:f7:7f:31:de:ab:97:95:bf:b5:52:d5:91:a3:86:2f:a0: d9:b5:97:19:da:7a:a8:4c:55:ed:b1:8b:1b:d5:22:77:b4:ac: 50:e5:16:50:11:58:6a:b6:95:2f:38:9c:e9:e3:53:9b:47:30: 91:14:38:f4:f2:90:82:b9:1c:1a:c3:fb:ad:db:94:a3:b6:f5: cc:1c:37:07:0d:4f:9a:c9:fd:bc:a8:ba:94:3d:74:dc:f6:a6: 2d:b2:fb:65:fa:48:f6:f5:e8:e9:b2:12:71:28:62:69:3e:67: 74:0e:01:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjUwODA0MTQyNTI3WhcNMjUwODExMTQyNTI3WjAYMRYwFAYD VQQDEw02ODkwYzJkNy05YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+RnE2XM3y9gtsVfApn6Fme8TxX6tnBsXdlUIaxwYGy2h1q60ntBowN1xR2l /ekSutMDRR8Xwj/uLRvy79mbQPkvhqxagdl9kUWI+20+EmTFzjegOMqcnftIzowv 6EBlum0fHOANzqEaadOmeut3QO3U3uRcCLxdp4PlHPkFiV3TwGdjyMEaP1BvoKD7 FzoVW3hoBAvV4l05tLgTQeSb9kPyQ5LLn9IDC0F9j7sLJpN/bnjRk1CCWGIV8gsc WzGLsUCbmGDS+HGsgh9N0IbiYjkwHnOBK0ZEQlM2N705RMMsvWQ0vL3ErbO7eAgg hZbrMP+z9RGdLPmBI8OqgK9ENQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc0sRdP LIiCleXBHr31a0+V0o+/MB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqmmHhds9jBsj26Ehni5RFzgUyoq7mhu1fWDxQQYHrpNVFRm9j+qqO Q1YVy0CaBrUHWSOKMYUiMTHiLV1h2/qgnA2pWkCSnoa8KdjKJ/gMGJyopgXeeEUf 5yH29aUjFCDSHEyG4Dt+TuySdilfAxKvJ/CEzqy4l2L8puCiBjKDn7GX+20A+nT9 7Ct91BikdkwJg/d/Md6rl5W/tVLVkaOGL6DZtZcZ2nqoTFXtsYsb1SJ3tKxQ5RZQ EVhqtpUvOJzp41ObRzCRFDj08pCCuRwaw/ut25SjtvXMHDcHDU+ayf28qLqUPXTc 9qYtsvtl+kj29ejpshJxKGJpPmd0DgHn -----END CERTIFICATE-----Generated at Wed Aug 6 11:08:49 2025 by rpki-client