$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: kxCQgD8Z0hhnDJjpq7VjpGSN1xp3tgqn15lOfugbo1E= Subject key identifier: DA:AF:C8:38:F6:9B:BB:22:B3:15:A3:E4:AE:9E:35:1D:AD:B6:5F:CE Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0328 Signing time: Tue 05 Aug 2025 01:47:13 +0000 Manifest this update: Tue 05 Aug 2025 01:47:12 +0000 Manifest next update: Tue 12 Aug 2025 01:47:12 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: Sl2sYPJ/+IPtpOl0MaSYBMau7B2G82K2Pjwoefv8ziU=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: CTJ+dnaaAcT/k3VfAVX0B8BkiSPr7rVzlHNkELgf6Zk=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: DPh2JuIpWeswDhsc+dcbZ8/Yz61UyYfkk6HBp13h6rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Aug 5 01:47:12 2025 GMT Not After : Aug 12 01:47:12 2025 GMT Subject: CN=689162a1-57bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:21:9c:bd:f6:55:cb:45:47:1c:42:7b:96: ed:fb:af:93:c9:12:1b:52:7a:85:fd:f4:de:1e:b5: 23:33:66:e0:43:de:51:69:50:22:21:26:da:0e:a5: f0:16:6f:a9:f2:c5:9a:6d:a9:1d:07:28:f2:ef:bc: 9a:b6:f8:a6:68:66:84:30:42:ce:d5:50:92:f6:5f: c5:fe:00:53:2b:06:69:17:f3:9d:28:64:23:31:32: d9:b6:0d:b9:a5:ce:81:5b:e7:51:8e:25:5f:bc:8b: 3e:0d:fb:71:af:be:cd:95:36:97:33:fc:71:d8:b0: 6a:41:05:f4:2b:80:69:2b:a8:c0:c6:b9:96:77:ff: 54:c1:1a:79:02:be:4c:5c:22:ea:d4:fb:0d:0b:01: 08:ad:d3:ee:40:e7:6f:8a:0d:1b:85:fb:8b:d8:84: 53:70:63:3d:cd:6f:34:81:4a:d7:71:11:cb:c5:81: b6:e0:44:19:b5:67:a5:47:c2:40:3b:ac:29:4a:e1: 78:84:c9:f7:e6:d8:f0:0c:60:56:41:7c:95:f4:c7: 73:b4:60:3c:fe:e8:85:d9:47:97:01:a3:86:d2:61: 8b:aa:b0:f8:4f:55:0a:a6:1c:3d:a0:f5:6d:74:10: 6c:fa:8e:b0:33:6b:b8:20:96:34:d7:3f:8f:b6:81: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AF:C8:38:F6:9B:BB:22:B3:15:A3:E4:AE:9E:35:1D:AD:B6:5F:CE X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:27:bd:f8:50:fe:28:83:23:40:90:7c:4b:82:e7:3c:94:95: b7:66:33:8d:57:c2:44:cd:ea:59:f8:1c:bb:ec:64:d3:6d:25: 40:c7:5e:da:bb:0a:26:d6:2f:f0:3b:43:b8:28:ac:c9:cc:ed: 72:be:41:05:c4:5e:bb:ca:f1:a8:28:ee:45:65:a2:b9:8f:ec: 65:5f:a3:97:53:9a:93:91:16:84:02:36:8b:3b:a0:4c:4f:8b: 7c:e4:b4:92:44:f7:bc:71:7f:4b:fd:ab:d8:0c:0e:47:73:0d: ae:e5:b8:02:ad:d1:6f:29:ca:31:b8:0d:83:e2:22:3c:dd:ed: 42:3f:fe:24:ed:ca:67:63:43:16:71:bf:1e:85:c1:c8:29:c5: ef:70:31:2f:26:27:5c:f1:1f:b6:66:1d:e6:89:a3:38:04:ca: 54:29:d2:dc:8b:fe:9d:9c:fc:0c:b6:8a:b5:ae:bf:a1:6e:21: ce:83:fb:08:de:e1:d2:ec:ad:14:80:86:e0:05:5d:bf:e4:31: 29:88:00:01:f8:2d:7f:0a:46:28:a5:34:41:ca:d2:18:87:98: cd:ad:97:1c:c4:bf:c6:6b:28:0e:8a:c6:36:53:c2:0e:87:79: 74:cb:fc:7e:8b:65:11:7d:62:db:24:1a:43:77:41:94:d7:55: 21:2d:ab:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUwODA1MDE0NzEyWhcNMjUwODEyMDE0NzEyWjAYMRYwFAYD VQQDEw02ODkxNjJhMS01N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlchnL32VctFRxxCe5bt+6+TyRIbUnqF/fTeHrUjM2bgQ95RaVAiISbaDqXw Fm+p8sWabakdByjy77yatvimaGaEMELO1VCS9l/F/gBTKwZpF/OdKGQjMTLZtg25 pc6BW+dRjiVfvIs+Dftxr77NlTaXM/xx2LBqQQX0K4BpK6jAxrmWd/9UwRp5Ar5M XCLq1PsNCwEIrdPuQOdvig0bhfuL2IRTcGM9zW80gUrXcRHLxYG24EQZtWelR8JA O6wpSuF4hMn35tjwDGBWQXyV9MdztGA8/uiF2UeXAaOG0mGLqrD4T1UKphw9oPVt dBBs+o6wM2u4IJY01z+PtoH/BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqvyDj2 m7sisxWj5K6eNR2ttl/OMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAJ734UP4ogyNAkHxLguc8lJW3ZjONV8JEzepZ+By77GTTbSVAx17a uwom1i/wO0O4KKzJzO1yvkEFxF67yvGoKO5FZaK5j+xlX6OXU5qTkRaEAjaLO6BM T4t85LSSRPe8cX9L/avYDA5Hcw2u5bgCrdFvKcoxuA2D4iI83e1CP/4k7cpnY0MW cb8ehcHIKcXvcDEvJidc8R+2Zh3miaM4BMpUKdLci/6dnPwMtoq1rr+hbiHOg/sI 3uHS7K0UgIbgBV2/5DEpiAAB+C1/CkYopTRBytIYh5jNrZccxL/GaygOisY2U8IO h3l0y/x+i2URfWLbJBpDd0GU11UhLav2 -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:58 2025 by rpki-client