$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: nNc266yIMHeyUYr95dT7hZmRlzqA4jahM9xmAOvmkRI= Subject key identifier: BF:A5:4D:45:B4:29:66:7C:1B:36:AA:6D:D5:C5:42:47:8A:0C:9F:9B Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 0110 Signing time: Tue 05 Aug 2025 05:25:59 +0000 Manifest this update: Tue 05 Aug 2025 05:25:58 +0000 Manifest next update: Tue 12 Aug 2025 05:25:58 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: D1MpZrI4mMTWRFBDSw92IlbKpv5xDcKOBYkXlmzlNww=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: Jluh9mrxLx3CmJG4INslPH8RKZMT0C9KwG0Dzzekk1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: Aug 5 05:25:58 2025 GMT Not After : Aug 12 05:25:58 2025 GMT Subject: CN=689195e6-d8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:d2:70:35:4c:4f:dc:ed:34:48:61:37:34: 96:f2:01:41:4d:39:16:96:30:0e:7f:31:23:24:3b: 3d:9d:ce:c1:96:68:36:b8:09:6f:95:21:77:94:73: bd:d9:f9:91:bd:9c:b5:6d:9b:f6:3a:27:b2:32:fb: 15:3c:c4:64:83:f7:fd:26:d2:5c:0c:3a:ff:4a:fa: 3d:8a:d4:ba:fc:e0:c0:15:db:4b:73:72:cf:e1:c1: c5:d1:18:d1:c8:cb:f7:2d:c4:28:98:5e:e1:1e:05: d7:a0:9b:fa:a1:f1:62:79:e2:46:4a:50:9e:e2:c5: d6:e0:52:31:ea:ef:9b:f4:ee:f5:66:6b:80:df:b0: f3:4a:38:8a:a1:5c:12:a8:33:91:5d:07:b4:25:c5: 96:cb:7c:c4:16:95:b3:32:52:af:a0:29:46:54:38: 3f:2a:50:90:d7:58:d2:70:0d:e6:b3:c8:af:9b:14: 71:f1:f3:62:07:8d:15:4a:7a:1c:4d:76:ab:f3:da: 10:5c:bb:ab:82:5b:4e:eb:91:db:6f:54:96:87:cd: 5f:7f:b8:da:74:eb:38:aa:d8:a6:1e:e6:56:64:b0: bb:c5:41:ab:c3:66:0e:b1:63:bb:5f:b5:9e:7d:66: e5:1c:84:a0:ab:45:62:44:ed:b1:53:2a:6a:fb:54: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A5:4D:45:B4:29:66:7C:1B:36:AA:6D:D5:C5:42:47:8A:0C:9F:9B X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f6:18:95:81:72:e2:5a:cd:88:02:37:fa:3e:08:8c:86:91: 35:8f:0c:05:b1:f8:92:1c:08:b4:c8:7a:79:90:83:4f:22:86: d6:c3:a8:f9:c3:9e:78:0b:bf:57:80:43:dd:e0:03:af:ed:64: 73:15:9a:c0:a2:de:61:c0:c5:94:08:8f:29:cd:56:52:14:fe: fe:56:a1:f3:e9:cb:dd:9b:ba:4f:98:7e:3e:48:ce:e3:39:bd: b1:ac:9e:ca:37:13:9a:d6:f5:48:34:2c:a8:57:e0:e8:5f:d0: 4c:9f:13:73:80:37:30:f6:1c:23:f0:a7:36:a4:52:23:3c:a9: 2d:b8:fd:d8:fb:eb:3f:e1:3d:81:27:00:bd:f0:d9:e3:7f:f9: cb:9a:6b:96:7f:7c:54:38:40:61:0b:1b:be:12:df:c7:fb:8a: 4b:54:99:54:95:3f:ae:8c:7d:ed:f4:1d:f5:3b:27:25:f7:23: df:83:87:59:cb:66:5c:69:a5:49:e5:07:3e:a7:07:40:1e:62: f2:25:66:06:6f:6a:50:8a:53:a1:0b:7f:ae:ec:fa:80:55:89: c7:1f:fb:c6:5c:05:14:ca:4e:fd:7e:b7:4e:c6:ec:2a:7c:e2: 08:4d:00:cf:4e:9d:00:f7:2e:e3:09:5d:c5:ed:62:7b:6b:5b: 4f:33:27:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE ODJDNDhDRTIwHhcNMjUwODA1MDUyNTU4WhcNMjUwODEyMDUyNTU4WjAYMRYwFAYD VQQDEw02ODkxOTVlNi1kOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAjScDVMT9ztNEhhNzSW8gFBTTkWljAOfzEjJDs9nc7Blmg2uAlvlSF3lHO9 2fmRvZy1bZv2OieyMvsVPMRkg/f9JtJcDDr/Svo9itS6/ODAFdtLc3LP4cHF0RjR yMv3LcQomF7hHgXXoJv6ofFieeJGSlCe4sXW4FIx6u+b9O71ZmuA37DzSjiKoVwS qDORXQe0JcWWy3zEFpWzMlKvoClGVDg/KlCQ11jScA3ms8ivmxRx8fNiB40VSnoc TXar89oQXLurgltO65Hbb1SWh81ff7jadOs4qtimHuZWZLC7xUGrw2YOsWO7X7We fWblHISgq0ViRO2xUypq+1RRBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+lTUW0 KWZ8GzaqbdXFQkeKDJ+bMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1 RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15 bkU4RVhETmtjT25ZTEVqT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi9hiVgXLiWs2IAjf6PgiMhpE1jwwFsfiSHAi0yHp5kINPIobWw6j5 w554C79XgEPd4AOv7WRzFZrAot5hwMWUCI8pzVZSFP7+VqHz6cvdm7pPmH4+SM7j Ob2xrJ7KNxOa1vVINCyoV+DoX9BMnxNzgDcw9hwj8Kc2pFIjPKktuP3Y++s/4T2B JwC98Nnjf/nLmmuWf3xUOEBhCxu+Et/H+4pLVJlUlT+ujH3t9B31Oycl9yPfg4dZ y2ZcaaVJ5Qc+pwdAHmLyJWYGb2pQilOhC3+u7PqAVYnHH/vGXAUUyk79frdOxuwq fOIITQDPTp0A9y7jCV3F7WJ7a1tPMyfF -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:29 2025 by rpki-client