$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: ahFlJvgOwGDbIAWV6EeBOP1Q0wvS2IYXcSBFFicB2PA= Subject key identifier: 4F:DA:2F:96:43:37:12:61:9E:63:84:5C:73:C6:53:A1:1F:C3:64:DB Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1380 Signing time: Sun 10 Aug 2025 19:19:55 +0000 Manifest this update: Sun 10 Aug 2025 19:19:55 +0000 Manifest next update: Sun 17 Aug 2025 19:19:55 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: qsoeTw792MA565q/u8NIaUMrlNDwvP1DhJfnqPRwH20=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Aug 10 19:19:55 2025 GMT Not After : Aug 17 19:19:55 2025 GMT Subject: CN=6898f0db-3623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7d:56:2d:3c:ab:ef:6d:b2:b6:23:1a:b8:84: 15:2a:9f:35:ee:90:b5:ea:5c:b1:93:97:ab:ae:ee: 1f:39:a8:c0:34:95:04:49:62:9c:00:72:38:3b:f2: 2a:05:56:fe:00:aa:7c:de:ee:0b:5a:de:23:7c:9d: 0a:4e:b0:3d:21:c6:14:e1:5c:2b:86:a3:64:a7:03: 2f:b6:2a:85:7e:15:f9:24:4b:c0:f5:dd:ef:cc:6d: 19:72:70:26:ec:1c:bc:83:d5:f6:72:ee:fb:eb:35: 70:93:df:ab:51:eb:ce:09:62:1d:49:ab:70:64:bf: 1b:88:d4:7a:fd:5b:d9:77:33:42:4b:a6:86:0d:22: a0:08:2c:fe:38:cd:37:f4:94:d7:6d:b3:41:1a:38: 18:77:6c:fb:ee:3a:25:b0:d9:8d:1c:a0:6a:52:40: 83:b4:5e:5f:f9:67:f7:f1:94:8d:03:4c:cb:0a:83: c3:c0:c7:14:6e:7f:68:05:98:4c:11:34:21:0c:72: 64:16:39:11:1d:80:d1:82:32:42:6c:4d:b9:d9:65: 44:32:2f:f7:25:44:6f:ac:7b:25:3d:cc:d6:91:89: ec:80:33:cc:44:b5:89:6c:bc:34:5a:8d:62:dd:f7: fc:31:36:32:02:7a:cf:0e:ed:64:19:e0:77:fb:d5: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:2F:96:43:37:12:61:9E:63:84:5C:73:C6:53:A1:1F:C3:64:DB X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f9:9e:89:89:62:b6:89:8f:dc:3b:19:44:b8:e9:a4:e7:b5: 19:65:35:c8:93:8f:36:dd:fc:59:f9:e5:54:f3:57:e6:9b:c7: aa:4c:f8:94:71:84:58:52:ec:4d:23:ff:2a:2e:27:3f:71:13: 36:c3:51:4b:da:bb:68:db:9e:ae:0f:35:10:88:1a:66:fe:b6: 2a:58:9f:8b:98:64:20:5b:93:51:3a:b6:f1:d7:cb:23:bb:8e: 13:e0:ba:56:a2:d3:88:a7:a5:ee:8d:71:c4:06:c0:73:4b:40: ff:17:1d:50:09:88:50:13:1a:d0:96:56:29:0d:01:60:3a:a2: e7:b6:76:20:f4:70:c0:5f:ec:8e:fe:02:ae:dc:98:16:00:ff: 76:a4:48:74:21:33:c4:1e:be:01:b9:35:8a:e9:33:cb:cc:b9: 5c:68:9c:cf:e0:60:2b:1b:5c:81:ce:14:6f:4c:35:b9:59:04: dc:9b:49:0a:0c:d5:4a:26:50:26:75:f2:3d:bd:a0:0a:18:ff: e9:d9:d3:6b:e1:2d:a3:e3:7f:2c:cd:30:6a:ce:19:dd:9e:d6: 16:3f:0d:c6:46:1d:de:34:1b:16:86:1e:c9:87:01:52:e6:15: dc:99:62:ee:f1:b2:96:7a:14:28:65:18:9a:17:6e:7c:01:59: 1d:aa:23:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTA4MTAxOTE5NTVaFw0yNTA4MTcxOTE5NTVaMBgxFjAUBgNV BAMTDTY4OThmMGRiLTM2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmfVYtPKvvbbK2Ixq4hBUqnzXukLXqXLGTl6uu7h85qMA0lQRJYpwAcjg78ioF Vv4Aqnze7gta3iN8nQpOsD0hxhThXCuGo2SnAy+2KoV+FfkkS8D13e/MbRlycCbs HLyD1fZy7vvrNXCT36tR684JYh1Jq3BkvxuI1Hr9W9l3M0JLpoYNIqAILP44zTf0 lNdts0EaOBh3bPvuOiWw2Y0coGpSQIO0Xl/5Z/fxlI0DTMsKg8PAxxRuf2gFmEwR NCEMcmQWOREdgNGCMkJsTbnZZUQyL/clRG+seyU9zNaRieyAM8xEtYlsvDRajWLd 9/wxNjICes8O7WQZ4Hf71d11AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT9ovlkM3 EmGeY4Rcc8ZToR/DZNswHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFT5nomJYraJj9w7GUS46aTntRllNciTjzbd/Fn55VTzV+abx6pM+JRx hFhS7E0j/youJz9xEzbDUUvau2jbnq4PNRCIGmb+tipYn4uYZCBbk1E6tvHXyyO7 jhPgulai04inpe6NccQGwHNLQP8XHVAJiFATGtCWVikNAWA6oue2diD0cMBf7I7+ Aq7cmBYA/3akSHQhM8QevgG5NYrpM8vMuVxonM/gYCsbXIHOFG9MNblZBNybSQoM 1UomUCZ18j29oAoY/+nZ02vhLaPjfyzNMGrOGd2e1hY/DcZGHd40GxaGHsmHAVLm FdyZYu7xspZ6FChlGJoXbnwBWR2qI4Y= -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:16 2025 by rpki-client