$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: JzzhsE0TA3LwIAYBWKIkWEf0BVqCVotSLnb2Yk7Lhwg= Subject key identifier: C6:83:C0:3E:A4:2E:65:5B:36:0D:1E:98:4E:C4:30:12:59:D1:F3:6F Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 01FB Signing time: Sun 03 Aug 2025 02:49:50 +0000 Manifest this update: Sun 03 Aug 2025 02:49:50 +0000 Manifest next update: Sun 10 Aug 2025 02:49:50 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: Hs65+MsFQrFZ9HFGKvtT9tvW0snwG6d5YQo3T4mD5yk=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Aug 3 02:49:50 2025 GMT Not After : Aug 10 02:49:50 2025 GMT Subject: CN=688ece4e-12a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:13:a0:ee:92:d4:a0:6b:84:05:f0:27:e1: 8a:9d:af:66:93:01:02:73:92:a1:02:62:d2:e5:f1: 48:26:1b:38:bd:f4:f8:6c:82:04:5d:62:e2:12:a7: 67:fe:e0:08:0a:35:54:84:ee:c7:ed:d6:ff:0d:ae: 86:8e:d8:57:25:b0:cf:52:66:22:25:c3:35:1a:45: 66:d2:ed:3c:9c:dd:de:d9:20:1d:72:a8:d2:92:c5: 49:7a:05:52:49:74:5a:6a:b1:3b:d4:4c:95:eb:62: 83:3b:36:46:65:96:21:fe:9f:6c:50:1e:05:0a:e2: 1f:fa:1b:79:62:cf:95:94:68:f7:08:b7:0b:90:94: 8e:3e:8b:ef:64:0a:5f:07:ba:ad:a4:f2:00:95:db: 95:76:19:2d:2a:c7:c9:94:20:22:6d:4f:14:5b:72: 87:88:d8:9a:41:ac:85:d6:38:d0:a6:3c:76:87:32: fc:b1:98:94:fe:2c:81:47:da:5c:f5:27:d3:25:da: e1:9e:e0:70:d9:ba:5c:f3:d2:e6:f4:43:62:d1:dd: a8:11:67:3f:28:83:ee:63:c5:49:56:2a:eb:63:f9: 59:21:05:1b:b5:b1:ed:b4:d5:bd:43:80:b7:89:a0: 6c:aa:b2:f6:be:d8:f6:99:c6:e3:aa:17:0d:6b:35: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:83:C0:3E:A4:2E:65:5B:36:0D:1E:98:4E:C4:30:12:59:D1:F3:6F X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:84:ad:3d:75:fa:83:d9:a4:ef:87:e0:cf:18:17:a8:fa:7c: 52:0c:57:2b:79:84:9e:98:80:9e:04:81:44:14:1c:e4:58:94: a4:fb:68:ea:47:5d:10:7c:f3:05:42:25:a6:5e:fe:73:35:52: 3d:f0:8f:7b:8b:89:bb:aa:85:30:c6:f5:be:77:9d:5b:e0:7a: 8c:f7:1b:68:94:85:a9:50:bf:16:14:a4:50:80:0e:74:3e:cf: 58:b5:01:3b:4c:a6:5b:76:48:20:b1:1e:16:27:a1:fe:76:37: a7:76:c8:70:81:e7:6f:e3:a6:e5:5e:cf:41:4b:03:26:12:76: c8:18:74:3e:18:e7:cd:76:c6:fe:09:9c:6f:f4:93:88:e8:5d: 4f:43:b3:57:31:fd:8f:66:9d:be:cf:c4:d0:e8:60:23:a1:7a: ef:a9:82:62:9a:a9:a6:20:81:45:1f:39:14:0a:c3:98:6a:2e: 30:9f:5e:b8:23:bf:86:70:0b:36:e6:ea:47:1c:52:19:d5:91: 36:a2:b3:41:cc:d9:c6:33:4b:e5:35:da:7c:88:90:19:d7:dc: ff:2f:b8:86:63:34:bb:40:ea:e4:c0:4a:35:62:04:1b:16:dd: ab:85:85:64:94:96:81:f3:4e:6d:90:f3:81:8b:17:73:3f:d8: 4d:10:cf:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUwODAzMDI0OTUwWhcNMjUwODEwMDI0OTUwWjAYMRYwFAYD VQQDEw02ODhlY2U0ZS0xMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0UToO6S1KBrhAXwJ+GKna9mkwECc5KhAmLS5fFIJhs4vfT4bIIEXWLiEqdn /uAICjVUhO7H7db/Da6GjthXJbDPUmYiJcM1GkVm0u08nN3e2SAdcqjSksVJegVS SXRaarE71EyV62KDOzZGZZYh/p9sUB4FCuIf+ht5Ys+VlGj3CLcLkJSOPovvZApf B7qtpPIAlduVdhktKsfJlCAibU8UW3KHiNiaQayF1jjQpjx2hzL8sZiU/iyBR9pc 9SfTJdrhnuBw2bpc89Lm9ENi0d2oEWc/KIPuY8VJVirrY/lZIQUbtbHttNW9Q4C3 iaBsqrL2vtj2mcbjqhcNazXVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaDwD6k LmVbNg0emE7EMBJZ0fNvMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5hK09dfqD2aTvh+DPGBeo+nxSDFcreYSemICeBIFEFBzkWJSk+2jq R10QfPMFQiWmXv5zNVI98I97i4m7qoUwxvW+d51b4HqM9xtolIWpUL8WFKRQgA50 Ps9YtQE7TKZbdkggsR4WJ6H+djendshwgedv46blXs9BSwMmEnbIGHQ+GOfNdsb+ CZxv9JOI6F1PQ7NXMf2PZp2+z8TQ6GAjoXrvqYJimqmmIIFFHzkUCsOYai4wn164 I7+GcAs25upHHFIZ1ZE2orNBzNnGM0vlNdp8iJAZ19z/L7iGYzS7QOrkwEo1YgQb Ft2rhYVklJaB805tkPOBixdzP9hNEM9w -----END CERTIFICATE-----Generated at Mon Aug 4 11:18:13 2025 by rpki-client