$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: OPDlMo/6dCcKdX2QAgFyqgsd9EzucQaNbwiVc7bcXvg= Subject key identifier: 70:C6:5C:62:D0:72:4B:82:3C:26:C0:9D:6D:EF:47:46:45:58:4E:19 Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0DF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0DEA Signing time: Wed 06 Aug 2025 18:02:52 +0000 Manifest this update: Wed 06 Aug 2025 18:02:51 +0000 Manifest next update: Wed 13 Aug 2025 18:02:51 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: ddkod1Z3FvnscHuOnr3UjlMMpqEnIdr5LMBtUMNvylg=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: Jg5gZD0YmKb91aw5MXsxMT3mckkXVt61eCbJBF82oak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3572 (0xdf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: Aug 6 18:02:51 2025 GMT Not After : Aug 13 18:02:51 2025 GMT Subject: CN=689398cc-4130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:b6:24:b6:5e:7f:10:9e:4e:46:ba:fa:95: d3:85:d6:0f:e0:98:78:fd:47:82:3e:37:0a:10:ca: 55:a0:4d:58:b8:86:fd:80:65:81:f8:cf:30:db:3b: 7e:d4:7f:e6:ce:6f:59:fa:3e:5c:3d:fe:a8:ec:ac: 13:de:02:b4:1f:26:dd:80:f1:0f:84:14:5f:5a:aa: 33:59:97:36:38:d7:6d:72:32:99:c1:74:5d:9d:4e: 42:03:19:02:d6:ff:67:0e:0d:4c:5c:a0:76:36:fd: 0b:03:82:bd:a7:bb:ea:ae:3c:3b:e0:25:ce:3c:b8: 54:e1:ee:6a:5a:0c:02:9c:69:a8:d2:f1:37:d7:8e: 52:0b:1b:3f:25:5d:05:1c:62:f0:8e:02:0f:af:44: a2:b9:b5:82:09:1f:08:5f:02:e3:c1:af:e7:5a:43: 26:35:f7:f9:96:7c:6b:e9:f8:70:b9:44:1a:51:d6: f1:5b:b0:70:51:67:55:e4:3a:42:3a:01:05:09:c5: 83:9e:64:68:47:a5:ff:08:79:34:3a:2d:5a:97:3f: c7:4f:10:60:e5:23:54:05:15:65:6b:48:45:15:2d: 91:e9:a5:a4:0c:d3:cf:c7:81:82:ff:91:bc:9f:70: 5c:77:5e:ab:2f:41:a5:8d:3d:1e:c3:84:86:d4:15: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:5C:62:D0:72:4B:82:3C:26:C0:9D:6D:EF:47:46:45:58:4E:19 X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:61:35:0a:3e:11:89:6f:3f:41:28:ce:44:64:ee:73:e3:21: f3:8c:54:44:f0:c2:b9:f4:af:9f:17:81:51:2b:49:26:a4:5b: 32:82:58:8f:03:8a:bf:14:1c:cc:ca:34:89:3d:80:af:a0:25: 31:54:c3:8f:f4:0a:2a:2b:a5:6a:4e:e0:f4:22:f1:a2:b7:2c: 7c:c3:60:1c:d1:97:ed:a7:86:c0:57:14:b4:c0:25:86:2e:41: 5e:f9:4c:fb:15:be:85:94:30:35:70:21:f9:cd:6f:3b:de:af: 05:b9:3c:36:b6:a6:c4:67:94:44:57:ed:af:d8:5f:62:70:d7: d2:07:76:68:63:a8:bd:35:9a:95:07:18:a5:d9:ab:9f:fd:5c: e3:07:dd:39:b5:13:71:5f:a5:27:86:09:1d:8f:39:6f:37:02: 3d:10:3a:0c:f2:e8:93:6f:0d:cc:54:b0:c4:69:8a:8e:98:a2: 56:b8:09:05:25:dd:88:b7:4f:67:35:0f:12:18:7b:31:06:ec: 85:80:96:db:59:74:e6:a5:60:81:3a:19:69:62:b5:96:77:4b: 67:3c:fb:84:ea:eb:55:3f:1d:c4:36:04:a0:a1:ec:ae:f6:1d: b1:db:25:61:0e:b0:6f:8f:e2:8d:72:06:48:36:fb:6b:0e:a0: 50:31:03:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjUwODA2MTgwMjUxWhcNMjUwODEzMTgwMjUxWjAYMRYwFAYD VQQDEw02ODkzOThjYy00MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRi2JLZefxCeTka6+pXThdYP4Jh4/UeCPjcKEMpVoE1YuIb9gGWB+M8w2zt+ 1H/mzm9Z+j5cPf6o7KwT3gK0HybdgPEPhBRfWqozWZc2ONdtcjKZwXRdnU5CAxkC 1v9nDg1MXKB2Nv0LA4K9p7vqrjw74CXOPLhU4e5qWgwCnGmo0vE3145SCxs/JV0F HGLwjgIPr0SiubWCCR8IXwLjwa/nWkMmNff5lnxr6fhwuUQaUdbxW7BwUWdV5DpC OgEFCcWDnmRoR6X/CHk0Oi1alz/HTxBg5SNUBRVla0hFFS2R6aWkDNPPx4GC/5G8 n3Bcd16rL0GljT0ew4SG1BU05wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDGXGLQ ckuCPCbAnW3vR0ZFWE4ZMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiYTUKPhGJbz9BKM5EZO5z4yHzjFRE8MK59K+fF4FRK0kmpFsygliP A4q/FBzMyjSJPYCvoCUxVMOP9AoqK6VqTuD0IvGityx8w2Ac0Zftp4bAVxS0wCWG LkFe+Uz7Fb6FlDA1cCH5zW873q8FuTw2tqbEZ5REV+2v2F9icNfSB3ZoY6i9NZqV Bxil2auf/VzjB905tRNxX6UnhgkdjzlvNwI9EDoM8uiTbw3MVLDEaYqOmKJWuAkF Jd2It09nNQ8SGHsxBuyFgJbbWXTmpWCBOhlpYrWWd0tnPPuE6utVPx3ENgSgoeyu 9h2x2yVhDrBvj+KNcgZINvtrDqBQMQP5 -----END CERTIFICATE-----Generated at Fri Aug 8 13:08:13 2025 by rpki-client