$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: rGNpU8Yew7yyG5mhrPboMxIRR9ELVv1czOUwCU24loM= Subject key identifier: 7B:0A:5E:4B:49:F4:FA:66:71:98:F4:97:45:3E:EC:0C:9E:4D:7F:81 Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 01C7 Signing time: Tue 12 Aug 2025 15:59:34 +0000 Manifest this update: Tue 12 Aug 2025 15:59:33 +0000 Manifest next update: Tue 19 Aug 2025 15:59:33 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: UpA/C3m4Axvbac0fwQmd1TSeZLuYgKTXJUqNHKhCSbE=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: Aug 12 15:59:33 2025 GMT Not After : Aug 19 15:59:33 2025 GMT Subject: CN=689b64e6-8f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:fa:2d:f5:a0:fc:74:7d:0e:ec:b5:1b:94: 63:fe:09:32:ea:f8:ef:3b:cc:c1:c5:ad:d7:78:3a: 78:d9:3a:c5:1f:e8:33:96:22:a9:8f:da:be:99:7c: 5d:de:f6:43:08:89:67:3f:2f:23:27:36:f1:15:d1: 58:8b:4e:4e:62:58:d0:2f:bb:a8:e8:99:63:a6:80: b8:06:ab:e4:b0:b5:35:44:e7:e5:45:66:26:1e:71: fe:60:43:12:a0:ec:3c:f1:a6:48:ab:71:46:63:40: aa:50:5f:e9:d5:11:da:60:7a:35:c8:f4:fe:14:e9: 79:a8:fb:0c:46:d3:b2:0e:c6:50:b8:4b:a8:d4:20: 09:14:b9:5b:55:20:b8:3b:3e:08:18:ba:8c:d0:b4: 3b:5a:be:a9:ee:8a:bc:71:6f:ef:42:0a:aa:c4:25: b0:74:be:0d:3b:6a:d8:f2:45:66:ee:2a:17:a0:84: ba:f6:d7:1b:15:79:84:fa:69:52:d1:ce:63:cc:b6: e6:8c:a0:6e:43:7d:78:e7:96:5d:be:c4:7b:4c:7b: 7b:1f:39:5d:ab:b8:c8:29:6b:5f:6d:2a:52:e1:12: 94:2d:54:a6:e2:c8:5a:42:0d:b1:df:b5:f4:7e:cc: a8:93:37:b9:1f:24:08:06:b7:30:8c:f8:6e:b5:32: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0A:5E:4B:49:F4:FA:66:71:98:F4:97:45:3E:EC:0C:9E:4D:7F:81 X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:9b:bc:75:5c:8c:8a:7c:76:ca:66:ab:3f:93:bd:5f:16:1d: f6:93:6b:38:48:fd:c4:43:c4:85:17:76:49:13:bd:91:d1:b6: 09:89:8c:d9:d1:52:97:02:a5:e2:be:8f:92:cc:cb:b0:cf:3b: b4:25:11:4d:5d:be:c8:52:9a:57:bb:d0:d8:78:9c:83:55:b8: 0d:1f:c0:18:c8:0f:74:e8:f6:b2:92:c1:82:79:80:d0:89:b8: 03:d5:23:9d:08:a4:d9:3a:67:86:f8:8a:17:e1:11:47:38:38: a3:63:15:60:33:3a:df:e7:07:99:f0:49:fa:59:53:93:86:c4: dd:e4:c2:ea:d2:e9:43:75:7b:3c:d7:81:15:24:ea:7f:c5:7e: 0e:96:9f:b5:c4:6e:b2:bd:01:ae:af:77:9d:36:28:32:bf:23: ed:2b:24:c6:8a:5d:5f:40:86:3e:9c:56:51:26:63:d7:cf:e7: 49:02:cd:42:20:8d:a4:1f:eb:ee:5c:5d:a5:c1:ff:a5:fa:b2: 06:f7:68:22:b6:fb:76:d3:bb:6b:ee:f5:d7:20:4f:e2:75:16: 57:a8:a5:4e:f2:38:cf:3b:eb:22:7f:22:b3:43:da:64:7f:7e: 8e:5a:61:16:2c:93:77:5c:7b:ae:95:d5:46:95:15:ac:cd:4a: 94:55:83:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjUwODEyMTU1OTMzWhcNMjUwODE5MTU1OTMzWjAYMRYwFAYD VQQDEw02ODliNjRlNi04Zjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CL6LfWg/HR9Duy1G5Rj/gky6vjvO8zBxa3XeDp42TrFH+gzliKpj9q+mXxd 3vZDCIlnPy8jJzbxFdFYi05OYljQL7uo6JljpoC4BqvksLU1ROflRWYmHnH+YEMS oOw88aZIq3FGY0CqUF/p1RHaYHo1yPT+FOl5qPsMRtOyDsZQuEuo1CAJFLlbVSC4 Oz4IGLqM0LQ7Wr6p7oq8cW/vQgqqxCWwdL4NO2rY8kVm7ioXoIS69tcbFXmE+mlS 0c5jzLbmjKBuQ31455ZdvsR7THt7Hzldq7jIKWtfbSpS4RKULVSm4shaQg2x37X0 fsyokze5HyQIBrcwjPhutTLQmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsKXktJ 9PpmcZj0l0U+7AyeTX+BMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDm7x1XIyKfHbKZqs/k71fFh32k2s4SP3EQ8SFF3ZJE72R0bYJiYzZ 0VKXAqXivo+SzMuwzzu0JRFNXb7IUppXu9DYeJyDVbgNH8AYyA906PayksGCeYDQ ibgD1SOdCKTZOmeG+IoX4RFHODijYxVgMzrf5weZ8En6WVOThsTd5MLq0ulDdXs8 14EVJOp/xX4Olp+1xG6yvQGur3edNigyvyPtKyTGil1fQIY+nFZRJmPXz+dJAs1C II2kH+vuXF2lwf+l+rIG92gitvt207tr7vXXIE/idRZXqKVO8jjPO+sifyKzQ9pk f36OWmEWLJN3XHuuldVGlRWszUqUVYNv -----END CERTIFICATE-----Generated at Wed Aug 13 05:28:40 2025 by rpki-client