$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: hU4+VbgYLlcVYcmMtX6hSQq4lpwW7RCbQQyxhmShHpg= Subject key identifier: 99:15:F7:87:35:B0:65:24:81:C0:13:0C:32:B6:97:FC:17:5C:24:AF Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 89 Signing time: Sat 09 Aug 2025 07:02:45 +0000 Manifest this update: Sat 09 Aug 2025 07:02:44 +0000 Manifest next update: Sat 16 Aug 2025 07:02:44 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: 53hFSITid4O6UDtOh6PwX4O1SU/wnBX8JjT8o21JfdY=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Aug 9 07:02:44 2025 GMT Not After : Aug 16 07:02:44 2025 GMT Subject: CN=6896f295-58ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:f6:37:f8:9f:c3:e8:6f:0c:78:cd:0b:72: c5:17:d0:01:05:ba:d2:7d:2c:2d:58:5e:c3:aa:05: 3c:19:d9:9e:31:be:29:c1:83:0f:4e:a3:24:4d:a6: 2d:f0:6b:27:a3:ac:22:67:7e:16:52:19:34:08:e8: 76:00:3b:e0:ab:b2:f9:4d:bb:d7:6e:b7:5d:6d:8a: 1b:dc:e8:bd:c7:51:a0:3c:f3:53:36:99:fc:d6:9f: 57:96:16:af:92:f2:f8:df:bc:b0:7f:9b:a5:f9:8c: d4:a8:06:d3:a9:16:94:7b:49:a1:a0:91:9b:16:80: 55:bd:10:63:93:57:58:1e:07:44:cc:7b:a7:ef:82: 6f:39:da:76:83:25:89:29:77:77:26:0a:f8:7f:43: 97:7a:e4:13:7a:45:8c:62:32:aa:5f:37:88:e3:32: c2:01:df:2e:e1:f3:7a:19:ff:2b:8f:22:ee:37:86: 89:81:df:dd:40:5b:16:51:16:f5:78:49:14:7a:6c: 77:f5:c5:50:43:09:9e:7d:68:81:a5:63:23:33:f2: 3a:e9:96:49:07:09:db:8b:5b:99:93:42:fe:3e:8b: 58:34:b1:85:a7:31:6c:7e:53:87:70:fe:fa:fa:0d: 0d:40:90:8c:ca:cc:71:f7:92:b9:bc:c4:a0:35:84: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:15:F7:87:35:B0:65:24:81:C0:13:0C:32:B6:97:FC:17:5C:24:AF X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a4:3a:3b:67:ce:5a:b6:17:00:43:86:fc:93:a0:96:33:80: 5e:6f:01:80:6c:84:85:0e:03:cc:81:9a:82:af:bf:97:46:28: a7:29:91:54:80:a3:13:d4:60:d3:ae:17:d0:45:1d:98:9b:f9: 97:60:83:5a:6e:88:bd:44:10:78:00:ba:68:90:8a:fe:f0:b6: 95:65:55:b9:3f:e7:56:a5:2e:6d:62:3e:fc:a0:3c:dd:be:6b: da:94:77:97:d2:22:36:89:a4:6b:de:b7:0d:8d:45:10:1a:eb: d4:b8:5b:c7:ca:dc:d9:63:c4:f2:a8:2e:3b:43:70:b0:b0:3f: 5c:67:c4:21:70:38:41:c1:a6:0d:2e:3b:d4:9a:98:9b:9b:32: e1:08:05:b2:7a:e5:11:88:2d:d0:a4:55:e4:61:c1:37:9e:2a: 41:e5:b0:e2:b9:6d:34:b8:f0:2c:19:34:a8:51:e7:47:c5:a1: 4b:5d:67:1b:f7:5e:d2:87:55:47:82:ef:59:e0:ce:ad:4c:00: 6d:4e:cd:a2:d1:48:4a:57:64:e9:95:2a:f9:07:9e:10:13:43: 96:01:42:17:31:94:49:a9:8a:28:77:ad:6c:d0:52:fa:11:c1: 7c:2e:f5:54:ef:98:cd:3b:dc:be:c2:00:fd:49:99:92:f1:f7: 76:65:d1:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKEE4MjkyRjYyMDRDODIxM0Q3OTFGQTZDQ0FBRjU3ODUx OTRFRjgxQTAwHhcNMjUwODA5MDcwMjQ0WhcNMjUwODE2MDcwMjQ0WjAYMRYwFAYD VQQDEw02ODk2ZjI5NS01OGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nD2N/ifw+hvDHjNC3LFF9ABBbrSfSwtWF7DqgU8GdmeMb4pwYMPTqMkTaYt 8Gsno6wiZ34WUhk0COh2ADvgq7L5TbvXbrddbYob3Oi9x1GgPPNTNpn81p9Xlhav kvL437ywf5ul+YzUqAbTqRaUe0mhoJGbFoBVvRBjk1dYHgdEzHun74JvOdp2gyWJ KXd3Jgr4f0OXeuQTekWMYjKqXzeI4zLCAd8u4fN6Gf8rjyLuN4aJgd/dQFsWURb1 eEkUemx39cVQQwmefWiBpWMjM/I66ZZJBwnbi1uZk0L+PotYNLGFpzFsflOHcP76 +g0NQJCMysxx95K5vMSgNYS6owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkV94c1 sGUkgcATDDK2l/wXXCSvMB8GA1UdIwQYMBaAFKgpL2IEyCE9eR+mzKr1eFGU74Gg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xMTY0Q0FFMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlUMTVINmJNcXZWNFVaVHZn YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlU MTVINmJNcXZWNFVaVHZnYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATpDo7Z85athcAQ4b8k6CWM4BebwGAbISFDgPMgZqCr7+XRiinKZFU gKMT1GDTrhfQRR2Ym/mXYINaboi9RBB4ALpokIr+8LaVZVW5P+dWpS5tYj78oDzd vmvalHeX0iI2iaRr3rcNjUUQGuvUuFvHytzZY8TyqC47Q3CwsD9cZ8QhcDhBwaYN LjvUmpibmzLhCAWyeuURiC3QpFXkYcE3nipB5bDiuW00uPAsGTSoUedHxaFLXWcb 917Sh1VHgu9Z4M6tTABtTs2i0UhKV2TplSr5B54QE0OWAUIXMZRJqYood61s0FL6 EcF8LvVU75jNO9y+wgD9SZmS8fd2ZdE8 -----END CERTIFICATE-----Generated at Sun Aug 10 21:00:50 2025 by rpki-client