$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: c3aBq3/gEApMTMD8Lm81ZYZXqSak69IIyaKFYKFikL0= Subject key identifier: B4:EA:51:81:3B:DA:D4:3A:28:A9:67:CA:21:33:EC:B9:F9:9A:92:5A Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 098B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 0966 Signing time: Fri 22 Aug 2025 20:22:05 +0000 Manifest this update: Fri 22 Aug 2025 20:22:04 +0000 Manifest next update: Fri 29 Aug 2025 20:22:03 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: TeiCY9sBKXoh4cxzvrC5jN8jdhhZRwJ7McWqGoUQEV8=) 2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: y+1LcMZWVq0sxCzTaWENpdmxk9z32hroZYUL1UHWPKM=) 3: 31AFACDC349211F0BA15B357C4F9AE02.roa (hash: PUqEA442AAa7n+fxZ3wZ6UWoFba4yC5gZ7zTzgopBgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Aug 22 20:22:04 2025 GMT Not After : Aug 29 20:22:03 2025 GMT Subject: CN=68a8d16c-5481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:45:22:88:c2:95:62:ff:05:09:c3:aa:48: b3:99:77:92:ba:30:63:5c:22:72:f7:3b:89:36:ba: 4f:05:08:f1:92:9a:f6:98:27:b6:8b:a0:22:bf:77: b6:a6:b7:42:e8:64:1d:0a:5f:d6:74:50:e8:b2:69: 30:75:52:b3:b1:bb:ec:6a:7e:e4:6d:f9:11:01:33: b5:13:e3:41:af:85:f3:66:b0:7a:e4:52:05:62:3b: 0e:a8:2d:7a:eb:17:6d:dd:98:d6:2b:a9:4c:88:4c: ba:e4:cd:93:f9:d0:1d:5e:b2:58:e1:0f:97:eb:2f: 04:1e:a4:ab:93:36:4a:34:ab:79:bc:47:b4:97:aa: 1c:d1:25:05:b5:64:f0:6a:a0:60:04:f3:d7:fe:bb: 04:8f:e0:9e:39:c1:6a:22:3a:9c:fa:03:69:2b:79: cc:e1:dd:5f:d0:6b:df:fb:14:ea:dc:ee:ad:eb:61: f6:11:7f:e9:cc:51:6f:05:f2:b6:84:96:78:6d:2a: 45:1a:38:16:35:7c:cf:d6:7d:b3:78:ae:61:f3:9c: ef:53:b2:59:ca:86:5a:e1:fe:9b:09:5e:8e:d3:99: 5f:60:a9:2b:92:64:13:05:eb:98:4d:90:30:fa:f3: cb:5c:66:41:c6:48:86:b2:4a:b5:03:65:5d:b7:1d: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EA:51:81:3B:DA:D4:3A:28:A9:67:CA:21:33:EC:B9:F9:9A:92:5A X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:77:93:10:fa:86:bc:29:36:f9:2e:df:a5:f4:ef:04:1b:54: 8d:8b:62:49:c3:13:6b:45:ca:fa:f5:bb:ac:10:b9:f3:0e:af: d6:aa:44:18:ef:c6:55:58:a2:e2:34:44:6d:7f:ee:23:f6:e2: 1c:df:16:20:99:54:a5:21:0f:3a:06:1e:e3:20:33:3e:99:05: 09:db:60:28:fa:e2:bd:73:4b:51:b4:c3:30:26:99:9e:c4:55: 52:2f:f7:b9:06:98:d0:a8:61:9f:cd:41:8e:2b:84:92:42:c2: c3:27:2b:05:b3:96:3d:7a:35:00:4e:e9:be:8c:38:35:41:8b: 0a:10:42:1f:fe:dc:d3:6a:b0:cd:3f:68:00:e8:5d:db:29:92: 69:20:81:ee:76:44:63:0c:eb:0f:d2:4d:34:1d:65:db:66:d6: 3d:03:b2:6b:f6:d3:5f:36:d0:2c:66:71:64:a9:20:26:97:63: 3a:bf:f7:9c:1c:67:d3:89:01:ce:5d:95:5b:ac:1e:ab:50:43: df:1d:6d:52:e0:26:55:03:7c:d1:b7:48:b4:37:45:1f:76:6e: 22:9b:f8:b6:49:03:16:26:ad:15:2f:b7:b9:94:82:68:9d:2e: 4b:e3:57:e5:ef:05:51:e5:1d:bc:8a:00:96:7a:f2:ec:01:4f: c7:ff:04:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUwODIyMjAyMjA0WhcNMjUwODI5MjAyMjAzWjAYMRYwFAYD VQQDEw02OGE4ZDE2Yy01NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sBFIojClWL/BQnDqkizmXeSujBjXCJy9zuJNrpPBQjxkpr2mCe2i6Aiv3e2 prdC6GQdCl/WdFDosmkwdVKzsbvsan7kbfkRATO1E+NBr4XzZrB65FIFYjsOqC16 6xdt3ZjWK6lMiEy65M2T+dAdXrJY4Q+X6y8EHqSrkzZKNKt5vEe0l6oc0SUFtWTw aqBgBPPX/rsEj+CeOcFqIjqc+gNpK3nM4d1f0Gvf+xTq3O6t62H2EX/pzFFvBfK2 hJZ4bSpFGjgWNXzP1n2zeK5h85zvU7JZyoZa4f6bCV6O05lfYKkrkmQTBeuYTZAw +vPLXGZBxkiGskq1A2Vdtx1J1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTqUYE7 2tQ6KKlnyiEz7Ln5mpJaMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRd5MQ+oa8KTb5Lt+l9O8EG1SNi2JJwxNrRcr69busELnzDq/WqkQY 78ZVWKLiNERtf+4j9uIc3xYgmVSlIQ86Bh7jIDM+mQUJ22Ao+uK9c0tRtMMwJpme xFVSL/e5BpjQqGGfzUGOK4SSQsLDJysFs5Y9ejUATum+jDg1QYsKEEIf/tzTarDN P2gA6F3bKZJpIIHudkRjDOsP0k00HWXbZtY9A7Jr9tNfNtAsZnFkqSAml2M6v/ec HGfTiQHOXZVbrB6rUEPfHW1S4CZVA3zRt0i0N0Ufdm4im/i2SQMWJq0VL7e5lIJo nS5L41fl7wVR5R28igCWevLsAU/H/wS9 -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:51 2025 by rpki-client