$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: 7C8YpoxIv62IziWohRwTRy44ElW+kh189nz8jaUV7F8= Subject key identifier: 1E:76:1E:F8:E4:CB:8E:79:7D:70:30:CA:EE:10:26:B8:9E:59:5D:C5 Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 27 Signing time: Sat 23 Aug 2025 08:00:57 +0000 Manifest this update: Sat 23 Aug 2025 08:00:57 +0000 Manifest next update: Sat 30 Aug 2025 08:00:57 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: 4gVT52eorZCN64KQmsfyXzRPKoVeNAD9N2a6BklFCfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Aug 23 08:00:57 2025 GMT Not After : Aug 30 08:00:57 2025 GMT Subject: CN=68a97539-a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:7f:57:e7:ef:93:60:c8:5b:db:66:c3:32: b0:9e:73:65:9b:86:a7:84:c6:c9:70:63:d1:73:a5: ae:e6:b6:9d:34:b1:ad:55:60:ad:c8:73:4b:3f:be: fd:af:ef:9b:97:a6:d7:e2:00:25:b5:db:3d:19:30: 82:db:69:ae:b5:0b:8b:bf:8b:5d:ff:3f:67:ab:50: 70:7d:3a:8d:ed:69:dc:20:09:da:73:16:0e:5d:75: e9:20:2a:7e:7c:d2:9a:a6:7c:74:97:c3:a9:b6:ca: 09:77:88:e3:3b:6e:c0:5d:5e:bd:b3:5d:80:90:70: 66:66:f7:48:a2:77:e4:69:78:33:15:82:38:65:d3: 35:59:5e:a5:55:82:7a:6a:26:aa:da:b2:88:c9:be: 7a:d9:35:e6:2e:32:00:d6:84:02:7f:0f:54:02:71: fb:8f:15:57:2b:91:cb:f9:4b:78:2a:df:f3:d7:fc: 96:39:78:b1:88:95:12:f9:16:d0:d7:6b:ab:a4:b0: 00:3a:7a:89:d8:f8:1f:83:c8:b0:10:76:8f:a2:4c: 89:8f:bb:b0:bb:5a:e1:56:a3:0f:1f:fd:ab:36:ca: 21:8e:5b:6e:ae:d5:35:5f:0d:a7:f6:fe:a5:10:4c: 84:88:ee:ee:27:b4:16:50:1e:d5:ee:96:52:a9:97: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:76:1E:F8:E4:CB:8E:79:7D:70:30:CA:EE:10:26:B8:9E:59:5D:C5 X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:d8:19:09:49:3d:fc:1a:87:bd:89:f5:55:f1:90:02:fa: 15:38:0e:2b:56:a3:ac:0b:a2:74:64:a5:ee:0c:c4:e3:e2:60: 80:f6:39:d9:65:16:ff:5d:5e:e2:cc:e8:39:50:bc:41:ed:af: 1f:e1:fb:26:48:e6:47:62:db:2f:ac:49:df:e8:77:4b:cc:62: 7e:ba:ee:b8:c9:5c:04:dd:ff:c0:99:dc:5f:0b:d4:64:bd:84: 79:30:5d:60:c0:cd:73:db:2c:4c:20:13:4e:f4:45:6a:c9:fe: de:7c:a0:c0:ce:a8:b2:e1:3a:63:53:56:05:72:c8:8d:78:d0: d9:0e:43:4d:94:bb:de:98:39:d4:dc:d4:20:8b:07:d6:8d:d1: 86:15:5a:49:7d:4c:b5:67:15:76:9e:77:95:60:73:39:33:31: ae:ec:d5:dd:31:ab:da:c1:1e:df:05:33:8e:56:ed:f8:32:91: f4:ac:98:ac:91:35:ef:89:4b:4c:ab:83:19:5d:86:6e:cb:cc: 98:80:1d:8a:5c:89:22:d1:54:18:b1:9f:3e:d1:15:d3:9f:10: 0f:81:60:56:1a:52:d5:b3:8f:5f:81:f8:53:d1:04:9a:08:46: 90:49:6e:20:fd:aa:18:88:17:0b:83:e5:40:56:f1:3c:45:65: f1:96:2b:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTA4MjMwODAwNTdaFw0yNTA4MzAwODAwNTdaMBgxFjAUBgNV BAMTDTY4YTk3NTM5LWE0YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCibH9X5++TYMhb22bDMrCec2WbhqeExslwY9Fzpa7mtp00sa1VYK3Ic0s/vv2v 75uXptfiACW12z0ZMILbaa61C4u/i13/P2erUHB9Oo3tadwgCdpzFg5ddekgKn58 0pqmfHSXw6m2ygl3iOM7bsBdXr2zXYCQcGZm90iid+RpeDMVgjhl0zVZXqVVgnpq JqrasojJvnrZNeYuMgDWhAJ/D1QCcfuPFVcrkcv5S3gq3/PX/JY5eLGIlRL5FtDX a6uksAA6eonY+B+DyLAQdo+iTImPu7C7WuFWow8f/as2yiGOW26u1TVfDaf2/qUQ TISI7u4ntBZQHtXullKplzZhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHnYe+OTL jnl9cDDK7hAmuJ5ZXcUwHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHP2BkJST38Goe9ifVV8ZAC+hU4DitWo6wLonRkpe4MxOPiYID2Odll Fv9dXuLM6DlQvEHtrx/h+yZI5kdi2y+sSd/od0vMYn667rjJXATd/8CZ3F8L1GS9 hHkwXWDAzXPbLEwgE070RWrJ/t58oMDOqLLhOmNTVgVyyI140NkOQ02Uu96YOdTc 1CCLB9aN0YYVWkl9TLVnFXaed5VgczkzMa7s1d0xq9rBHt8FM45W7fgykfSsmKyR Ne+JS0yrgxldhm7LzJiAHYpciSLRVBixnz7RFdOfEA+BYFYaUtWzj1+B+FPRBJoI RpBJbiD9qhiIFwuD5UBW8TxFZfGWK58= -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:51 2025 by rpki-client