$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: 9Ufrljr12AzexQWJquvxTiWNfbDT4EaxAaH/fkRZiYM= Subject key identifier: 1B:3A:05:BC:D1:3E:04:02:87:EC:02:74:9D:31:E7:87:DD:08:07:CE Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B2C Signing time: Fri 22 Aug 2025 19:22:51 +0000 Manifest this update: Fri 22 Aug 2025 19:22:51 +0000 Manifest next update: Fri 29 Aug 2025 19:22:51 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: kCzEeF9spCGK6kOpZlBAfwrc6o4HOpyf043j2zPaT2s=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Aug 22 19:22:51 2025 GMT Not After : Aug 29 19:22:51 2025 GMT Subject: CN=68a8c38b-d37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:1e:5d:28:19:15:c6:fc:3c:84:17:cd:81: be:01:91:77:bb:04:9c:cb:27:ac:c1:13:6f:b7:46: 63:5c:ba:66:01:0c:49:cc:e8:44:8a:2c:20:8f:b4: 61:a8:2f:e5:09:23:f9:ee:90:21:2e:52:4d:91:d3: 93:97:1b:26:8c:53:3f:49:cf:ba:c5:3a:e3:1d:f9: 55:60:20:da:b8:b3:9d:a1:7b:2c:74:1c:6c:20:b4: 97:5c:51:99:39:00:1f:97:3c:c8:a7:c9:08:4b:ff: 9d:f1:07:04:7a:41:e6:e5:d4:04:f0:77:c6:80:a3: 8a:a7:38:22:23:9b:1e:fd:9c:3f:a0:8e:40:56:cd: a2:78:4c:d0:24:4f:41:25:9c:45:e5:70:5d:9c:5d: df:08:56:eb:d8:6e:61:6f:cc:11:b1:42:ba:7f:5c: c7:bc:cc:aa:2a:3b:25:b5:59:d0:5e:b2:8f:38:1b: c9:f3:f9:d9:12:47:91:96:9b:09:59:77:a9:4c:0a: 42:b9:e0:04:4c:16:ff:3a:66:f1:d7:40:37:06:4e: 08:db:41:69:34:30:49:7b:c1:7f:f9:5c:44:f4:de: cb:69:90:d0:c7:61:96:b0:33:d9:50:c4:b5:f9:14: 4b:8b:37:25:6a:42:a7:8d:c8:0c:4f:33:4a:8d:bb: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:05:BC:D1:3E:04:02:87:EC:02:74:9D:31:E7:87:DD:08:07:CE X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b6:e2:2e:80:5a:02:ec:e6:c0:34:28:c3:6d:88:41:6a:35: 51:a8:bc:12:f9:4a:ff:8e:82:fb:b1:ba:71:9d:a6:de:a9:14: 2f:1d:4e:37:95:9a:a2:11:4c:04:63:95:6c:86:b3:30:70:dd: 7c:b0:14:61:5f:a0:dc:e4:be:41:a7:dc:00:38:56:4a:f8:a5: 64:e2:52:fe:0b:42:5a:fe:32:ab:00:53:80:c4:30:2f:1a:ef: ea:26:48:48:03:e3:fb:79:4e:08:9f:b5:5f:66:13:82:58:62: ee:80:d2:66:8d:9f:92:c1:df:a9:0f:c6:75:32:32:cd:f5:4b: 47:b8:02:56:3d:9e:97:37:bf:62:7c:48:ba:60:9e:78:dc:59: f1:97:02:5e:2f:fa:78:82:3d:16:a6:cb:30:bf:66:89:a8:60: 6d:67:81:c9:6e:f8:72:87:7c:7f:db:a3:b5:13:2d:24:bb:c8: a7:d0:3e:43:65:02:5d:92:07:c5:5d:a4:29:37:30:a0:00:19: 59:06:be:d8:24:10:78:76:25:a6:c9:9e:16:e2:3f:ff:6c:d9: 14:f0:84:e4:bf:05:61:cb:81:41:6b:4d:1c:f0:fd:5e:29:61: 80:6f:93:d9:21:0d:a1:63:56:57:eb:ab:a5:41:55:ef:49:d9: 07:88:86:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUwODIyMTkyMjUxWhcNMjUwODI5MTkyMjUxWjAYMRYwFAYD VQQDEw02OGE4YzM4Yi1kMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+keXSgZFcb8PIQXzYG+AZF3uwScyyeswRNvt0ZjXLpmAQxJzOhEiiwgj7Rh qC/lCSP57pAhLlJNkdOTlxsmjFM/Sc+6xTrjHflVYCDauLOdoXssdBxsILSXXFGZ OQAflzzIp8kIS/+d8QcEekHm5dQE8HfGgKOKpzgiI5se/Zw/oI5AVs2ieEzQJE9B JZxF5XBdnF3fCFbr2G5hb8wRsUK6f1zHvMyqKjsltVnQXrKPOBvJ8/nZEkeRlpsJ WXepTApCueAETBb/Ombx10A3Bk4I20FpNDBJe8F/+VxE9N7LaZDQx2GWsDPZUMS1 +RRLizclakKnjcgMTzNKjbuVQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs6BbzR PgQCh+wCdJ0x54fdCAfOMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQActuIugFoC7ObANCjDbYhBajVRqLwS+Ur/joL7sbpxnabeqRQvHU43 lZqiEUwEY5VshrMwcN18sBRhX6Dc5L5Bp9wAOFZK+KVk4lL+C0Ja/jKrAFOAxDAv Gu/qJkhIA+P7eU4In7VfZhOCWGLugNJmjZ+Swd+pD8Z1MjLN9UtHuAJWPZ6XN79i fEi6YJ543FnxlwJeL/p4gj0Wpsswv2aJqGBtZ4HJbvhyh3x/26O1Ey0ku8in0D5D ZQJdkgfFXaQpNzCgABlZBr7YJBB4diWmyZ4W4j//bNkU8ITkvwVhy4FBa00c8P1e KWGAb5PZIQ2hY1ZX66ulQVXvSdkHiIZs -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:56 2025 by rpki-client