$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: iJ0c2oK9xknnnKcGrajTplYkn4e4igVRfV2uayLvalk= Subject key identifier: 7D:9A:43:68:05:C1:10:0D:90:D3:B2:F2:94:F0:37:D0:21:F8:72:37 Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 90 Signing time: Sat 23 Aug 2025 06:44:55 +0000 Manifest this update: Sat 23 Aug 2025 06:44:55 +0000 Manifest next update: Sat 30 Aug 2025 06:44:55 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: NSovs6rsXGhP7aiZIx7IdkfGhsLGKxayQO1TplUzF+I=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Aug 23 06:44:55 2025 GMT Not After : Aug 30 06:44:55 2025 GMT Subject: CN=68a96367-21a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:ec:62:b6:bf:cb:2d:a3:0a:12:8c:ec:71: e9:08:bb:cd:53:88:a9:d6:3f:db:a2:3f:d2:12:30: 5e:25:39:88:af:85:fb:d5:48:e8:4a:3b:6c:08:5e: 3f:70:b6:18:43:61:ac:20:59:71:22:96:1f:86:a5: c1:22:9e:b4:8f:b3:de:1b:98:cb:1a:36:ca:be:16: b0:f6:87:e4:22:99:80:95:6d:ce:45:33:c7:1d:22: 57:27:71:71:62:ca:84:03:f3:0f:11:b1:3d:bc:38: 62:93:22:ea:a6:94:b1:a7:79:65:1e:ec:a1:9f:a7: bd:b0:81:34:01:51:ac:3f:e0:ee:1d:f8:a3:ca:c9: 63:91:ed:b7:38:36:7b:65:ef:d4:d7:78:ba:fe:9b: 09:93:97:1b:73:a6:3a:b4:2d:6c:dc:24:be:5f:d5: 9a:da:bf:81:63:e8:1c:a9:0a:de:30:e8:4f:38:f6: 83:ac:13:ad:c3:a8:99:bf:6b:65:6e:fd:e8:33:36: dc:9a:fd:6e:58:f0:e8:65:5f:f9:04:36:f8:dc:b4: 40:42:1a:0d:7c:5d:e6:a2:84:d5:7c:92:60:84:9e: f5:09:fe:3e:19:73:04:99:41:f4:36:9d:f4:18:91: 50:73:be:0a:24:e8:05:10:97:dd:fc:ad:90:03:2e: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:43:68:05:C1:10:0D:90:D3:B2:F2:94:F0:37:D0:21:F8:72:37 X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b3:d0:8e:17:ce:86:49:ba:d1:30:bb:e9:6c:1d:e8:ec:c5: 6b:7f:ac:37:8b:5d:e3:c2:1d:34:76:f6:0e:33:e3:ce:a9:82: 5d:90:78:db:3a:ff:12:9a:de:3c:d0:8b:ad:c2:76:23:13:bd: a8:a1:5c:f9:e4:85:44:f4:aa:bd:c3:2a:b2:af:5c:4e:73:e3: 57:89:1d:d9:24:f6:5c:20:e0:02:5a:cb:bc:b1:b5:93:f2:a9: c0:d5:84:78:2e:76:5c:4c:71:19:94:31:09:d2:90:75:78:f5: f3:5d:83:00:11:b5:dd:13:47:08:6d:e7:f2:18:09:5c:32:f2: c0:48:cb:28:fa:3f:2e:6f:08:60:9a:3c:a3:30:30:2d:87:3f: 31:e8:28:70:7f:5f:2f:9a:c9:42:28:5a:9f:9e:62:75:24:55: ea:0f:7b:6f:28:cb:c6:d6:2e:d8:d8:0d:47:73:84:cb:2c:87: cf:17:f4:8e:4c:e4:be:32:80:ca:b4:95:b2:c0:d7:0a:15:0f: d2:a4:f2:dc:bf:58:de:1a:f8:6d:b0:cc:82:f6:18:67:3e:0c: b0:62:7c:b7:cb:07:1a:2a:e8:f8:71:a9:df:48:83:dc:95:05: 50:8b:92:4f:53:bd:9c:11:09:4d:95:74:c0:d8:a3:a0:9a:b7: 78:5f:8d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1 NTk5OTYzRjIwHhcNMjUwODIzMDY0NDU1WhcNMjUwODMwMDY0NDU1WjAYMRYwFAYD VQQDEw02OGE5NjM2Ny0yMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT7sYra/yy2jChKM7HHpCLvNU4ip1j/boj/SEjBeJTmIr4X71UjoSjtsCF4/ cLYYQ2GsIFlxIpYfhqXBIp60j7PeG5jLGjbKvhaw9ofkIpmAlW3ORTPHHSJXJ3Fx YsqEA/MPEbE9vDhikyLqppSxp3llHuyhn6e9sIE0AVGsP+DuHfijysljke23ODZ7 Ze/U13i6/psJk5cbc6Y6tC1s3CS+X9Wa2r+BY+gcqQreMOhPOPaDrBOtw6iZv2tl bv3oMzbcmv1uWPDoZV/5BDb43LRAQhoNfF3mooTVfJJghJ71Cf4+GXMEmUH0Np30 GJFQc74KJOgFEJfd/K2QAy7BiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2aQ2gF wRANkNOy8pTwN9Ah+HI3MB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChs9COF86GSbrRMLvpbB3o7MVrf6w3i13jwh00dvYOM+POqYJdkHjb Ov8Smt480IutwnYjE72ooVz55IVE9Kq9wyqyr1xOc+NXiR3ZJPZcIOACWsu8sbWT 8qnA1YR4LnZcTHEZlDEJ0pB1ePXzXYMAEbXdE0cIbefyGAlcMvLASMso+j8ubwhg mjyjMDAthz8x6Chwf18vmslCKFqfnmJ1JFXqD3tvKMvG1i7Y2A1Hc4TLLIfPF/SO TOS+MoDKtJWywNcKFQ/SpPLcv1jeGvhtsMyC9hhnPgywYny3ywcaKuj4canfSIPc lQVQi5JPU72cEQlNlXTA2KOgmrd4X43h -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:11 2025 by rpki-client