$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: ctFb2l8meNMCnEPVHZo8UiMar7MZ7B7Pskqq16dZn1o= Subject key identifier: F4:4D:2A:BF:1A:C7:26:EA:A5:B3:4C:0C:B1:ED:A0:64:A4:62:05:67 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 0802 Signing time: Fri 22 Aug 2025 21:22:24 +0000 Manifest this update: Fri 22 Aug 2025 21:22:23 +0000 Manifest next update: Fri 29 Aug 2025 21:22:23 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: 7gN+0yrMi5bChbwZckPP+8QmNEwSweckcQfXPPxKEGY=) 2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: vVJ4ZPcH3lbEogl2hIa71k4678GTw2JTT698EnTX0sk=) 3: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=) 4: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: Aug 22 21:22:23 2025 GMT Not After : Aug 29 21:22:23 2025 GMT Subject: CN=68a8df8f-d71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:24:9e:4b:1f:e9:40:3f:c2:07:0b:a7:b7: a1:41:48:fe:22:76:51:3e:33:97:ac:99:b4:81:c3: f9:ea:a4:84:cc:dd:0a:16:7e:14:fe:ca:79:af:cf: d5:91:61:88:ce:bf:45:92:fc:9c:be:3b:16:55:52: 1b:ad:e7:b5:13:35:0d:fe:af:16:d3:a5:e6:b9:6f: b4:62:d7:1e:7c:cf:b1:48:3e:bf:b7:1a:d5:1c:ab: 54:02:66:5c:e0:7a:44:ef:e2:76:be:4a:fa:67:0d: d6:da:07:f3:13:a1:69:cd:f8:aa:3c:e3:76:eb:e1: fb:20:15:3d:fb:85:b1:4e:ea:64:d1:07:3e:33:e7: ab:a6:46:d6:73:44:fe:48:d0:2c:51:9a:de:65:9e: 95:f0:00:ac:5c:bf:d0:c7:8a:a9:f0:80:02:ab:b3: 02:c7:1c:9e:77:9b:f0:78:7d:eb:ac:50:9c:72:f6: 8b:19:d3:6f:d0:14:55:65:3f:a9:79:85:d4:47:1c: 8c:21:90:7b:75:a5:b1:3f:a8:2a:36:27:44:f8:d5: 45:a6:7e:ae:c8:21:ab:af:fc:f5:2c:4d:4c:a6:0a: 9b:56:da:86:9d:b1:53:f6:60:17:a5:94:dd:05:9e: e9:69:02:d6:a9:92:ed:4a:2c:02:04:05:31:26:ad: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4D:2A:BF:1A:C7:26:EA:A5:B3:4C:0C:B1:ED:A0:64:A4:62:05:67 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:05:47:03:44:05:e3:2b:68:a8:f6:2d:0f:f6:66:43:ef:c6: 88:bd:49:32:40:80:19:b6:da:f6:19:a6:0a:3f:85:6b:7f:9a: 30:ce:6d:bd:e6:4a:66:bf:35:70:5a:b5:88:68:0b:bf:47:08: 06:6b:1f:71:b3:f7:1a:90:c8:e1:d0:74:3e:54:48:93:b8:9e: c6:9e:0f:81:e7:b1:1f:b8:27:e6:32:ff:36:72:c5:9a:a0:c1: ec:e9:34:09:08:e4:48:ca:47:39:d6:58:7b:b2:da:21:49:56: a8:5d:3f:c0:78:74:10:c9:4a:28:cb:4f:f6:3a:15:bf:c4:12: b2:be:91:d1:80:04:3b:97:60:22:84:43:3c:cd:ec:d5:6d:86: 6e:21:5e:66:4f:06:b9:aa:11:a4:cd:7f:c5:37:aa:8b:db:77: fb:fe:6c:8d:83:92:b9:c0:ae:bf:85:c7:f8:31:65:b4:70:2f: 94:24:93:7c:5b:e4:7f:d1:39:cf:3d:85:d9:73:e3:52:8a:06: 44:1f:69:d1:b8:f0:a9:63:cd:8b:79:6c:4d:56:ab:11:bc:13: 75:08:10:76:f5:ec:de:57:80:72:3b:4a:dd:74:76:27:18:b1: 39:b0:02:92:4a:e8:db:ed:8e:46:d8:8a:35:19:60:de:de:28: 9b:59:8a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjUwODIyMjEyMjIzWhcNMjUwODI5MjEyMjIzWjAYMRYwFAYD VQQDEw02OGE4ZGY4Zi1kNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bMknksf6UA/wgcLp7ehQUj+InZRPjOXrJm0gcP56qSEzN0KFn4U/sp5r8/V kWGIzr9FkvycvjsWVVIbree1EzUN/q8W06XmuW+0YtcefM+xSD6/txrVHKtUAmZc 4HpE7+J2vkr6Zw3W2gfzE6FpzfiqPON26+H7IBU9+4WxTupk0Qc+M+erpkbWc0T+ SNAsUZreZZ6V8ACsXL/Qx4qp8IACq7MCxxyed5vweH3rrFCccvaLGdNv0BRVZT+p eYXURxyMIZB7daWxP6gqNidE+NVFpn6uyCGrr/z1LE1MpgqbVtqGnbFT9mAXpZTd BZ7paQLWqZLtSiwCBAUxJq2MuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRNKr8a xybqpbNMDLHtoGSkYgVnMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2BUcDRAXjK2io9i0P9mZD78aIvUkyQIAZttr2GaYKP4Vrf5owzm29 5kpmvzVwWrWIaAu/RwgGax9xs/cakMjh0HQ+VEiTuJ7Gng+B57EfuCfmMv82csWa oMHs6TQJCORIykc51lh7stohSVaoXT/AeHQQyUooy0/2OhW/xBKyvpHRgAQ7l2Ai hEM8zezVbYZuIV5mTwa5qhGkzX/FN6qL23f7/myNg5K5wK6/hcf4MWW0cC+UJJN8 W+R/0TnPPYXZc+NSigZEH2nRuPCpY82LeWxNVqsRvBN1CBB29ezeV4ByO0rddHYn GLE5sAKSSujb7Y5G2Io1GWDe3iibWYpU -----END CERTIFICATE-----Generated at Sun Aug 24 03:35:07 2025 by rpki-client