$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: 7E9MHxqAMkGEiXiWKBghcKtleq7b2EL6oaHn/WWx/5Y= Subject key identifier: D1:6B:0B:2C:30:CD:49:8F:58:08:8A:CF:42:3C:EF:A2:7C:95:12:57 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 07B1 Signing time: Fri 22 Aug 2025 21:25:14 +0000 Manifest this update: Fri 22 Aug 2025 21:25:14 +0000 Manifest next update: Fri 29 Aug 2025 21:25:14 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: sTHfVzfRUQKzYMXFB+N054Qzh6zxTfdRCP3HP1XOYBE=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Aug 22 21:25:14 2025 GMT Not After : Aug 29 21:25:14 2025 GMT Subject: CN=68a8e03a-4be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:db:6e:bb:f9:ba:36:a7:c3:7b:99:11:63: 51:41:59:d4:20:9e:c2:3a:f6:27:b6:77:53:8d:b1: b1:33:71:9e:7a:90:c8:4a:b4:aa:f2:22:c7:01:2b: c7:a9:45:d7:0f:ca:95:7d:8c:53:99:ed:c3:0a:af: 02:37:e1:64:88:19:e4:fe:81:33:f5:64:30:b8:35: 01:09:dc:00:79:97:0c:05:b1:9a:ce:f7:f3:68:5a: 68:a8:11:4d:5d:c1:96:e9:bf:71:5a:f5:10:99:18: bb:06:92:3e:3a:1b:ee:23:71:9b:88:84:8f:00:c8: af:b1:ed:d5:ef:98:16:88:5c:27:1d:97:26:c9:75: 95:c4:61:bb:54:b8:eb:46:aa:c1:a3:ae:39:d7:97: 4c:c0:83:a6:42:a4:8e:90:e3:ec:3a:82:39:4d:53: 78:87:4c:bc:93:bb:f0:26:24:d1:3d:20:28:4b:32: 20:b8:3d:79:5c:b1:85:2c:05:21:9b:7c:03:cb:f4: 84:b6:fb:ac:a9:1f:21:19:2c:6d:ef:f6:61:c0:a8: 53:04:45:6c:37:38:05:bb:81:e6:51:90:3b:e9:c5: 86:56:14:35:3f:99:3d:c8:2c:c1:c3:f5:f3:09:c7: 95:4f:e2:4f:54:f8:25:84:3b:0d:aa:f1:03:e9:96: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6B:0B:2C:30:CD:49:8F:58:08:8A:CF:42:3C:EF:A2:7C:95:12:57 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6d:7b:a0:51:5f:f9:a1:45:a7:3b:2b:98:9e:78:de:3d:51: f9:3a:bd:97:fd:2f:e1:4b:93:44:bd:07:b3:09:5f:cc:b2:74: 24:06:49:30:6a:d4:4a:4f:e0:01:33:5e:c7:99:bc:24:6b:a3: b4:43:a5:6b:03:90:81:9a:2a:07:93:43:8f:f8:9d:9c:2d:76: f5:2f:a9:17:a4:9b:58:fa:87:89:38:31:bc:6e:66:3c:54:c5: 2d:87:bf:84:7c:4f:3b:13:04:a0:02:9b:71:1c:27:db:da:04: d8:6c:2f:a5:c0:66:58:35:b6:02:9f:44:b8:a3:bc:17:a1:31: 35:f7:e6:ae:fc:3f:35:9a:1a:61:70:d5:28:48:19:15:1a:35: 67:9b:3b:97:35:27:11:c5:4c:1a:5e:7a:6b:81:a6:18:18:d8: 5c:0a:05:be:d3:27:b5:99:71:4a:02:be:96:46:22:21:f2:3a: be:02:8d:76:c7:48:21:dd:1d:0e:c3:06:d3:a7:33:db:25:1b: ad:63:7a:3d:c2:35:0f:87:c2:fc:82:47:ce:50:fa:a1:93:e3: 29:de:85:45:c9:df:38:e2:46:1b:26:51:15:7b:79:34:ec:f7: 0b:89:7f:27:44:e7:14:6c:00:84:5b:c2:6b:1e:45:3d:95:d5: f7:40:70:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUwODIyMjEyNTE0WhcNMjUwODI5MjEyNTE0WjAYMRYwFAYD VQQDEw02OGE4ZTAzYS00YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs7bbrv5ujanw3uZEWNRQVnUIJ7COvYntndTjbGxM3GeepDISrSq8iLHASvH qUXXD8qVfYxTme3DCq8CN+FkiBnk/oEz9WQwuDUBCdwAeZcMBbGazvfzaFpoqBFN XcGW6b9xWvUQmRi7BpI+OhvuI3GbiISPAMivse3V75gWiFwnHZcmyXWVxGG7VLjr RqrBo64515dMwIOmQqSOkOPsOoI5TVN4h0y8k7vwJiTRPSAoSzIguD15XLGFLAUh m3wDy/SEtvusqR8hGSxt7/ZhwKhTBEVsNzgFu4HmUZA76cWGVhQ1P5k9yCzBw/Xz CceVT+JPVPglhDsNqvED6ZZNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFrCyww zUmPWAiKz0I876J8lRJXMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChbXugUV/5oUWnOyuYnnjePVH5Or2X/S/hS5NEvQezCV/MsnQkBkkw atRKT+ABM17Hmbwka6O0Q6VrA5CBmioHk0OP+J2cLXb1L6kXpJtY+oeJODG8bmY8 VMUth7+EfE87EwSgAptxHCfb2gTYbC+lwGZYNbYCn0S4o7wXoTE19+au/D81mhph cNUoSBkVGjVnmzuXNScRxUwaXnprgaYYGNhcCgW+0ye1mXFKAr6WRiIh8jq+Ao12 x0gh3R0OwwbTpzPbJRutY3o9wjUPh8L8gkfOUPqhk+Mp3oVFyd844kYbJlEVe3k0 7PcLiX8nROcUbACEW8JrHkU9ldX3QHAz -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:22 2025 by rpki-client