$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: sPChuwI/sRZIydBuAtccgS8BeBoPG6w5NEq5lYYJy1U= Subject key identifier: DC:17:CB:17:55:C5:0E:B1:98:15:45:EE:F1:5A:FE:A6:15:1B:46:2B Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 0375 Signing time: Sat 23 Aug 2025 01:08:22 +0000 Manifest this update: Sat 23 Aug 2025 01:08:22 +0000 Manifest next update: Sat 30 Aug 2025 01:08:22 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: azb88zbd86IOrPL/it1GVL/u0UxYcM5wW9+KLVVCAQE=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: OZN4xQkAGlo2J7xAsq7WK/TKxkfRBmTruJ0GM4QH81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Aug 23 01:08:22 2025 GMT Not After : Aug 30 01:08:22 2025 GMT Subject: CN=68a91486-1821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:63:cb:eb:34:1b:90:d7:f6:11:89:8b:04:e3: fe:a6:fc:f7:06:d1:ea:84:bc:7e:be:18:f0:b8:bb: ef:a9:54:64:b1:b6:d8:05:6d:d8:d1:73:59:53:39: 09:70:90:aa:dc:09:0c:bd:14:2b:62:72:1e:6e:e3: 65:11:55:52:9e:6c:5a:e1:e8:75:e2:04:79:9b:de: 62:5c:52:f7:69:91:7d:c0:7c:69:35:8c:9c:e2:91: 4b:c4:ab:ea:3a:c6:fa:fc:88:a6:51:b2:3a:2b:d2: 48:d9:87:08:57:d9:9b:83:3b:6a:67:e6:21:2e:aa: 3f:3e:ea:0c:21:b2:25:4f:ce:7f:24:0c:ab:15:c4: 9c:ed:79:ea:e8:cb:aa:58:a6:e3:8c:96:9b:99:3c: 85:58:88:d3:80:11:9e:aa:a7:33:11:9d:4a:e7:6a: 62:b7:82:a3:43:50:bd:da:03:12:c5:e8:17:c7:b2: fe:ab:41:37:57:3b:6c:10:38:96:01:4e:ca:52:21: 0b:2d:83:37:6a:85:a2:fe:b0:94:69:73:e7:e9:1c: 10:d6:9d:e8:db:a9:34:4a:e9:51:f1:8b:54:71:4c: ea:1b:33:8d:ab:e3:c4:f5:2a:de:e7:b4:73:15:14: 2a:59:86:a7:aa:08:d4:8f:4b:8c:87:ea:85:8d:cf: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:CB:17:55:C5:0E:B1:98:15:45:EE:F1:5A:FE:A6:15:1B:46:2B X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:38:6a:c0:9b:4d:ba:23:a7:53:0b:29:d0:cd:31:0f:55:6d: 79:94:95:5f:85:09:42:bd:56:f5:61:5c:73:f1:c3:46:2e:d8: 25:ef:de:75:d6:e1:14:43:47:ba:5f:9c:dd:f6:94:27:83:9f: e5:6b:1b:c5:92:66:74:b0:0f:31:f6:f4:51:56:9d:90:1b:43: 6e:34:30:d2:f3:45:67:a6:89:30:13:14:90:4f:50:5a:bf:0d: 9d:22:69:9d:01:df:10:65:4b:b2:85:06:c1:58:e0:91:d9:71: ae:cd:35:85:53:b7:3c:15:63:df:b6:cc:ee:b0:49:90:3e:b5: f2:d7:8d:4b:5d:70:c7:3b:38:28:f1:b9:c3:6f:de:13:45:d3: 88:7a:61:95:f8:1a:cf:08:81:bd:fb:18:7c:64:eb:12:a9:5b: 88:9d:f6:e0:82:1b:9b:a7:b9:03:e6:a5:c6:6e:2a:f0:cb:c0: cf:b2:6c:1c:8e:b5:84:c1:91:7f:88:20:62:92:9b:f6:fc:e3: b2:3f:86:4b:a6:39:ea:10:7c:04:95:b8:cf:b2:c2:86:50:49: 6b:44:4f:b3:27:e9:41:7b:e7:f2:52:14:c7:4d:ad:69:b8:fb: 50:c1:15:df:9a:94:0f:0b:c2:46:bf:c1:34:cc:19:cf:78:99: 0f:f3:25:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjUwODIzMDEwODIyWhcNMjUwODMwMDEwODIyWjAYMRYwFAYD VQQDEw02OGE5MTQ4Ni0xODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mPL6zQbkNf2EYmLBOP+pvz3BtHqhLx+vhjwuLvvqVRksbbYBW3Y0XNZUzkJ cJCq3AkMvRQrYnIebuNlEVVSnmxa4eh14gR5m95iXFL3aZF9wHxpNYyc4pFLxKvq Osb6/IimUbI6K9JI2YcIV9mbgztqZ+YhLqo/PuoMIbIlT85/JAyrFcSc7Xnq6Muq WKbjjJabmTyFWIjTgBGeqqczEZ1K52pit4KjQ1C92gMSxegXx7L+q0E3VztsEDiW AU7KUiELLYM3aoWi/rCUaXPn6RwQ1p3o26k0SulR8YtUcUzqGzONq+PE9Sre57Rz FRQqWYanqgjUj0uMh+qFjc8/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwXyxdV xQ6xmBVF7vFa/qYVG0YrMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBOGrAm026I6dTCynQzTEPVW15lJVfhQlCvVb1YVxz8cNGLtgl7951 1uEUQ0e6X5zd9pQng5/laxvFkmZ0sA8x9vRRVp2QG0NuNDDS80VnpokwExSQT1Ba vw2dImmdAd8QZUuyhQbBWOCR2XGuzTWFU7c8FWPftszusEmQPrXy141LXXDHOzgo 8bnDb94TRdOIemGV+BrPCIG9+xh8ZOsSqVuInfbgghubp7kD5qXGbirwy8DPsmwc jrWEwZF/iCBikpv2/OOyP4ZLpjnqEHwElbjPssKGUElrRE+zJ+lBe+fyUhTHTa1p uPtQwRXfmpQPC8JGv8E0zBnPeJkP8yUZ -----END CERTIFICATE-----Generated at Sun Aug 24 04:43:53 2025 by rpki-client