$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: Ken0jaa6DYoy5L79jOdmP9Wa+klUPxLArpqQo/7uLIs= Subject key identifier: 33:D1:98:A8:05:7D:B3:D1:22:8A:67:DF:20:32:4F:6A:86:A5:6C:6B Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 085B Signing time: Fri 22 Aug 2025 20:53:59 +0000 Manifest this update: Fri 22 Aug 2025 20:53:59 +0000 Manifest next update: Fri 29 Aug 2025 20:53:59 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: 8sxwjdKiqdw28m4q00gPy/MyqnRGlYdE5AGSjYKZ59o=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: dKNk5pPJbrzAnkXqkxI0ZuHUsGDU8sX1yqD52DpKuAQ=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: 0ru7xYrLjnDIEAfDou0iidHCCux0ow/jB57Xp7tPDLw=) 4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: VWbla33K1wl9gTRgnLJYb5WMUbeDQqg2qZKrLOb3zTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Aug 22 20:53:59 2025 GMT Not After : Aug 29 20:53:59 2025 GMT Subject: CN=68a8d8e7-a7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:8c:f0:cb:ae:11:80:de:03:c2:a2:63:94: a5:73:76:61:d5:af:b3:77:d1:54:7a:b7:d3:aa:3c: 7a:44:c4:b1:ab:7e:ef:b9:ee:93:0c:2a:8b:5a:0a: ff:45:2b:a3:db:b9:ab:1b:a0:eb:e8:d2:2a:4b:c5: f7:20:8b:df:20:ce:8b:e7:7a:df:2e:df:3d:6f:7f: 3c:cf:51:dd:96:f6:11:90:e0:09:cf:5b:ea:d6:04: f9:ef:65:aa:ec:ff:68:1a:8c:01:f5:57:54:76:4f: 43:3b:b2:2a:32:aa:e2:fd:ef:85:8a:31:da:56:47: 47:12:bd:32:4c:5b:74:2f:ae:19:40:87:7b:c6:cf: 68:fb:d7:e3:f3:02:c3:76:56:78:c4:3b:8b:98:ba: 65:e9:b1:87:78:09:95:84:c3:26:32:a7:1f:af:aa: cb:07:4d:b2:bb:17:a6:16:de:d3:f3:04:ae:14:18: 25:2e:c3:b5:36:22:6e:59:1c:bc:8d:61:1a:8f:77: d6:98:68:d5:7e:48:84:59:74:5d:42:04:12:c1:60: 83:c6:0d:2a:c8:12:36:fa:5f:b1:af:6f:82:6a:5e: 20:f2:d8:07:23:80:3d:eb:f6:4f:44:37:47:49:bc: 1b:37:1a:08:a1:48:14:0b:27:4e:73:09:88:9a:eb: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:98:A8:05:7D:B3:D1:22:8A:67:DF:20:32:4F:6A:86:A5:6C:6B X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:16:77:f4:d7:a4:a5:11:10:7f:c9:0f:54:57:0c:b3:eb:98: 40:91:d9:62:8b:d7:38:2e:2f:92:d5:87:82:8c:bb:cf:8c:ab: 5e:d1:53:6e:cb:52:53:dc:05:40:b7:43:b4:d6:d9:60:d4:7a: 98:8c:09:40:bf:98:e9:5b:99:99:c5:72:67:7e:53:54:f3:55: f5:ec:b8:a8:26:1a:03:1d:93:9b:7e:17:2b:d7:b1:5e:5e:09: 88:99:56:75:05:5f:42:07:c1:ab:da:fb:3f:e2:6e:6f:70:5a: 8f:72:89:56:eb:a7:3b:da:df:d0:cf:aa:46:67:86:e5:d0:25: 0b:63:f0:02:a7:78:bd:64:f5:c3:71:87:9a:f3:65:fc:bd:63: 14:50:45:97:12:ba:1f:47:48:f7:9c:f9:91:56:2e:71:c9:e5: 87:2d:bf:52:c5:a6:3d:62:46:dc:9e:40:ec:0f:29:27:7b:58: 61:14:46:c9:0d:52:14:44:2b:b9:db:d2:46:0a:80:f0:dc:37: 63:c3:47:80:39:8d:57:4c:60:a6:ed:3a:fb:96:0f:a7:f4:ba: e3:c9:7f:2b:96:90:79:87:d5:d1:3e:a4:39:a8:18:51:b0:96: 2c:2d:9d:04:93:ca:71:82:20:db:24:c7:4c:82:cd:6b:be:fc: 84:d5:c9:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUwODIyMjA1MzU5WhcNMjUwODI5MjA1MzU5WjAYMRYwFAYD VQQDEw02OGE4ZDhlNy1hN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQWM8MuuEYDeA8KiY5Slc3Zh1a+zd9FUerfTqjx6RMSxq37vue6TDCqLWgr/ RSuj27mrG6Dr6NIqS8X3IIvfIM6L53rfLt89b388z1HdlvYRkOAJz1vq1gT572Wq 7P9oGowB9VdUdk9DO7IqMqri/e+FijHaVkdHEr0yTFt0L64ZQId7xs9o+9fj8wLD dlZ4xDuLmLpl6bGHeAmVhMMmMqcfr6rLB02yuxemFt7T8wSuFBglLsO1NiJuWRy8 jWEaj3fWmGjVfkiEWXRdQgQSwWCDxg0qyBI2+l+xr2+Cal4g8tgHI4A96/ZPRDdH SbwbNxoIoUgUCydOcwmImuvmdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPRmKgF fbPRIopn3yAyT2qGpWxrMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQFnf016SlERB/yQ9UVwyz65hAkdlii9c4Li+S1YeCjLvPjKte0VNu y1JT3AVAt0O01tlg1HqYjAlAv5jpW5mZxXJnflNU81X17LioJhoDHZObfhcr17Fe XgmImVZ1BV9CB8Gr2vs/4m5vcFqPcolW66c72t/Qz6pGZ4bl0CULY/ACp3i9ZPXD cYea82X8vWMUUEWXErofR0j3nPmRVi5xyeWHLb9SxaY9YkbcnkDsDykne1hhFEbJ DVIURCu529JGCoDw3Ddjw0eAOY1XTGCm7Tr7lg+n9LrjyX8rlpB5h9XRPqQ5qBhR sJYsLZ0Ek8pxgiDbJMdMgs1rvvyE1ckB -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:16 2025 by rpki-client