$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: FZ122DEaG/3WIG/n6DhXPxBHL2JfitJ2nsOMZ7PRbg8= Subject key identifier: EA:05:DA:2C:91:B8:09:38:DD:2E:D3:A5:20:24:13:01:37:A1:11:E2 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 01A0 Signing time: Sat 23 Aug 2025 03:25:22 +0000 Manifest this update: Sat 23 Aug 2025 03:25:21 +0000 Manifest next update: Sat 30 Aug 2025 03:25:21 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: 5cuq5iRIqSzdgd7PgQ+YWw0qURn1k3/6jvAJgVacWl8=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Aug 23 03:25:21 2025 GMT Not After : Aug 30 03:25:21 2025 GMT Subject: CN=68a934a1-c3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:b9:e9:b1:16:b3:b8:62:61:23:b6:0b:e7: 36:8f:03:a6:ad:32:e5:26:92:c5:bf:a0:6b:89:bc: c7:0b:c2:d4:df:b8:c1:c3:c4:0e:e4:9d:1b:44:27: 7e:43:9b:0c:f0:62:04:1d:0a:6d:ba:ed:2d:59:36: 93:57:27:a6:db:a3:8d:52:2e:ff:b7:23:77:c1:45: 67:28:53:ab:2c:57:76:4d:e0:56:17:a7:74:f3:a9: db:48:9f:65:b0:9b:12:4f:de:23:5a:8a:68:7e:d8: 0e:42:5f:5c:08:e8:8a:57:ea:cb:c7:1d:6b:a8:8a: 22:26:c0:2c:92:75:8c:7e:5a:ba:4a:e9:e8:60:7d: 45:fa:20:b3:a3:10:38:79:aa:8c:13:e7:d0:49:ed: 64:0f:b0:96:60:02:d4:f2:b6:7d:f6:fd:e6:00:07: a0:68:a5:bd:41:1b:21:42:4d:04:13:db:a1:04:7d: f4:5d:f4:dd:e5:1c:31:71:36:5e:c0:b7:aa:07:f9: 39:76:14:05:33:cf:98:dc:22:51:d2:6d:cf:b3:61: aa:48:6e:d4:60:d4:25:9e:2c:23:33:64:fd:62:76: 9f:be:bd:de:50:a5:28:ac:18:7b:48:6d:d9:81:7f: d9:55:53:a5:41:75:6e:8e:58:2c:ae:97:e0:95:51: d3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:05:DA:2C:91:B8:09:38:DD:2E:D3:A5:20:24:13:01:37:A1:11:E2 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:7e:eb:50:94:33:9d:dc:66:48:dc:de:86:22:66:3b:cb: b5:bd:ad:9d:06:c5:ac:10:80:93:2e:4c:f0:70:9f:7b:bf:d5: 81:ab:3a:1d:29:46:55:d4:83:52:76:ae:6b:45:de:f4:df:c5: b0:4b:1b:00:4b:09:b6:07:63:a0:71:bf:07:6a:11:05:fd:ec: 93:42:3a:03:08:33:51:b5:70:e8:34:39:0a:3a:77:2b:c0:a6: 03:6c:82:79:fa:11:d9:fc:d2:d3:a6:3a:49:11:34:95:74:c9: bb:93:2c:a0:cb:0b:12:e1:29:ed:14:9a:7e:cb:14:33:05:01: c9:d6:ff:eb:52:bc:4b:5f:07:4c:fd:b1:76:49:e5:db:ff:e5: a3:2d:dc:9d:b7:48:93:14:d3:1c:ea:14:11:63:b1:4e:43:bd: 15:20:25:bb:ee:a7:3a:f9:35:88:d5:21:88:3f:fb:df:e6:dd: cd:68:bb:09:21:00:f2:a3:41:78:7b:08:e2:63:47:ba:26:bf: c4:78:9c:e1:44:9f:10:63:1b:ab:19:a2:04:92:0e:bb:7a:4e: 0e:bc:7a:b7:e3:7d:73:31:15:4f:7d:3e:92:b6:6a:09:71:23: d7:2c:e3:1c:34:f2:a0:f8:19:4a:c7:b8:2c:f9:51:3f:90:3e: ff:0b:47:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwODIzMDMyNTIxWhcNMjUwODMwMDMyNTIxWjAYMRYwFAYD VQQDEw02OGE5MzRhMS1jM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjK56bEWs7hiYSO2C+c2jwOmrTLlJpLFv6BribzHC8LU37jBw8QO5J0bRCd+ Q5sM8GIEHQptuu0tWTaTVyem26ONUi7/tyN3wUVnKFOrLFd2TeBWF6d086nbSJ9l sJsST94jWopoftgOQl9cCOiKV+rLxx1rqIoiJsAsknWMflq6SunoYH1F+iCzoxA4 eaqME+fQSe1kD7CWYALU8rZ99v3mAAegaKW9QRshQk0EE9uhBH30XfTd5RwxcTZe wLeqB/k5dhQFM8+Y3CJR0m3Ps2GqSG7UYNQlniwjM2T9Ynafvr3eUKUorBh7SG3Z gX/ZVVOlQXVujlgsrpfglVHTJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoF2iyR uAk43S7TpSAkEwE3oRHiMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHR37rUJQzndxmSNzehiJmO8u1va2dBsWsEICTLkzwcJ97v9WBqzod KUZV1INSdq5rRd7038WwSxsASwm2B2Ogcb8HahEF/eyTQjoDCDNRtXDoNDkKOncr wKYDbIJ5+hHZ/NLTpjpJETSVdMm7kyygywsS4SntFJp+yxQzBQHJ1v/rUrxLXwdM /bF2SeXb/+WjLdydt0iTFNMc6hQRY7FOQ70VICW77qc6+TWI1SGIP/vf5t3NaLsJ IQDyo0F4ewjiY0e6Jr/EeJzhRJ8QYxurGaIEkg67ek4OvHq3431zMRVPfT6StmoJ cSPXLOMcNPKg+BlKx7gs+VE/kD7/C0ef -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:44 2025 by rpki-client