$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json) Hash identifier: jDSLJTCVDJ0b3aYirsFLK6ridrCIzvHN+NQ3YL1yKzI= Subject key identifier: EF:39:9B:15:56:5E:0F:53:C2:4E:99:C8:00:06:0C:5B:2C:D2:C8:CC Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0BAA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft Manifest number: 0BA3 Signing time: Fri 22 Aug 2025 15:14:36 +0000 Manifest this update: Fri 22 Aug 2025 15:14:35 +0000 Manifest next update: Fri 29 Aug 2025 15:14:35 +0000 Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: lg8sPrnIYhEGDL7a8S5bm5dlVgOFv3JqHE1UIrOF0zo=) 2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /8fEEtPdMyUdjQ1z+LPnGcbnmSc1TogzrljlPk/+Zoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: Aug 22 15:14:35 2025 GMT Not After : Aug 29 15:14:35 2025 GMT Subject: CN=68a8895b-9450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:5c:4b:84:a6:d8:be:1b:73:f6:5a:cf:c6: 87:76:f2:fb:fa:09:7a:60:ad:d2:ec:94:fb:cb:ac: a7:d0:10:c2:7b:7e:82:fe:be:31:4e:dc:ad:e3:05: 7f:71:63:6c:f8:0c:ca:7e:36:a2:aa:34:5b:7a:21: bd:dc:d5:64:4f:05:2b:90:31:b2:d1:68:70:7d:dc: 7e:7e:66:9e:44:2a:02:e2:1c:2a:52:49:48:5d:8c: bf:3b:44:14:7d:ce:a9:78:87:63:b5:fb:2f:9b:8f: 17:81:b6:d1:e1:ca:5f:07:e9:ae:7d:2e:ea:ca:81: 52:d6:6e:4a:af:7b:92:2a:c9:b6:29:05:0d:fa:aa: 04:7e:87:d8:03:7b:1f:90:93:c3:48:f7:73:76:d7: 14:81:a4:e1:83:85:75:6d:f3:29:99:1e:7e:a3:20: 1f:6c:33:5e:d6:52:c9:89:8c:2c:64:55:7e:10:32: 5c:5b:e2:9b:06:b4:57:05:f2:62:e9:ca:2b:a7:fe: 16:a7:6f:e4:ea:7d:39:d6:51:b1:33:f3:ff:e3:6b: f5:1a:84:ae:e4:7d:c1:34:0b:7d:32:44:02:40:0c: 10:f1:d0:ca:d3:e0:ed:d1:08:00:82:6b:83:e3:36: 67:ca:eb:ab:6c:8c:14:c6:92:2f:3a:5d:f7:18:1f: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:39:9B:15:56:5E:0F:53:C2:4E:99:C8:00:06:0C:5B:2C:D2:C8:CC X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:21:b1:19:c2:94:50:e6:8f:93:ae:86:ed:09:ed:df:45:d8: 20:07:19:ba:9f:c6:94:6e:ff:07:4b:79:a6:0d:24:61:d3:9a: e6:e8:93:20:6c:52:e5:8b:b6:06:d1:ce:c6:b5:4e:4c:27:48: 30:c4:1d:f3:58:1c:15:09:1f:09:d2:05:93:e1:e5:3e:fa:ff: c9:11:fc:97:7c:4d:2f:39:f3:44:74:94:3f:10:4b:76:f9:00: e7:7e:0d:b0:b9:dd:ee:6f:d8:63:3b:7f:5a:cd:29:45:7f:43: 60:cd:6f:d1:1b:2b:48:1a:bf:8b:64:65:3d:07:05:2a:e7:6c: 8d:db:48:ef:49:e3:96:7b:61:4b:68:cf:2a:db:61:31:a9:77: be:4b:15:b9:02:fb:02:d5:a3:b4:86:06:b8:59:e7:28:3e:1f: 9b:15:47:a4:f4:bb:87:76:4f:f7:b7:ce:95:0d:ec:48:ea:d4: 6c:13:33:89:bf:bb:6c:67:be:56:95:aa:58:b6:c7:3f:1b:5b: ed:7f:8c:83:57:92:25:3d:fb:1b:3b:c8:b2:e4:94:2e:3a:35: 99:ae:39:69:79:0f:e1:c7:7a:ae:46:9c:8d:17:a3:a2:17:b5: ca:c2:52:d7:33:6e:7f:06:c0:05:55:2d:11:e1:47:81:3f:a3: ae:fa:c1:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjUwODIyMTUxNDM1WhcNMjUwODI5MTUxNDM1WjAYMRYwFAYD VQQDEw02OGE4ODk1Yi05NDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCZcS4Sm2L4bc/Zaz8aHdvL7+gl6YK3S7JT7y6yn0BDCe36C/r4xTtyt4wV/ cWNs+AzKfjaiqjRbeiG93NVkTwUrkDGy0Whwfdx+fmaeRCoC4hwqUklIXYy/O0QU fc6peIdjtfsvm48XgbbR4cpfB+mufS7qyoFS1m5Kr3uSKsm2KQUN+qoEfofYA3sf kJPDSPdzdtcUgaThg4V1bfMpmR5+oyAfbDNe1lLJiYwsZFV+EDJcW+KbBrRXBfJi 6corp/4Wp2/k6n051lGxM/P/42v1GoSu5H3BNAt9MkQCQAwQ8dDK0+Dt0QgAgmuD 4zZnyuurbIwUxpIvOl33GB/XVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO85mxVW Xg9Twk6ZyAAGDFss0sjMMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi83QTc1MEEwQTJERDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFL X0xpNmdWbWM0d1owVkVfWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABIbEZwpRQ5o+TrobtCe3fRdggBxm6n8aUbv8HS3mmDSRh05rm6JMg bFLli7YG0c7GtU5MJ0gwxB3zWBwVCR8J0gWT4eU++v/JEfyXfE0vOfNEdJQ/EEt2 +QDnfg2wud3ub9hjO39azSlFf0NgzW/RGytIGr+LZGU9BwUq52yN20jvSeOWe2FL aM8q22ExqXe+SxW5AvsC1aO0hga4WecoPh+bFUek9LuHdk/3t86VDexI6tRsEzOJ v7tsZ75WlapYtsc/G1vtf4yDV5IlPfsbO8iy5JQuOjWZrjlpeQ/hx3quRpyNF6Oi F7XKwlLXM25/BsAFVS0R4UeBP6Ou+sGE -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:40 2025 by rpki-client