$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: AYLLkohadng0ShVFxfc0eG0+D8PVilX/SoGJcsS3gdI= Subject key identifier: 1B:53:73:43:8E:54:42:CE:F2:DD:B8:1E:B4:3C:6B:B6:B9:49:81:D2 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 0399 Signing time: Sat 23 Aug 2025 01:02:38 +0000 Manifest this update: Sat 23 Aug 2025 01:02:37 +0000 Manifest next update: Sat 30 Aug 2025 01:02:37 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: 9aUHRfsH4JQwQAuUpjiS4b0HQs2xotZTdtOtU5OhlyY=) 2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: 4I3Yc+oHBu75hPbHWxPxeRv9eI1vw2aVJaFMOmOjLHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Aug 23 01:02:37 2025 GMT Not After : Aug 30 01:02:37 2025 GMT Subject: CN=68a9132d-256a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:1f:55:2a:17:6a:29:cc:ed:bd:9d:49:74: f0:4d:a4:8e:7c:fc:00:73:66:ec:4a:fd:ef:10:f7: cb:71:a0:a4:50:a9:a6:90:f9:f4:a4:5d:81:32:ab: b3:25:47:75:04:0c:76:2f:74:47:34:3a:0e:41:47: 9a:c4:b5:0a:1b:a3:be:37:82:53:ef:10:cf:f6:7b: e9:1d:6c:05:29:45:7b:c7:8c:f9:4a:af:06:28:ae: 5b:92:f3:00:fb:0c:1c:93:39:7b:a5:f2:d9:fd:04: 16:f7:b7:bb:96:56:8a:18:65:6f:ac:24:a8:71:e9: a4:a3:91:d8:70:9c:9e:4e:de:60:77:67:7c:ec:66: 73:45:4d:5a:e0:5a:68:f4:1d:0a:ac:c0:d2:83:ec: 86:29:51:bb:6c:cd:94:cb:e4:f7:26:4d:5b:e4:2a: 69:93:7a:95:41:cf:69:39:2c:83:79:d2:b6:49:7f: d5:a6:82:c7:55:8a:0e:bb:b7:01:b1:e0:a1:e9:8c: 3c:cf:ca:6d:8b:51:3c:13:56:7e:08:f4:28:99:0a: f7:b0:5f:7f:6e:4f:17:57:80:86:e9:7d:27:d6:65: 7c:4c:3c:75:0f:ac:6a:d7:af:22:84:a5:2a:f0:40: c5:0a:bc:65:54:18:fc:75:07:c7:8a:8c:d7:f1:3f: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:53:73:43:8E:54:42:CE:F2:DD:B8:1E:B4:3C:6B:B6:B9:49:81:D2 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:91:a0:f9:d3:fd:8c:11:a9:ad:dc:dd:9a:ca:ed:c2:27:06: ea:fe:65:43:97:3e:18:a9:e7:5c:13:4a:9c:ec:6f:80:22:ca: 3a:f1:b7:4e:0e:44:c6:ac:f9:c8:f1:1b:e8:47:07:24:ef:ce: 95:1f:51:00:aa:6a:54:d0:c5:3f:8c:89:da:ce:49:96:25:1d: 44:bf:88:cb:d9:04:0f:99:81:f7:39:32:54:87:50:10:7a:34: eb:96:a0:40:bf:22:1d:66:a8:b0:d6:4c:cc:5e:cb:fa:e6:38: a4:7c:3a:29:38:d1:54:f4:4c:0f:45:d8:1d:a6:d1:c9:7f:da: 9f:73:a4:ce:58:e7:47:64:9e:20:b6:e3:75:9b:d5:bf:12:43: 78:5d:29:3d:cd:4c:11:0d:3b:b1:d6:6b:d4:53:6e:52:b2:ee: d9:4e:5b:84:4c:59:0a:22:ee:b1:d9:17:ae:2e:56:ad:2d:9b: e3:91:36:df:e0:61:f5:a8:c4:e6:8f:b8:03:03:5b:82:da:b4: 16:af:86:b6:65:e6:08:9b:d3:b9:44:5b:fc:ad:47:55:bd:a9: 39:4a:0a:2d:90:31:e2:69:a7:0f:f3:15:c3:62:ac:e3:74:7a: 36:7c:20:f1:66:38:a5:47:2b:b0:d4:81:33:58:80:f9:e7:8d: 12:41:d9:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUwODIzMDEwMjM3WhcNMjUwODMwMDEwMjM3WjAYMRYwFAYD VQQDEw02OGE5MTMyZC0yNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFIfVSoXainM7b2dSXTwTaSOfPwAc2bsSv3vEPfLcaCkUKmmkPn0pF2BMquz JUd1BAx2L3RHNDoOQUeaxLUKG6O+N4JT7xDP9nvpHWwFKUV7x4z5Sq8GKK5bkvMA +wwckzl7pfLZ/QQW97e7llaKGGVvrCSocemko5HYcJyeTt5gd2d87GZzRU1a4Fpo 9B0KrMDSg+yGKVG7bM2Uy+T3Jk1b5Cppk3qVQc9pOSyDedK2SX/VpoLHVYoOu7cB seCh6Yw8z8pti1E8E1Z+CPQomQr3sF9/bk8XV4CG6X0n1mV8TDx1D6xq168ihKUq 8EDFCrxlVBj8dQfHiozX8T9a1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtTc0OO VELO8t24HrQ8a7a5SYHSMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7kaD50/2MEamt3N2ayu3CJwbq/mVDlz4YqedcE0qc7G+AIso68bdO DkTGrPnI8RvoRwck786VH1EAqmpU0MU/jInazkmWJR1Ev4jL2QQPmYH3OTJUh1AQ ejTrlqBAvyIdZqiw1kzMXsv65jikfDopONFU9EwPRdgdptHJf9qfc6TOWOdHZJ4g tuN1m9W/EkN4XSk9zUwRDTux1mvUU25Ssu7ZTluETFkKIu6x2ReuLlatLZvjkTbf 4GH1qMTmj7gDA1uC2rQWr4a2ZeYIm9O5RFv8rUdVvak5SgotkDHiaacP8xXDYqzj dHo2fCDxZjilRyuw1IEzWID5540SQdnI -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:57 2025 by rpki-client