$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json) Hash identifier: WtxOWrHBWFJ2VPW/QmlevNGpsinkV7Trb+GWUYAjMDY= Subject key identifier: CE:1B:59:6F:E1:FF:6F:F9:96:ED:66:BE:7F:6A:18:A8:02:C0:2D:F6 Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft Manifest number: 01C9 Signing time: Sat 23 Aug 2025 03:01:15 +0000 Manifest this update: Sat 23 Aug 2025 03:01:15 +0000 Manifest next update: Sat 30 Aug 2025 03:01:15 +0000 Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: REmZrQzbSQkvyMITu4VakF/Md9n6QEJbHuPoDIoZ8Pk=) 2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: qTpurh8+bWpZzwTVZxTLGeJXujwiEOMw1H0kXdqpaC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A Validity Not Before: Aug 23 03:01:15 2025 GMT Not After : Aug 30 03:01:15 2025 GMT Subject: CN=68a92efb-fcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:f1:36:d1:30:82:8d:cc:09:cc:48:bb:5b: 30:19:35:eb:d4:c2:97:03:30:b4:5e:2d:94:2b:32: 80:a8:84:57:b3:d0:76:a1:92:ed:c5:b5:b2:63:a7: be:6d:71:62:d4:42:cb:af:76:82:7a:c8:ed:24:41: 71:9e:cf:a0:2b:63:f8:09:0e:cd:03:6e:60:f3:ff: b2:25:e0:cf:99:11:e0:3a:81:b2:79:b8:6f:7e:b3: 8a:b5:73:37:33:ad:ef:5b:c7:01:bc:de:97:2a:0e: 3d:68:05:28:88:77:74:7c:4e:f0:a9:c8:b8:ad:3b: 2a:18:58:ee:9e:6e:82:f4:99:f6:73:9e:29:63:01: ab:cc:28:60:ce:a9:02:43:ea:22:05:a0:a2:51:65: fd:77:1b:df:74:98:0a:e2:07:7c:46:e1:57:ac:3f: 1a:a2:49:bf:5b:09:86:44:cb:a1:9d:7e:54:c2:ec: 7b:b0:f2:dc:3b:c4:be:f8:36:47:80:30:59:b4:58: 18:8b:cf:d2:e0:19:c6:dd:3e:20:cc:da:d3:42:cc: 63:79:01:77:aa:4f:a3:d8:52:d8:55:2b:6b:0c:e7: 00:e1:03:6c:c6:92:1f:f7:ba:ac:07:2a:47:fc:34: 01:91:ce:31:ab:e2:d9:26:95:50:e4:42:71:f4:16: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1B:59:6F:E1:FF:6F:F9:96:ED:66:BE:7F:6A:18:A8:02:C0:2D:F6 X509v3 Authority Key Identifier: keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:56:43:4b:cb:34:3b:af:53:4c:fc:3b:56:63:42:54:9f:11: f6:04:7e:dd:c1:fa:34:07:dc:42:6a:f7:32:41:b3:17:6b:f6: 15:63:b0:85:ff:d2:2c:79:45:e8:0d:a7:3b:22:8c:b8:34:cf: 0e:9f:c9:b4:ea:c5:51:11:db:75:5b:ba:4e:54:12:37:40:45: c9:f7:53:7f:0b:72:30:93:b5:6c:3b:11:86:e8:64:c5:9d:ff: 8c:4d:c3:2b:5f:4d:1f:c4:7f:35:73:2e:7a:8b:55:e4:6d:97: 62:4b:0d:b9:8a:0a:24:de:29:59:aa:70:e5:3c:21:ee:a2:1b: ca:7f:6d:9b:a2:ca:6d:30:fe:a6:73:9f:aa:f1:1f:0a:17:31: 1f:92:05:19:bc:f1:bb:ee:97:5b:ae:f3:3b:fd:6e:46:b3:04: 8c:07:e5:87:20:8e:b0:2e:32:1a:ff:03:ce:56:0b:94:98:9b: 85:22:c1:ef:18:ff:f5:a6:eb:61:5e:66:32:ef:a7:42:0d:fe: 92:3e:1b:53:b1:19:b5:24:92:7a:20:1c:a8:a2:bc:cd:fb:55: ce:1d:42:c3:3a:d3:11:2e:a9:26:fb:c5:6e:2d:03:6e:35:3c: a8:67:cd:a8:ba:87:b6:be:2c:54:2e:6d:ef:03:41:60:1c:cf: 43:86:20:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5 NDdCRTA5MkEwHhcNMjUwODIzMDMwMTE1WhcNMjUwODMwMDMwMTE1WjAYMRYwFAYD VQQDEw02OGE5MmVmYi1mY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB7xNtEwgo3MCcxIu1swGTXr1MKXAzC0Xi2UKzKAqIRXs9B2oZLtxbWyY6e+ bXFi1ELLr3aCesjtJEFxns+gK2P4CQ7NA25g8/+yJeDPmRHgOoGyebhvfrOKtXM3 M63vW8cBvN6XKg49aAUoiHd0fE7wqci4rTsqGFjunm6C9Jn2c54pYwGrzChgzqkC Q+oiBaCiUWX9dxvfdJgK4gd8RuFXrD8aokm/WwmGRMuhnX5Uwux7sPLcO8S++DZH gDBZtFgYi8/S4BnG3T4gzNrTQsxjeQF3qk+j2FLYVStrDOcA4QNsxpIf97qsBypH /DQBkc4xq+LZJpVQ5EJx9BZ0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4bWW/h /2/5lu1mvn9qGKgCwC32MB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0 QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi enJmc2RjRjRZUHVVZS1DU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhVkNLyzQ7r1NM/DtWY0JUnxH2BH7dwfo0B9xCavcyQbMXa/YVY7CF /9IseUXoDac7Ioy4NM8On8m06sVREdt1W7pOVBI3QEXJ91N/C3Iwk7VsOxGG6GTF nf+MTcMrX00fxH81cy56i1XkbZdiSw25igok3ilZqnDlPCHuohvKf22bosptMP6m c5+q8R8KFzEfkgUZvPG77pdbrvM7/W5GswSMB+WHII6wLjIa/wPOVguUmJuFIsHv GP/1puthXmYy76dCDf6SPhtTsRm1JJJ6IByoorzN+1XOHULDOtMRLqkm+8VuLQNu NTyoZ82ouoe2vixULm3vA0FgHM9DhiBP -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:25 2025 by rpki-client