$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: dJlTUZtlx2Ah8ZVTKTclylb76nNzkxydaMANnvoUsoI= Subject key identifier: 5E:1A:C4:1A:79:4F:0F:2E:64:0A:81:C7:C8:8B:AB:15:49:C6:0E:6B Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 068B Signing time: Fri 22 Aug 2025 22:31:28 +0000 Manifest this update: Fri 22 Aug 2025 22:31:28 +0000 Manifest next update: Fri 29 Aug 2025 22:31:28 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: O0j1TtqV+eCdEIQznNuB3Q+ap8FwmSkkDKkG67Qf9wg=) 2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: Aug 22 22:31:28 2025 GMT Not After : Aug 29 22:31:28 2025 GMT Subject: CN=68a8efc0-8a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:b4:1f:5c:16:ab:21:fd:30:06:b8:bc:ea: f1:6c:74:f5:05:a2:09:3a:d0:3e:31:fb:6c:8e:d4: ab:b7:9d:9b:eb:33:4e:2c:c3:20:89:4e:1f:5a:73: ea:92:88:5e:41:36:a5:0e:89:37:3e:99:c0:d1:9e: 6f:e5:05:da:9f:7c:05:9e:2b:f7:69:48:72:4e:6a: fa:7f:74:5b:82:a8:a9:f4:58:2f:cb:31:be:2b:f1: ba:3e:1d:ab:29:8c:8f:5d:27:c3:76:ad:7c:32:ab: f9:22:a9:64:4c:d2:bf:d2:53:2d:69:ca:db:d4:da: 72:66:0b:e5:4e:aa:c7:6f:db:23:4e:15:a6:7b:4c: e7:6e:a0:db:34:92:ef:e1:eb:b8:50:5f:b2:e2:76: 63:bc:1d:ff:e6:0a:8c:b3:e3:b0:5c:2b:01:1d:4a: e1:67:89:c0:43:c7:f5:c0:db:12:3d:60:f6:e0:0d: df:58:a4:1d:f4:db:39:2d:c6:d0:1b:48:ac:e1:9a: e9:c9:ce:57:de:0d:1b:5d:40:96:15:e8:70:db:97: fd:9e:63:f8:7b:0c:6b:b6:4b:21:4b:7c:b9:d6:44: 72:c2:8b:09:3a:26:9e:42:21:a3:5e:9e:0a:eb:3e: 8a:ee:cf:83:24:4e:5a:8e:d9:d0:6c:cd:1a:b5:9c: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1A:C4:1A:79:4F:0F:2E:64:0A:81:C7:C8:8B:AB:15:49:C6:0E:6B X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d0:31:0e:29:4e:0a:cc:10:22:ae:e9:ae:ab:d5:bd:fb:22: 9e:10:e2:12:e4:1d:82:13:a0:f0:7d:92:e4:4b:cb:71:81:10: a1:0b:99:9f:26:a6:30:4c:97:13:40:da:86:81:2e:eb:b1:9a: 42:df:62:d6:01:e9:01:0f:6c:b1:80:31:86:69:4f:95:f8:25: 87:cc:50:63:73:6f:c5:6e:50:81:20:da:80:23:d6:c2:f5:a8: cf:41:97:23:30:9d:e6:3e:8b:3e:de:da:a6:de:f8:36:ee:89: b8:70:8c:64:83:33:bd:65:f6:1a:be:73:5c:a2:32:1c:7d:53: 21:2f:60:01:00:dc:84:77:9b:56:f9:0c:2e:94:78:c8:10:3a: c2:8b:e4:80:38:6e:d2:34:9c:0c:b2:49:0d:e3:55:60:40:5c: 80:c3:2f:2f:d3:cd:ca:86:14:1c:56:e2:07:82:79:0a:cd:75: eb:43:d2:3e:30:06:d3:04:33:14:cb:7e:ee:aa:69:d2:c1:d8: 0d:17:1f:53:2d:d8:5a:19:c7:29:71:bc:dc:dd:54:ca:bb:c6: 4a:27:6d:c2:53:39:48:45:5b:ad:33:9c:e3:41:f3:54:6e:cf: 9e:69:09:35:b3:de:bf:c1:33:81:9d:5e:16:70:dd:81:9f:8c: 93:97:2b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUwODIyMjIzMTI4WhcNMjUwODI5MjIzMTI4WjAYMRYwFAYD VQQDEw02OGE4ZWZjMC04YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX+0H1wWqyH9MAa4vOrxbHT1BaIJOtA+MftsjtSrt52b6zNOLMMgiU4fWnPq koheQTalDok3PpnA0Z5v5QXan3wFniv3aUhyTmr6f3Rbgqip9FgvyzG+K/G6Ph2r KYyPXSfDdq18Mqv5IqlkTNK/0lMtacrb1NpyZgvlTqrHb9sjThWme0znbqDbNJLv 4eu4UF+y4nZjvB3/5gqMs+OwXCsBHUrhZ4nAQ8f1wNsSPWD24A3fWKQd9Ns5LcbQ G0is4Zrpyc5X3g0bXUCWFehw25f9nmP4ewxrtkshS3y51kRywosJOiaeQiGjXp4K 6z6K7s+DJE5ajtnQbM0atZx+GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4axBp5 Tw8uZAqBx8iLqxVJxg5rMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU0DEOKU4KzBAirumuq9W9+yKeEOIS5B2CE6DwfZLkS8txgRChC5mf JqYwTJcTQNqGgS7rsZpC32LWAekBD2yxgDGGaU+V+CWHzFBjc2/FblCBINqAI9bC 9ajPQZcjMJ3mPos+3tqm3vg27om4cIxkgzO9ZfYavnNcojIcfVMhL2ABANyEd5tW +QwulHjIEDrCi+SAOG7SNJwMskkN41VgQFyAwy8v083KhhQcVuIHgnkKzXXrQ9I+ MAbTBDMUy37uqmnSwdgNFx9TLdhaGccpcbzc3VTKu8ZKJ23CUzlIRVutM5zjQfNU bs+eaQk1s96/wTOBnV4WcN2Bn4yTlysB -----END CERTIFICATE-----Generated at Sun Aug 24 06:26:54 2025 by rpki-client