$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: Xq0+L7jkY7VvKSnzzWv27z+0KfB8xJLfikC5Plfsa8c= Subject key identifier: CC:A4:73:1B:78:5B:E8:6A:40:D6:44:39:01:74:95:8A:35:54:2B:84 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 65 Signing time: Sat 23 Aug 2025 07:15:12 +0000 Manifest this update: Sat 23 Aug 2025 07:15:12 +0000 Manifest next update: Sat 30 Aug 2025 07:15:12 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: DSIojah1Psr1l5Lgytk3fVbO4bcTGh+h8yhCMdNXN3c=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Aug 23 07:15:12 2025 GMT Not After : Aug 30 07:15:12 2025 GMT Subject: CN=68a96a80-3345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:88:a2:1c:fc:93:dc:ca:4f:7a:44:98:94: c3:2f:0c:f7:cd:e0:56:f3:91:77:96:3a:71:ac:66: 85:d3:b8:81:d5:60:86:8a:2d:68:ff:48:11:da:f5: 39:5f:4e:13:2b:24:b6:49:84:3f:7f:b1:cd:1f:84: 21:88:b4:44:4e:fb:de:34:eb:c1:52:5c:5f:65:d7: 51:0d:21:3f:62:9d:e0:1d:cb:73:de:0d:d7:c9:b4: b6:1a:5a:f2:a9:5f:c4:a0:c0:93:fc:8c:f9:3e:c4: 7f:7c:4c:5f:1d:93:15:ab:c3:34:4e:d2:70:dc:3c: 34:0d:95:81:53:36:07:a7:b1:1b:72:9a:56:2e:73: 55:22:ee:9d:27:66:16:9f:9b:83:3e:9b:78:17:e0: 89:cc:78:95:14:b0:e4:8f:67:93:23:8d:2e:6a:05: cf:53:7b:cf:0b:ae:90:50:fd:c7:28:32:47:15:ba: 14:01:30:d3:28:6a:b0:a9:b6:c0:a6:f1:2a:bb:fe: 9e:2e:26:c3:3b:6e:a0:63:21:7b:c6:16:98:74:f1: 3a:9a:73:d8:27:9b:5f:a6:01:fd:1c:cb:e4:03:f3: 35:17:1c:7e:9e:07:1d:78:ea:27:c9:0e:de:b7:92: 41:e4:5c:90:15:72:bd:2f:ed:e1:43:62:42:a0:d7: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A4:73:1B:78:5B:E8:6A:40:D6:44:39:01:74:95:8A:35:54:2B:84 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:ec:3d:fc:41:7f:4a:25:66:94:f6:84:79:a4:cc:52:42: f3:ff:84:fc:70:9a:5d:a9:7c:03:0b:02:53:50:72:84:a3:6a: 2f:94:58:26:40:0d:30:3e:e4:1e:ff:64:e3:d4:48:36:10:ee: 0c:36:d7:bc:60:c5:3a:83:39:ba:1b:9a:fd:2f:f6:63:b7:bd: fa:4f:a5:70:29:fd:f3:4f:d7:d0:38:5d:cf:c2:2d:65:6e:e0: a8:63:40:40:f9:7d:e7:2c:33:e8:a7:58:2c:79:71:cb:0f:ea: 7a:89:4a:5d:8f:60:e7:87:b7:a4:88:ef:15:16:26:28:ff:2d: e2:ab:20:8f:55:66:0b:e1:56:cc:00:e7:45:94:37:b6:87:b7: 32:c2:99:c4:b7:fb:17:16:ac:dd:c1:13:d2:68:e8:a6:46:8b: 1f:3d:41:5b:ba:fe:88:a1:87:bb:da:fd:4e:c9:65:92:ad:02: f8:96:f8:46:51:82:4f:55:1a:99:d9:6c:d8:5f:25:a8:9c:6e: 45:2a:0f:34:ce:19:65:8e:64:e1:75:aa:c8:87:7e:dd:fa:59: e4:c3:9f:c1:f6:6e:f9:f9:1e:b1:cf:ab:1a:5f:cf:f4:7e:7c: 6f:01:e9:7d:45:d8:4d:68:b9:09:82:3e:19:ca:fb:1a:5f:1d: c4:85:16:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoMDkwNjc4ODJDREMwMjAzNDkxNjFFMDkzQkYzNDczMUIz RjgyMkJENzAeFw0yNTA4MjMwNzE1MTJaFw0yNTA4MzAwNzE1MTJaMBgxFjAUBgNV BAMTDTY4YTk2YTgwLTMzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwDYiiHPyT3MpPekSYlMMvDPfN4FbzkXeWOnGsZoXTuIHVYIaKLWj/SBHa9Tlf ThMrJLZJhD9/sc0fhCGItERO+94068FSXF9l11ENIT9ineAdy3PeDdfJtLYaWvKp X8SgwJP8jPk+xH98TF8dkxWrwzRO0nDcPDQNlYFTNgensRtymlYuc1Ui7p0nZhaf m4M+m3gX4InMeJUUsOSPZ5MjjS5qBc9Te88LrpBQ/ccoMkcVuhQBMNMoarCptsCm 8Sq7/p4uJsM7bqBjIXvGFph08Tqac9gnm1+mAf0cy+QD8zUXHH6eBx146ifJDt63 kkHkXJAVcr0v7eFDYkKg13ajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzKRzG3hb 6GpA1kQ5AXSVijVUK4QwHwYDVR0jBBgwFoAUCQZ4gs3AIDSRYeCTvzRzGz+CK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0YzRDIyQzJDRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1FaNGdzM0FJRFNSWWVDVHZ6UnpHei1DSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0YzRDIyQzJDRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURT UlllQ1R2elJ6R3otQ0s5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTe7D38QX9KJWaU9oR5pMxSQvP/hPxwml2pfAMLAlNQcoSjai+UWCZA DTA+5B7/ZOPUSDYQ7gw217xgxTqDObobmv0v9mO3vfpPpXAp/fNP19A4Xc/CLWVu 4KhjQED5fecsM+inWCx5ccsP6nqJSl2PYOeHt6SI7xUWJij/LeKrII9VZgvhVswA 50WUN7aHtzLCmcS3+xcWrN3BE9Jo6KZGix89QVu6/oihh7va/U7JZZKtAviW+EZR gk9VGpnZbNhfJaicbkUqDzTOGWWOZOF1qsiHft36WeTDn8H2bvn5HrHPqxpfz/R+ fG8B6X1F2E1ouQmCPhnK+xpfHcSFFnI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:58:13 2025 by rpki-client