$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: 0ZWA7yc4APaY22AWMo8+hlrybBpAk8UNltrc3/GcCC4= Subject key identifier: 7B:B9:EF:CC:9C:CB:66:EC:95:9D:3E:EC:B4:EE:07:61:47:7E:A7:D0 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 01A2 Signing time: Sat 23 Aug 2025 03:26:38 +0000 Manifest this update: Sat 23 Aug 2025 03:26:37 +0000 Manifest next update: Sat 30 Aug 2025 03:26:37 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: 4MRUT+iv5VlabXRLREU4QQNz5OVZuX0qYmNCaP36/2U=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Aug 23 03:26:37 2025 GMT Not After : Aug 30 03:26:37 2025 GMT Subject: CN=68a934ed-2e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:8c:13:4f:2a:ea:52:6e:69:ca:08:67:48: 03:ff:d8:74:15:f6:37:23:dd:55:a0:57:43:8d:54: 59:01:47:9b:1c:d2:c6:70:fa:47:00:57:d1:b0:c4: b8:70:94:9b:51:98:f3:c8:80:31:b4:c3:b6:3a:53: 9d:66:63:e7:ef:9d:8b:c9:04:8e:ce:9d:39:e2:63: 79:10:ef:e9:19:b4:fa:5d:59:45:17:94:3e:a8:a5: 11:92:9b:a2:38:da:f1:b3:35:c1:83:4f:43:af:bb: 22:84:b6:a6:a6:df:88:42:81:b7:c8:b0:77:69:20: c1:a5:87:9d:63:c0:ba:24:9b:d5:70:8e:76:5d:9a: 64:21:e2:92:34:ae:a8:b5:d3:e6:5d:74:a6:6b:86: 78:27:56:3f:4d:da:3a:45:31:d9:df:7b:c3:55:c4: 52:4e:03:bd:09:e0:54:a2:ad:88:ed:f3:d8:b0:b7: 1f:c4:28:9d:5c:74:17:14:86:54:e9:37:20:8d:c4: 19:87:c0:71:d7:61:6d:6b:c2:28:7e:af:16:43:a5: 72:5d:19:ea:f6:d4:f7:1e:b0:61:6a:06:d3:ea:53: 49:45:a4:26:15:00:db:54:f4:f2:dd:00:c6:68:19: a5:f7:e3:df:7b:65:b3:be:2f:e7:1b:b3:81:b6:6a: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:EF:CC:9C:CB:66:EC:95:9D:3E:EC:B4:EE:07:61:47:7E:A7:D0 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:93:16:1b:05:71:26:f6:1b:84:25:4d:8f:89:a2:59:a7:74: f4:2f:19:22:a4:fe:a5:3d:bc:41:ec:e5:a9:91:1d:fb:5e:54: 09:e8:65:cc:5d:08:ab:6a:30:d1:ae:ce:4e:eb:d5:be:c8:52: 6a:d5:85:48:f5:91:86:f4:da:09:8e:90:51:48:3c:53:06:63: e5:83:bf:23:78:c9:48:08:99:de:1a:cd:47:3f:5a:e5:52:d9: 5f:ee:d3:7a:3b:69:96:c3:df:c1:ac:2d:a0:37:96:83:16:25: cb:22:68:e6:38:f5:8c:9c:a0:20:84:95:e0:b0:b2:89:a3:79: 03:7e:e3:9f:a5:6e:f9:64:30:4d:6d:c9:3f:f7:1c:82:b7:7a: 21:d5:9d:14:3d:d2:0f:41:44:2a:87:aa:70:8a:34:0e:1c:db: a2:45:50:1a:f3:e1:c5:23:44:41:48:1d:f1:75:49:05:5b:28: 00:da:89:4d:8a:c4:68:97:9c:48:f9:02:58:0b:bc:8a:12:34: 1d:f1:85:f7:d6:75:1c:4d:d2:4a:49:eb:ee:e1:c9:ac:80:04: 1e:af:d3:ca:26:bb:8f:49:5a:5c:91:fe:14:f8:2b:0d:55:16: a2:8a:18:67:16:d1:9d:f8:4e:10:c2:ba:34:95:52:0d:56:ad: a3:56:e5:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUwODIzMDMyNjM3WhcNMjUwODMwMDMyNjM3WjAYMRYwFAYD VQQDEw02OGE5MzRlZC0yZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwaME08q6lJuacoIZ0gD/9h0FfY3I91VoFdDjVRZAUebHNLGcPpHAFfRsMS4 cJSbUZjzyIAxtMO2OlOdZmPn752LyQSOzp054mN5EO/pGbT6XVlFF5Q+qKURkpui ONrxszXBg09Dr7sihLampt+IQoG3yLB3aSDBpYedY8C6JJvVcI52XZpkIeKSNK6o tdPmXXSma4Z4J1Y/Tdo6RTHZ33vDVcRSTgO9CeBUoq2I7fPYsLcfxCidXHQXFIZU 6TcgjcQZh8Bx12Fta8Iofq8WQ6VyXRnq9tT3HrBhagbT6lNJRaQmFQDbVPTy3QDG aBml9+Pfe2Wzvi/nG7OBtmq1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu578yc y2bslZ0+7LTuB2FHfqfQMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqkxYbBXEm9huEJU2PiaJZp3T0LxkipP6lPbxB7OWpkR37XlQJ6GXM XQirajDRrs5O69W+yFJq1YVI9ZGG9NoJjpBRSDxTBmPlg78jeMlICJneGs1HP1rl Utlf7tN6O2mWw9/BrC2gN5aDFiXLImjmOPWMnKAghJXgsLKJo3kDfuOfpW75ZDBN bck/9xyCt3oh1Z0UPdIPQUQqh6pwijQOHNuiRVAa8+HFI0RBSB3xdUkFWygA2olN isRol5xI+QJYC7yKEjQd8YX31nUcTdJKSevu4cmsgAQer9PKJruPSVpckf4U+CsN VRaiihhnFtGd+E4Qwro0lVINVq2jVuXX -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:39 2025 by rpki-client