$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: dXRAaKh6f9kzIRuify7PNyDGYKp1HERFP03uPEPR7Ao= Subject key identifier: 1A:40:68:58:AB:75:63:5E:07:BC:39:B3:FF:47:DE:B7:E8:4D:F9:7E Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04D8 Signing time: Sat 23 Aug 2025 00:00:21 +0000 Manifest this update: Sat 23 Aug 2025 00:00:20 +0000 Manifest next update: Sat 30 Aug 2025 00:00:20 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: 1EL873xoTjVC2TMAFyzzJRWvQhHIdJYAmBi0oi62be4=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Aug 23 00:00:20 2025 GMT Not After : Aug 30 00:00:20 2025 GMT Subject: CN=68a90495-8be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:67:07:2b:a3:a1:af:6f:b6:c3:e6:a4:d5: 89:48:66:6d:7f:cf:69:e7:b0:89:11:c9:72:d0:62: 52:39:66:dd:64:52:79:d5:1b:50:be:db:8d:e0:59: f1:90:94:52:fc:b9:8e:48:3e:2d:e3:b8:58:c6:5b: 80:a8:bc:ab:8a:35:9f:d2:1a:52:09:b2:b9:38:64: ba:4e:30:2d:b8:ef:63:47:6d:44:44:4b:d6:d5:5f: 24:f6:aa:c7:57:ec:a0:9f:17:22:4d:0e:b3:0e:61: a9:e4:7a:eb:8a:f3:7d:fd:c0:86:57:d1:2c:b5:79: 7e:70:b7:15:d9:b6:c7:73:00:f4:9c:e4:45:e7:c5: 77:34:2d:ae:f1:bd:7b:5e:ed:72:31:7e:97:de:2a: 47:65:db:16:03:d6:b7:fb:73:40:c5:f6:ec:83:94: c2:75:07:62:25:3b:ac:14:9a:02:ac:ad:31:53:cd: f1:78:58:2e:8f:28:2e:c6:04:05:56:61:23:5b:cc: 51:10:a2:1d:8a:b4:57:ca:94:73:19:1e:f7:34:84: c2:c0:62:60:72:aa:bc:02:85:e7:2f:17:4a:a4:96: 41:33:00:bd:51:3a:cb:05:d6:dc:57:25:cc:8b:43: 6f:a5:ef:d6:d3:20:39:06:cc:cc:8b:c0:d9:78:25: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:68:58:AB:75:63:5E:07:BC:39:B3:FF:47:DE:B7:E8:4D:F9:7E X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:17:80:9a:86:5a:06:74:14:a7:4b:95:10:52:28:8c:e4:8b: e5:f9:05:6f:ff:75:c2:2a:64:d5:f8:00:b2:84:ba:2e:e7:f7: e0:2f:43:a4:69:4d:83:e4:49:23:f1:01:21:a7:1d:5f:3b:93: 77:21:54:46:03:58:d5:e5:d6:b7:6c:53:ef:e3:de:95:29:7d: 23:2f:0e:2f:c3:fa:bb:5b:05:14:38:2c:c0:af:7a:8f:0e:37: 2c:f9:8f:1f:cf:01:c2:07:5b:78:eb:f1:a7:7d:06:f2:e0:ee: 2a:d1:f2:9f:f7:59:de:5d:89:6c:b2:ab:85:7c:d0:76:9d:5c: 97:9d:d4:6d:67:be:2d:fa:40:71:4e:38:e4:15:d6:fb:54:0c: 46:e9:f7:18:0f:41:02:b3:35:17:ef:3c:d1:49:ee:63:dd:db: d6:73:ee:e1:15:19:f0:16:e6:4e:e3:d7:b2:06:60:ed:85:7d: bf:4c:ca:32:9e:d6:5a:e5:19:b7:78:5c:0d:4d:cf:6a:74:64: bd:74:61:3c:a9:60:48:9a:60:ce:55:2e:f3:f2:06:0b:d9:97: dc:91:cb:91:40:9c:a0:37:ec:41:7d:81:06:f4:a4:25:8c:00: c9:ee:c1:41:4e:58:a5:b0:4b:91:e4:42:73:d0:ee:d1:dc:73: 32:45:28:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUwODIzMDAwMDIwWhcNMjUwODMwMDAwMDIwWjAYMRYwFAYD VQQDEw02OGE5MDQ5NS04YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eRnByujoa9vtsPmpNWJSGZtf89p57CJEcly0GJSOWbdZFJ51RtQvtuN4Fnx kJRS/LmOSD4t47hYxluAqLyrijWf0hpSCbK5OGS6TjAtuO9jR21EREvW1V8k9qrH V+ygnxciTQ6zDmGp5HrrivN9/cCGV9EstXl+cLcV2bbHcwD0nORF58V3NC2u8b17 Xu1yMX6X3ipHZdsWA9a3+3NAxfbsg5TCdQdiJTusFJoCrK0xU83xeFgujyguxgQF VmEjW8xREKIdirRXypRzGR73NITCwGJgcqq8AoXnLxdKpJZBMwC9UTrLBdbcVyXM i0Nvpe/W0yA5BszMi8DZeCUYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpAaFir dWNeB7w5s/9H3rfoTfl+MB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUF4CahloGdBSnS5UQUiiM5Ivl+QVv/3XCKmTV+ACyhLou5/fgL0Ok aU2D5Ekj8QEhpx1fO5N3IVRGA1jV5da3bFPv496VKX0jLw4vw/q7WwUUOCzAr3qP Djcs+Y8fzwHCB1t46/GnfQby4O4q0fKf91neXYlssquFfNB2nVyXndRtZ74t+kBx TjjkFdb7VAxG6fcYD0ECszUX7zzRSe5j3dvWc+7hFRnwFuZO49eyBmDthX2/TMoy ntZa5Rm3eFwNTc9qdGS9dGE8qWBImmDOVS7z8gYL2ZfckcuRQJygN+xBfYEG9KQl jADJ7sFBTlilsEuR5EJz0O7R3HMyRSjy -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:26 2025 by rpki-client