$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: UQXYBtDCwC0OroLnHGuGcYzZ8fpkXeHOhJNoWqIUf4w= Subject key identifier: 16:86:1A:13:84:82:91:DB:24:B3:8A:65:0D:9B:A2:8B:5C:31:BD:79 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AD4 Signing time: Fri 22 Aug 2025 19:35:16 +0000 Manifest this update: Fri 22 Aug 2025 19:35:16 +0000 Manifest next update: Fri 29 Aug 2025 19:35:16 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: 2n8tE8DPILNhX+CVXtbhso9axBvZl6QnU9WlgwcFzpc=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2784 (0xae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Aug 22 19:35:16 2025 GMT Not After : Aug 29 19:35:16 2025 GMT Subject: CN=68a8c674-b2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:12:7e:dd:c7:ba:51:ea:64:81:a7:1a:91: cb:7f:d9:db:72:b8:d5:ea:b9:28:49:0c:6d:91:aa: 21:bf:aa:ed:3c:2c:a5:40:d1:b2:d7:21:46:44:f0: 3f:79:31:3b:a8:ee:12:b7:09:db:f9:58:95:1e:82: 1b:6c:87:d0:cd:35:a1:28:6b:50:06:f3:6d:1d:10: dc:03:30:73:64:a4:d0:30:21:96:36:8d:c3:ae:4c: e8:e1:2d:0e:e8:31:0c:71:81:e5:59:da:5f:34:30: 43:ac:c7:f2:86:f4:b0:05:d9:7a:f8:53:9e:37:84: a6:a8:82:11:43:54:23:a4:af:06:28:80:51:19:0d: 17:87:a1:5d:5f:6c:5b:3a:38:fb:03:b4:a1:9f:66: b0:19:cb:ca:9e:db:7a:b3:7e:b3:9b:c0:eb:bd:ab: fc:63:98:a2:d3:d0:f9:74:42:2f:e2:a6:f3:fd:91: 78:6c:04:9d:18:fd:ac:a9:65:d0:d8:ac:ac:e1:04: b6:d4:9c:9e:19:ff:6a:09:2f:fa:e3:6a:44:fe:af: ff:ea:c2:6c:39:d7:91:fd:77:6f:dc:e2:00:74:e8: bf:05:ce:7b:38:e9:cd:42:ab:6a:61:c9:00:d8:aa: aa:8c:40:1c:83:c6:b2:01:bf:33:78:1a:e8:b8:05: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:1A:13:84:82:91:DB:24:B3:8A:65:0D:9B:A2:8B:5C:31:BD:79 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:4a:bc:b4:31:2e:d0:8b:fe:12:5b:cc:b7:f3:8f:e2:2b: 30:8f:9f:85:a0:54:e4:89:31:6a:3d:71:3e:ec:57:51:7e:fa: 03:ea:f4:a2:9c:15:51:38:f9:cf:07:9b:40:bb:a4:4a:79:f9: c8:83:11:b7:42:cf:7f:79:64:7a:47:a0:e3:b0:8a:5a:dc:bf: af:ee:0c:47:ff:b2:c8:fc:14:a8:53:e6:89:9f:a9:3f:d7:f5: 4a:9d:a4:78:06:5b:a4:b0:0c:ae:64:54:92:c3:e3:c9:c0:8d: 94:42:10:47:7a:1a:b2:57:80:02:d8:6c:06:f4:65:c0:04:07: 92:fd:e4:be:f0:00:98:23:a9:ce:e0:27:cc:aa:d8:a8:28:a8: be:0d:7d:79:43:14:37:cb:b5:14:be:4c:ee:df:f9:5b:49:f5: 60:26:5a:a0:65:1d:f7:b6:3f:4e:74:89:cc:9b:6f:99:73:7f: ac:c0:72:e9:9b:8d:98:5c:a0:bd:05:cf:e7:81:b7:b5:2c:03: ef:29:21:d0:21:b7:76:e7:81:74:d6:6c:64:9e:02:98:db:33: b3:ce:79:5a:db:b6:76:9b:85:dc:64:ad:0f:f0:2a:dc:1a:05: ee:28:9f:d7:f3:4b:61:9e:ae:d2:1a:9f:58:6c:6d:23:a6:63: 09:ad:34:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwODIyMTkzNTE2WhcNMjUwODI5MTkzNTE2WjAYMRYwFAYD VQQDEw02OGE4YzY3NC1iMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VsSft3HulHqZIGnGpHLf9nbcrjV6rkoSQxtkaohv6rtPCylQNGy1yFGRPA/ eTE7qO4Stwnb+ViVHoIbbIfQzTWhKGtQBvNtHRDcAzBzZKTQMCGWNo3Drkzo4S0O 6DEMcYHlWdpfNDBDrMfyhvSwBdl6+FOeN4SmqIIRQ1QjpK8GKIBRGQ0Xh6FdX2xb Ojj7A7Shn2awGcvKntt6s36zm8Drvav8Y5ii09D5dEIv4qbz/ZF4bASdGP2sqWXQ 2Kys4QS21JyeGf9qCS/642pE/q//6sJsOdeR/Xdv3OIAdOi/Bc57OOnNQqtqYckA 2KqqjEAcg8ayAb8zeBrouAXbNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaGGhOE gpHbJLOKZQ2bootcMb15MB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHlUq8tDEu0Iv+ElvMt/OP4iswj5+FoFTkiTFqPXE+7FdRfvoD6vSi nBVROPnPB5tAu6RKefnIgxG3Qs9/eWR6R6DjsIpa3L+v7gxH/7LI/BSoU+aJn6k/ 1/VKnaR4BluksAyuZFSSw+PJwI2UQhBHehqyV4AC2GwG9GXABAeS/eS+8ACYI6nO 4CfMqtioKKi+DX15QxQ3y7UUvkzu3/lbSfVgJlqgZR33tj9OdInMm2+Zc3+swHLp m42YXKC9Bc/ngbe1LAPvKSHQIbd254F01mxkngKY2zOzznla27Z2m4XcZK0P8Crc GgXuKJ/X80thnq7SGp9YbG0jpmMJrTSK -----END CERTIFICATE-----Generated at Sun Aug 24 05:22:06 2025 by rpki-client