$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: d99YceVtkdOiWN9V1rIGROT620do2ZOk1Mk6MCKoTdE= Subject key identifier: 78:5F:DE:03:C6:99:E1:40:B7:D9:65:F4:55:E8:B0:92:8B:C4:ED:03 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 019C Signing time: Sat 23 Aug 2025 03:27:23 +0000 Manifest this update: Sat 23 Aug 2025 03:27:22 +0000 Manifest next update: Sat 30 Aug 2025 03:27:22 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: HTw5bVVvUcJbQnDwGEO0+C2hilluh9x/72NBip3zjuo=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Aug 23 03:27:22 2025 GMT Not After : Aug 30 03:27:22 2025 GMT Subject: CN=68a9351b-4e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:ea:4d:91:80:17:73:90:a9:7c:96:de:2f: 39:e4:4a:53:e6:75:6a:a7:d4:28:af:5b:27:5d:72: e0:76:64:92:ff:17:42:27:03:ee:bd:2d:eb:28:ff: 69:c2:18:b1:b4:84:3a:17:5d:eb:f7:2b:60:53:7a: 3a:4e:c2:60:84:3b:81:02:23:ae:ae:45:36:92:32: 9f:84:a4:c6:a2:85:b7:b6:12:77:98:b5:1b:0d:de: 7c:f5:ad:a1:42:33:cd:78:18:7b:4f:da:cf:76:1b: ba:d5:81:b6:3d:3a:98:98:13:ba:b0:19:82:dd:b5: cc:49:ab:53:b0:a0:6e:1b:61:7b:a8:8c:15:81:a9: a6:27:11:10:33:90:e6:10:86:e8:fb:b2:1d:79:88: 7d:04:df:7b:57:ca:80:02:5a:c6:51:5a:2b:b6:2b: bd:bf:e8:da:ff:ab:77:24:de:80:cd:c2:1f:3e:61: 72:31:96:a5:89:31:46:09:1e:a7:6b:ca:cb:e3:43: 85:0d:72:a6:36:d1:26:c4:38:52:9c:1e:51:f7:f8: 05:e8:ba:29:c4:d4:3a:00:2e:07:54:32:a6:6b:e0: 46:3f:3b:44:6c:68:56:aa:52:7d:b4:18:37:6e:ea: 86:35:b1:b3:f9:6d:5a:4d:a6:61:1e:f7:5b:ae:67: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:DE:03:C6:99:E1:40:B7:D9:65:F4:55:E8:B0:92:8B:C4:ED:03 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:30:40:c0:6a:57:3b:44:50:17:60:10:85:a2:77:b5:7c:56: 0c:f0:65:0d:c4:9b:b9:c6:a3:41:26:27:30:57:22:5f:21:e7: 4b:01:ea:3e:fb:ae:30:c3:44:39:01:75:42:7e:60:84:65:af: b1:d4:69:0b:82:90:57:14:f0:a0:3d:99:23:cc:3e:b4:be:8f: 4d:f3:d3:64:ce:ab:f4:8e:6e:7f:19:60:5c:ae:98:33:7c:f7: 12:f5:48:c0:19:23:05:11:7b:7c:5a:7d:41:75:6a:4e:2d:4a: 50:0e:49:ac:4c:8b:c2:e1:ea:ef:30:7b:0c:6e:12:de:3c:5b: 6a:3e:5e:24:69:f1:c1:43:34:86:10:35:89:9f:35:12:9f:ea: 31:76:ea:44:e4:e5:e2:b3:e2:7e:e9:ec:df:70:ec:e4:8c:1d: 9f:08:d6:fb:57:c5:06:e0:bb:ee:a0:c6:34:a3:3c:c2:f8:4b: 1e:69:c5:24:f1:5d:a8:d3:f4:74:b6:1d:f1:a3:ce:f3:16:21: a0:00:fd:67:c6:4e:04:df:2a:22:aa:c6:32:46:5b:59:90:72: 23:42:4d:57:49:b9:9c:8f:1b:cd:49:ea:1f:cb:05:7d:97:d7: 43:9b:3e:23:25:56:d4:39:f5:e0:d4:66:fd:f5:42:67:18:d1: 5f:e4:94:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwODIzMDMyNzIyWhcNMjUwODMwMDMyNzIyWjAYMRYwFAYD VQQDEw02OGE5MzUxYi00ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bnqTZGAF3OQqXyW3i855EpT5nVqp9Qor1snXXLgdmSS/xdCJwPuvS3rKP9p whixtIQ6F13r9ytgU3o6TsJghDuBAiOurkU2kjKfhKTGooW3thJ3mLUbDd589a2h QjPNeBh7T9rPdhu61YG2PTqYmBO6sBmC3bXMSatTsKBuG2F7qIwVgammJxEQM5Dm EIbo+7IdeYh9BN97V8qAAlrGUVortiu9v+ja/6t3JN6AzcIfPmFyMZaliTFGCR6n a8rL40OFDXKmNtEmxDhSnB5R9/gF6LopxNQ6AC4HVDKma+BGPztEbGhWqlJ9tBg3 buqGNbGz+W1aTaZhHvdbrme+IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhf3gPG meFAt9ll9FXosJKLxO0DMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQMEDAalc7RFAXYBCFone1fFYM8GUNxJu5xqNBJicwVyJfIedLAeo+ +64ww0Q5AXVCfmCEZa+x1GkLgpBXFPCgPZkjzD60vo9N89Nkzqv0jm5/GWBcrpgz fPcS9UjAGSMFEXt8Wn1BdWpOLUpQDkmsTIvC4ervMHsMbhLePFtqPl4kafHBQzSG EDWJnzUSn+oxdupE5OXis+J+6ezfcOzkjB2fCNb7V8UG4LvuoMY0ozzC+EseacUk 8V2o0/R0th3xo87zFiGgAP1nxk4E3yoiqsYyRltZkHIjQk1XSbmcjxvNSeofywV9 l9dDmz4jJVbUOfXg1Gb99UJnGNFf5JTi -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:59 2025 by rpki-client