$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft File: daQM7SSsrWLFirKOoOD3xeXhx4g.mft (raw, json) Hash identifier: te6Omj8rh4SBKt81rdHkpqYpE8xEdS028N6/+PJH2FM= Subject key identifier: AC:BC:C9:0F:34:41:EF:5C:0C:7F:48:BB:EA:BF:EA:3C:6D:4F:19:8E Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft Manifest number: F5 Signing time: Sat 23 Aug 2025 05:29:01 +0000 Manifest this update: Sat 23 Aug 2025 05:29:00 +0000 Manifest next update: Sat 30 Aug 2025 05:29:00 +0000 Files and hashes: 1: daQM7SSsrWLFirKOoOD3xeXhx4g.crl (hash: 3N2Xge08qIhhtFNseuWAQt4aFPgISaSdjUgm2S4s3pQ=) 2: 7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (hash: zdRcs/c3Qf+J5jNCXqRvg7j/o5uxm8uN2Ag/dP0TR80=) 3: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (hash: jtXYMGmykeZR7pyJ+hI44NrwSSmB4SbOOgIv0/Ba41o=) 4: F22762F4741011EF9E049760C4F9AE02.roa (hash: iKwlRkuX69d7ZcvWspfzZHclIKmsaCHfYEvd4T/pvns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Validity Not Before: Aug 23 05:29:00 2025 GMT Not After : Aug 30 05:29:00 2025 GMT Subject: CN=68a9519d-be93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:bc:98:3f:a2:f2:ee:8a:f8:51:52:56:69: 67:e3:07:69:e8:d1:7a:1f:84:36:74:f3:83:01:27: c4:9c:a5:83:ff:78:6f:1e:44:8d:9e:57:33:73:2c: 10:97:2a:00:f5:f7:bb:a1:bd:be:10:a0:cc:d0:98: 49:c5:77:ac:a9:0d:e2:ef:3a:0c:f5:34:63:80:39: 4c:a9:86:a7:69:b3:6b:19:2a:ec:99:4e:4d:80:41: 68:57:84:d0:2e:08:19:0a:6a:e4:12:d5:48:a9:f6: 76:49:5f:d8:d6:6b:a2:53:74:a7:2a:c8:e0:cd:4a: f9:04:8e:65:85:74:7b:dc:e1:67:f0:66:e9:d8:70: f9:e1:46:6d:0a:23:c6:2d:0d:30:91:b8:d3:ad:a9: 74:1c:b1:d6:4a:8e:16:8e:57:ed:46:49:8d:34:ab: 7b:58:63:44:d3:c3:02:c6:18:ff:03:9f:5b:b6:6f: 96:16:94:1e:05:ad:18:52:84:ba:12:bc:ec:8c:d5: 34:bf:17:53:a1:32:fd:9c:f5:57:a7:48:0b:74:39: 18:e7:5c:99:9c:73:5d:6c:7f:0f:c4:86:8b:49:e9: 51:bb:76:96:f5:1d:e4:ff:4b:2f:f3:15:51:65:04: 6a:a0:5f:2d:98:4f:dd:50:29:a9:c7:dc:7e:10:5a: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BC:C9:0F:34:41:EF:5C:0C:7F:48:BB:EA:BF:EA:3C:6D:4F:19:8E X509v3 Authority Key Identifier: keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a2:01:5d:43:9c:72:e2:2f:f7:52:fe:a0:58:97:09:9b:11: 34:49:b4:f6:fc:0b:9f:91:36:ce:de:f4:6e:38:5a:a8:8a:d9: f6:26:79:54:db:53:7f:28:ed:64:88:ad:aa:42:fa:2b:70:9e: b8:e9:00:42:23:a1:ad:46:0e:6b:a1:3d:b8:56:fc:5e:c0:95: 08:11:5c:a3:2b:ae:08:b0:ff:6e:da:c5:56:59:f8:22:70:6b: 36:d5:ef:3f:60:ab:dc:9c:a0:24:b2:9e:c1:5e:c2:71:20:fd: 72:b4:b3:74:6b:f4:b3:da:dd:47:b9:75:45:24:14:6b:0c:94: d9:22:b4:74:45:83:c0:79:58:ab:ac:09:ac:cc:59:8c:63:29: b0:9e:46:bc:33:a5:8c:69:59:13:3b:91:82:2d:ab:a7:68:bf: 79:3d:9f:07:a3:97:01:54:fa:ed:bd:3d:93:85:93:2f:f1:0c: c9:a4:99:0e:d2:b8:60:b6:4d:9a:2d:84:f1:7b:75:01:d9:ac: 0c:60:67:35:a0:6a:d7:dd:ef:73:b6:6d:4a:3c:c3:f0:93:31: c4:00:f1:e1:72:51:55:bc:4c:81:08:78:95:41:af:c6:a3:10: 5b:6b:56:dd:2d:6d:04:24:f4:2f:7c:a4:81:7f:7b:69:2c:a6: e8:fb:40:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE4NjcxMTAvBgNVBAUTKDc1QTQwQ0VEMjRBQ0FENjJDNThBQjI4RUEwRTBGN0M1 RTVFMUM3ODgwHhcNMjUwODIzMDUyOTAwWhcNMjUwODMwMDUyOTAwWjAYMRYwFAYD VQQDEw02OGE5NTE5ZC1iZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN28mD+i8u6K+FFSVmln4wdp6NF6H4Q2dPODASfEnKWD/3hvHkSNnlczcywQ lyoA9fe7ob2+EKDM0JhJxXesqQ3i7zoM9TRjgDlMqYanabNrGSrsmU5NgEFoV4TQ LggZCmrkEtVIqfZ2SV/Y1muiU3SnKsjgzUr5BI5lhXR73OFn8Gbp2HD54UZtCiPG LQ0wkbjTral0HLHWSo4WjlftRkmNNKt7WGNE08MCxhj/A59btm+WFpQeBa0YUoS6 ErzsjNU0vxdToTL9nPVXp0gLdDkY51yZnHNdbH8PxIaLSelRu3aW9R3k/0sv8xVR ZQRqoF8tmE/dUCmpx9x+EFr60QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy8yQ80 Qe9cDH9Iu+q/6jxtTxmOMB8GA1UdIwQYMBaAFHWkDO0krK1ixYqyjqDg98Xl4ceI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTg2Ny84MTZFNzQ2MjE5 N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi9kYVFNN1NTc3JXTEZpcktPb09EM3hlWGh4 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhUU03U1NzcldMRmlyS09vT0QzeGVYaHg0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTg2Ny84MTZFNzQ2MjE5N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi9kYVFNN1NTc3JX TEZpcktPb09EM3hlWGh4NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ogFdQ5xy4i/3Uv6gWJcJmxE0SbT2/AufkTbO3vRuOFqoitn2JnlU 21N/KO1kiK2qQvorcJ646QBCI6GtRg5roT24VvxewJUIEVyjK64IsP9u2sVWWfgi cGs21e8/YKvcnKAksp7BXsJxIP1ytLN0a/Sz2t1HuXVFJBRrDJTZIrR0RYPAeVir rAmszFmMYymwnka8M6WMaVkTO5GCLaunaL95PZ8Ho5cBVPrtvT2ThZMv8QzJpJkO 0rhgtk2aLYTxe3UB2awMYGc1oGrX3e9ztm1KPMPwkzHEAPHhclFVvEyBCHiVQa/G oxBba1bdLW0EJPQvfKSBf3tpLKbo+0DP -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:22 2025 by rpki-client