$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: gXUMIvOWOAyPz62TSZx7e4MSooj9PLR4s7YDxfbuALM= Subject key identifier: AC:36:E4:1D:FF:54:74:97:9B:0B:23:CD:80:53:AB:8A:8C:6A:07:68 Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1BA9 Signing time: Fri 22 Aug 2025 16:20:18 +0000 Manifest this update: Fri 22 Aug 2025 16:20:17 +0000 Manifest next update: Fri 29 Aug 2025 16:20:17 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: tkkHRhRXrS4FyM1ibsn4Mq3x8JxI1HrftCDmeOvltY4=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7104 (0x1bc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Aug 22 16:20:17 2025 GMT Not After : Aug 29 16:20:17 2025 GMT Subject: CN=68a898c2-d9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:67:87:1e:92:86:60:03:09:30:68:4c:76: b9:1d:22:73:8e:26:c9:e4:3f:ca:d7:3f:93:22:ab: 8d:e7:7b:39:e4:56:6a:4c:ea:39:c3:78:91:a8:36: 87:e6:8c:eb:e7:bd:54:8f:50:42:61:c9:53:57:55: ba:f3:52:37:3b:74:67:4d:67:17:ed:7d:bf:29:34: 35:6d:00:cb:0a:69:95:74:63:a7:82:ee:3f:6b:0c: 23:f5:23:2e:7e:24:36:91:be:40:1a:78:67:ed:5b: ed:da:d9:bc:eb:90:a8:1c:da:47:2b:7d:e6:6c:00: e7:01:ed:f6:bd:c4:d7:8c:7a:e7:dc:b0:27:d1:9d: db:33:ea:23:b3:a6:e7:5a:3b:ed:da:ff:fc:2b:2b: 93:ae:79:35:54:27:16:32:38:28:2d:56:34:74:66: 60:e9:ce:33:86:e1:6a:ca:18:01:70:03:f5:82:c9: d0:a1:10:60:da:84:57:38:3f:49:c2:0b:0e:e2:29: cc:56:94:da:b6:04:cf:fd:7b:1b:19:06:81:f3:e0: e9:e6:c8:90:86:d4:27:32:ca:fa:e4:5e:1d:54:ef: 7c:e3:ad:dd:27:ac:0c:a0:1a:fb:67:dc:11:0d:7f: e0:6d:69:8c:6c:87:53:46:b1:45:ec:2f:98:9f:0f: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:36:E4:1D:FF:54:74:97:9B:0B:23:CD:80:53:AB:8A:8C:6A:07:68 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f7:bb:6b:9a:68:25:dd:b5:6d:86:42:f9:1b:d5:2f:e2:fd: 1f:20:03:f7:d0:9e:05:f1:b4:b6:d5:8c:94:a2:19:11:85:23: 4d:00:fc:e8:f7:48:47:30:d3:f7:99:59:1d:2d:93:f8:b0:13: 51:50:01:5c:e6:d5:88:02:e0:54:91:11:aa:17:64:0c:d8:f3: 19:7a:81:76:89:70:d7:65:13:46:58:89:3d:74:a2:65:f1:55: dd:3d:1f:29:6a:22:c4:52:76:0a:84:a3:67:7c:4c:43:3c:72: 5b:27:f7:e6:c5:1c:0d:ac:aa:54:a5:19:3f:60:9b:e8:c0:1d: d1:18:45:ac:d5:d4:f2:70:28:af:ff:05:e1:5e:91:f5:ac:3f: 1c:44:e5:d9:40:b9:45:52:9d:00:5b:99:30:37:b5:15:36:b4: 92:c4:28:3d:52:d8:04:20:2c:b8:3c:a3:12:55:ef:09:ab:79: f2:27:8f:e6:fb:6e:85:16:a7:1a:05:82:6c:76:8c:95:7f:09: 07:eb:dc:e6:40:9b:e1:c1:b7:63:e6:07:fb:0d:35:2d:42:1c: fe:aa:72:19:1a:b9:27:04:2d:44:a8:db:dc:3a:75:31:8c:40: 5a:1f:7c:49:b1:2f:0d:f2:57:0c:d0:ec:0d:34:7f:e7:8b:16: c8:e6:bc:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUwODIyMTYyMDE3WhcNMjUwODI5MTYyMDE3WjAYMRYwFAYD VQQDEw02OGE4OThjMi1kOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6Nnhx6ShmADCTBoTHa5HSJzjibJ5D/K1z+TIquN53s55FZqTOo5w3iRqDaH 5ozr571Uj1BCYclTV1W681I3O3RnTWcX7X2/KTQ1bQDLCmmVdGOngu4/awwj9SMu fiQ2kb5AGnhn7Vvt2tm865CoHNpHK33mbADnAe32vcTXjHrn3LAn0Z3bM+ojs6bn Wjvt2v/8KyuTrnk1VCcWMjgoLVY0dGZg6c4zhuFqyhgBcAP1gsnQoRBg2oRXOD9J wgsO4inMVpTatgTP/XsbGQaB8+Dp5siQhtQnMsr65F4dVO98463dJ6wMoBr7Z9wR DX/gbWmMbIdTRrFF7C+Ynw9YZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKw25B3/ VHSXmwsjzYBTq4qMagdoMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy97trmmgl3bVthkL5G9Uv4v0fIAP30J4F8bS21YyUohkRhSNNAPzo 90hHMNP3mVkdLZP4sBNRUAFc5tWIAuBUkRGqF2QM2PMZeoF2iXDXZRNGWIk9dKJl 8VXdPR8paiLEUnYKhKNnfExDPHJbJ/fmxRwNrKpUpRk/YJvowB3RGEWs1dTycCiv /wXhXpH1rD8cROXZQLlFUp0AW5kwN7UVNrSSxCg9UtgEICy4PKMSVe8Jq3nyJ4/m +26FFqcaBYJsdoyVfwkH69zmQJvhwbdj5gf7DTUtQhz+qnIZGrknBC1EqNvcOnUx jEBaH3xJsS8N8lcM0OwNNH/nixbI5rzB -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:16 2025 by rpki-client