$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: g330UwRS4p62fpzYPU4eYgIi9dgHKeYjOiOh7j2i1/4= Subject key identifier: FC:1D:65:37:78:7B:7A:FD:49:C3:98:BF:1A:6F:D3:E6:9C:B7:AB:91 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C1C Signing time: Fri 22 Aug 2025 18:54:51 +0000 Manifest this update: Fri 22 Aug 2025 18:54:51 +0000 Manifest next update: Fri 29 Aug 2025 18:54:51 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: 9hxx4j9k173DiDVr9oShb3oenY/sykmxb+DnI3XvDVQ=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: vd/2YU/fZHY0X+88OePyC1GrfRf3guoIzxWdo48FOwA=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Aug 22 18:54:51 2025 GMT Not After : Aug 29 18:54:51 2025 GMT Subject: CN=68a8bcfb-574e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:62:c7:0d:8f:da:18:78:9c:de:61:7a:d4: 89:17:64:e7:81:cd:d6:55:2c:65:d0:aa:fc:ec:3c: 96:9c:d8:ed:27:fc:a3:59:50:2e:64:63:48:2f:21: bc:7c:4c:df:39:fa:d9:bf:e0:b1:7e:1a:1a:c0:f8: 51:aa:ab:b3:38:57:8a:bf:b1:a7:3b:11:a0:a8:e6: 93:38:1f:33:33:df:0c:fe:ec:62:96:4a:9c:68:61: d5:0e:e5:d4:7f:3a:40:b5:d6:83:57:bc:cd:4d:64: 04:5d:47:9c:73:a1:8f:54:bd:26:33:21:f1:5c:09: 0a:aa:2e:71:85:6c:5d:79:af:1a:32:8a:76:d0:5e: a1:d2:a5:e9:b2:2f:be:36:84:82:db:2f:30:9d:b5: 61:c7:f8:1e:66:08:16:7c:2f:fc:d9:07:b0:20:df: d6:ca:a7:93:fd:91:ed:7c:98:40:e4:05:79:9c:cc: 60:fc:6a:90:4d:6f:dd:f3:d3:36:37:52:38:68:ab: 87:9f:a7:fe:7e:c3:84:7e:39:46:1f:05:8d:6f:37: 8c:96:6b:22:df:56:26:2e:a5:f3:24:60:1f:64:20: a3:9d:8a:8b:ee:3c:c2:a4:be:07:de:6c:c5:ae:3e: 17:8d:d9:70:48:62:d8:cd:8d:82:a1:3f:77:03:38: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1D:65:37:78:7B:7A:FD:49:C3:98:BF:1A:6F:D3:E6:9C:B7:AB:91 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8f:93:27:03:ad:f1:32:cd:50:9a:c0:3b:2d:a2:0f:7e:56: 9f:26:97:41:46:46:0b:77:55:90:15:3e:bd:37:53:74:03:67: 24:31:8d:86:e9:6b:b1:a7:20:f6:86:68:40:f1:a3:a6:f1:a1: 87:e8:12:fd:30:c8:18:68:76:1f:af:ca:40:02:40:6a:f3:a3: f3:8c:aa:4a:24:e0:48:44:d4:40:e4:c0:89:72:7d:6f:09:96: 5f:a7:48:10:5c:e8:88:3b:7f:a7:22:ff:b9:49:d5:ec:b9:35: 9b:ee:0b:0d:06:c0:c4:8a:5d:1b:5b:45:a4:ad:53:eb:ea:05: b3:76:04:ce:32:b9:54:8e:ea:25:d2:c0:f1:a5:e6:cb:5e:19: f5:56:cd:59:85:77:06:90:5b:83:04:c4:13:db:80:c6:c4:84: a5:6f:89:8d:47:7a:df:bb:80:b1:2a:61:45:21:02:6a:1b:f4: 2a:c0:b5:9a:23:3d:bb:a2:58:01:a8:71:49:40:68:fe:f7:f9: 70:77:58:fb:a1:b5:7d:f2:7d:06:b5:50:97:db:75:3f:5c:5e: f6:f6:7c:34:08:00:87:2e:b2:df:67:1e:eb:bf:cb:6f:ab:4f: 4a:b1:0c:a5:8c:3f:43:06:88:a4:67:69:66:d8:16:9d:d1:64: 58:0a:ff:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUwODIyMTg1NDUxWhcNMjUwODI5MTg1NDUxWjAYMRYwFAYD VQQDEw02OGE4YmNmYi01NzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUFixw2P2hh4nN5hetSJF2Tngc3WVSxl0Kr87DyWnNjtJ/yjWVAuZGNILyG8 fEzfOfrZv+CxfhoawPhRqquzOFeKv7GnOxGgqOaTOB8zM98M/uxilkqcaGHVDuXU fzpAtdaDV7zNTWQEXUecc6GPVL0mMyHxXAkKqi5xhWxdea8aMop20F6h0qXpsi++ NoSC2y8wnbVhx/geZggWfC/82QewIN/WyqeT/ZHtfJhA5AV5nMxg/GqQTW/d89M2 N1I4aKuHn6f+fsOEfjlGHwWNbzeMlmsi31YmLqXzJGAfZCCjnYqL7jzCpL4H3mzF rj4XjdlwSGLYzY2CoT93AzjSFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwdZTd4 e3r9ScOYvxpv0+act6uRMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuj5MnA63xMs1QmsA7LaIPflafJpdBRkYLd1WQFT69N1N0A2ckMY2G 6WuxpyD2hmhA8aOm8aGH6BL9MMgYaHYfr8pAAkBq86PzjKpKJOBIRNRA5MCJcn1v CZZfp0gQXOiIO3+nIv+5SdXsuTWb7gsNBsDEil0bW0WkrVPr6gWzdgTOMrlUjuol 0sDxpebLXhn1Vs1ZhXcGkFuDBMQT24DGxISlb4mNR3rfu4CxKmFFIQJqG/QqwLWa Iz27olgBqHFJQGj+9/lwd1j7obV98n0GtVCX23U/XF729nw0CACHLrLfZx7rv8tv q09KsQyljD9DBoikZ2lm2Bad0WRYCv+f -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:17 2025 by rpki-client