$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: TivyrL7Q5S2Gjs7ZEqZUwMjTBt/2cecz+AWhFFXIqC4= Subject key identifier: 11:C6:C7:19:88:37:B4:8F:6D:6C:26:CD:7A:5E:40:0D:6E:5E:F7:FC Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C46 Signing time: Fri 22 Aug 2025 18:42:58 +0000 Manifest this update: Fri 22 Aug 2025 18:42:58 +0000 Manifest next update: Fri 29 Aug 2025 18:42:58 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: zAYaZwPkG6+JtS1y1oGLEmuQ+Ut/bk3C5M401IgRohc=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Aug 22 18:42:58 2025 GMT Not After : Aug 29 18:42:58 2025 GMT Subject: CN=68a8ba32-c7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:3b:0e:e3:34:f3:c3:06:97:08:ea:7f:f7: a7:d1:12:3d:91:04:b0:30:ab:48:c6:d9:e2:09:af: ea:f8:45:47:52:1a:fc:fd:55:bc:c5:03:8b:d7:64: 4c:91:41:7d:f1:02:1a:ca:9e:07:cb:29:85:67:ca: 2c:58:b2:fe:ad:48:69:76:29:d6:79:cb:9b:07:6a: 16:e1:3f:d2:c5:63:f5:9d:97:cf:41:25:91:cd:4a: 28:56:07:1b:f8:5f:31:6b:f6:66:9f:d0:7d:fa:d3: 98:e1:36:ae:fb:8b:7d:86:40:a0:9a:26:01:a0:a6: a5:79:46:0d:e2:11:e5:1e:8f:b5:25:4d:83:14:f9: 46:5a:26:9e:bc:a3:fd:ab:7f:bf:70:af:39:23:88: fb:0b:0b:14:41:95:1f:f3:7a:bf:1a:5e:2b:54:91: 30:d6:2b:d9:5b:86:75:40:fc:49:99:5d:32:99:8c: 3e:17:46:a0:3a:39:07:24:19:f7:56:a1:5c:5c:67: 2b:a3:11:e2:0d:70:d8:7f:78:06:8e:e7:51:ea:a2: 80:36:78:59:de:fb:b8:b8:13:31:66:d8:24:6e:33: 49:f3:e8:5b:a6:ca:46:d9:c9:29:e6:2c:76:40:8f: 3e:3f:42:67:53:0e:fd:f9:ff:98:a7:86:0b:ba:93: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C6:C7:19:88:37:B4:8F:6D:6C:26:CD:7A:5E:40:0D:6E:5E:F7:FC X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7d:32:dc:c0:54:3a:4f:0d:bc:3a:1b:04:c1:66:af:87:c0: ca:04:b7:bc:5c:f7:99:e5:d2:f0:dc:3d:d7:ce:ee:54:ee:e0: 41:a2:8e:ad:00:6f:89:0a:be:9a:99:b6:cb:9d:a5:d9:b3:35: ee:3d:e8:48:90:f0:f1:d0:d4:c9:c5:0b:c3:a5:79:fd:80:bb: 1a:17:fd:dd:1a:d3:fa:59:78:72:cd:77:d7:c2:1d:a7:7f:96: b6:c3:fd:5c:4f:9b:28:5d:b4:e2:b1:66:e3:ed:49:d5:0c:e9: 0b:ba:4e:c1:c3:40:a5:ed:59:cb:77:0c:ff:96:10:d6:19:d4: f5:23:27:92:13:c6:3e:58:cd:4c:df:3f:82:b7:bd:e7:79:10: 39:90:2d:47:c5:8e:bb:c5:66:3b:b2:e8:88:8e:a2:9e:3a:06: 2f:c9:84:bb:8b:d3:da:3e:98:6b:ba:35:0c:e3:1a:9b:d5:13: c9:cc:6f:59:9f:69:a7:27:a6:7a:c8:9b:ab:9b:a2:be:50:43: 6b:fe:12:72:24:0e:12:82:33:97:a7:c6:b2:f6:05:33:8e:aa: b0:11:72:c0:0a:7f:ff:b3:01:72:fd:e1:a4:f3:62:b0:52:1e: d0:bc:c8:e2:78:11:83:0d:89:ee:ab:8b:82:2a:4e:b5:b4:01: 10:f0:c8:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwODIyMTg0MjU4WhcNMjUwODI5MTg0MjU4WjAYMRYwFAYD VQQDEw02OGE4YmEzMi1jN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqg7DuM088MGlwjqf/en0RI9kQSwMKtIxtniCa/q+EVHUhr8/VW8xQOL12RM kUF98QIayp4HyymFZ8osWLL+rUhpdinWecubB2oW4T/SxWP1nZfPQSWRzUooVgcb +F8xa/Zmn9B9+tOY4Tau+4t9hkCgmiYBoKaleUYN4hHlHo+1JU2DFPlGWiaevKP9 q3+/cK85I4j7CwsUQZUf83q/Gl4rVJEw1ivZW4Z1QPxJmV0ymYw+F0agOjkHJBn3 VqFcXGcroxHiDXDYf3gGjudR6qKANnhZ3vu4uBMxZtgkbjNJ8+hbpspG2ckp5ix2 QI8+P0JnUw79+f+Yp4YLupNUrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHGxxmI N7SPbWwmzXpeQA1uXvf8MB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9fTLcwFQ6Tw28OhsEwWavh8DKBLe8XPeZ5dLw3D3Xzu5U7uBBoo6t AG+JCr6ambbLnaXZszXuPehIkPDx0NTJxQvDpXn9gLsaF/3dGtP6WXhyzXfXwh2n f5a2w/1cT5soXbTisWbj7UnVDOkLuk7Bw0Cl7VnLdwz/lhDWGdT1IyeSE8Y+WM1M 3z+Ct73neRA5kC1HxY67xWY7suiIjqKeOgYvyYS7i9PaPphrujUM4xqb1RPJzG9Z n2mnJ6Z6yJurm6K+UENr/hJyJA4SgjOXp8ay9gUzjqqwEXLACn//swFy/eGk82Kw Uh7QvMjieBGDDYnuq4uCKk61tAEQ8Mh0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:57 2025 by rpki-client