$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: ixC7QmOlBjwZshTA+dWNOX5tnS0XgpVPwAIM8NOOBuc= Subject key identifier: ED:22:F9:5B:51:FB:50:E2:B1:35:61:06:7B:4F:54:D6:7E:4F:CB:75 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: EB Signing time: Sat 23 Aug 2025 05:31:24 +0000 Manifest this update: Sat 23 Aug 2025 05:31:23 +0000 Manifest next update: Sat 30 Aug 2025 05:31:23 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: 1LKN9K64ai4U6AD4uAN/fpOrUSllpVx/E8h8wkNKel4=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Aug 23 05:31:23 2025 GMT Not After : Aug 30 05:31:23 2025 GMT Subject: CN=68a9522c-cc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:b2:d9:11:08:32:4b:41:37:85:71:ea:c0: 9f:01:7a:8c:76:a1:f0:c3:dd:44:5b:86:fb:b0:ff: 3e:4e:01:eb:23:44:fe:27:bf:ca:c3:9a:43:6c:f9: 11:cc:ff:67:d9:70:3f:9d:92:3d:f4:e4:c4:78:99: 0f:20:60:3a:44:3e:0b:50:a0:31:07:6f:d0:d9:46: 99:90:42:9d:b1:71:33:5d:58:de:7b:e7:57:ac:25: 0b:8e:56:6a:1a:9d:e5:ff:84:b0:bb:35:8c:09:07: ca:a4:e2:1b:0f:52:2f:09:f5:82:8e:a5:3d:7a:9f: 5a:a4:ea:cf:f1:82:68:36:58:02:9f:03:d6:e2:36: db:58:3c:2a:45:4d:9a:d0:f7:c6:36:be:7a:08:fe: d7:17:d3:26:b8:69:6e:86:86:02:e0:05:02:bc:f8: 58:9b:92:79:30:df:89:2c:b7:0e:5d:fe:2f:c7:f1: a7:04:9e:b2:73:47:a6:a6:e0:20:c2:c8:80:95:47: aa:ce:29:30:72:d8:7f:53:6e:c5:3b:43:a6:fa:e5: 28:75:25:50:7d:90:5b:76:da:31:af:eb:bf:d9:1e: 1c:b0:87:31:f5:73:19:7e:6c:96:2b:61:4c:04:19: a5:be:44:77:5a:b7:0f:12:bc:1e:62:2d:00:c8:f3: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:F9:5B:51:FB:50:E2:B1:35:61:06:7B:4F:54:D6:7E:4F:CB:75 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:7f:de:71:45:7f:38:54:54:21:81:90:64:af:c0:11:cb:4b: ce:a5:f0:c5:ff:40:ce:9f:73:d7:a5:d7:e0:64:15:d4:de:18: ba:f9:22:b2:75:a8:0b:5b:ad:01:6e:96:57:ae:ad:47:c2:d4: ef:8d:77:24:88:9e:6b:25:e7:61:88:c7:b8:be:b7:96:54:50: db:76:cf:09:c4:7d:54:e9:f8:a6:6e:dd:57:5f:39:27:b8:45: 96:36:a2:1d:94:2c:83:14:b9:16:ce:5d:21:66:45:46:fb:2f: 29:3d:8b:dd:2b:99:92:03:af:37:8f:1c:7c:08:da:40:fa:59: 1c:84:05:9a:4e:1d:34:d3:b0:d6:44:5f:ab:e4:dd:41:b8:9b: 60:32:64:22:5e:c0:c8:a1:18:92:4d:3d:19:61:e4:c5:f6:8b: 0e:01:1b:d1:02:33:40:df:a7:89:b2:ff:56:46:5e:81:8c:80: 40:28:96:65:ea:ca:5a:a9:7c:60:03:46:17:ed:77:f3:6d:d9: 45:32:87:01:49:6a:08:3e:b6:02:e1:ab:d9:bb:da:ab:05:2d: 3d:81:68:4d:33:49:09:cc:27:49:78:e9:63:f2:17:f2:27:8c: 35:18:5b:42:ed:0c:f7:15:b3:fe:1a:14:d6:f7:e5:4e:01:bb: 70:4b:59:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwODIzMDUzMTIzWhcNMjUwODMwMDUzMTIzWjAYMRYwFAYD VQQDEw02OGE5NTIyYy1jYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxriy2REIMktBN4Vx6sCfAXqMdqHww91EW4b7sP8+TgHrI0T+J7/Kw5pDbPkR zP9n2XA/nZI99OTEeJkPIGA6RD4LUKAxB2/Q2UaZkEKdsXEzXVjee+dXrCULjlZq Gp3l/4SwuzWMCQfKpOIbD1IvCfWCjqU9ep9apOrP8YJoNlgCnwPW4jbbWDwqRU2a 0PfGNr56CP7XF9MmuGluhoYC4AUCvPhYm5J5MN+JLLcOXf4vx/GnBJ6yc0empuAg wsiAlUeqzikwcth/U27FO0Om+uUodSVQfZBbdtoxr+u/2R4csIcx9XMZfmyWK2FM BBmlvkR3WrcPErweYi0AyPMdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0i+VtR +1DisTVhBntPVNZ+T8t1MB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCf95xRX84VFQhgZBkr8ARy0vOpfDF/0DOn3PXpdfgZBXU3hi6+SKy dagLW60BbpZXrq1HwtTvjXckiJ5rJedhiMe4vreWVFDbds8JxH1U6fimbt1XXzkn uEWWNqIdlCyDFLkWzl0hZkVG+y8pPYvdK5mSA683jxx8CNpA+lkchAWaTh0007DW RF+r5N1BuJtgMmQiXsDIoRiSTT0ZYeTF9osOARvRAjNA36eJsv9WRl6BjIBAKJZl 6spaqXxgA0YX7XfzbdlFMocBSWoIPrYC4avZu9qrBS09gWhNM0kJzCdJeOlj8hfy J4w1GFtC7Qz3FbP+GhTW9+VOAbtwS1kk -----END CERTIFICATE-----Generated at Sun Aug 24 04:34:56 2025 by rpki-client