$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: Wtv2URj509dUlBJmAo3vp5oX0EdT3Vk6Qq30USjdzik= Subject key identifier: 9B:FB:08:F8:B1:EA:3F:35:C1:39:BF:E2:DB:22:D1:BE:B7:19:AF:41 Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: A4 Signing time: Sat 23 Aug 2025 06:33:40 +0000 Manifest this update: Sat 23 Aug 2025 06:33:39 +0000 Manifest next update: Sat 30 Aug 2025 06:33:39 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: IHzcbKMNP6IlABTPBegA1i86eH1m49maSBwc1GE7g/Q=) 2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=) 3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Aug 23 06:33:39 2025 GMT Not After : Aug 30 06:33:39 2025 GMT Subject: CN=68a960c3-02e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e3:f4:ca:4b:b3:fc:90:bc:2d:b2:55:8a:a1: 7e:6f:3e:91:b4:86:1d:7b:9a:4b:0c:37:fa:12:17: 04:af:7e:a7:a9:5c:cb:fa:71:fb:95:e0:c6:d3:d2: 5e:2d:61:f2:ea:a1:3e:17:a8:be:cb:92:83:35:ee: 4d:6b:6d:ac:21:70:12:78:c5:58:e5:99:01:6a:7b: 71:c8:e1:02:04:34:8b:52:a0:7a:f4:7b:af:8b:7b: 68:1e:13:42:1b:33:f9:db:a4:9d:0c:9b:a9:69:48: 8a:0e:b1:f4:5a:06:9c:ff:8f:6b:64:60:80:a4:f0: 48:52:07:14:f8:4e:da:51:83:4f:1f:8f:fa:af:ba: ac:19:de:87:08:c9:3b:2a:36:04:2b:d4:cd:3f:b7: cb:1c:3e:4d:c6:bb:0f:ed:60:cc:27:d8:f0:e7:d5: 8f:89:05:b0:ea:59:69:b6:2c:7d:78:ad:ff:70:f6: dc:6e:ae:21:15:24:f2:ec:d7:87:0d:06:bb:05:47: 9e:c0:6a:d9:57:49:20:34:20:f1:81:9e:16:99:3b: 09:24:ff:30:ee:63:d6:57:1d:bb:55:18:1c:99:67: f4:13:80:d4:20:62:eb:f7:1b:b0:c4:17:4c:6a:20: c7:91:5e:d8:70:31:c2:78:b6:f9:0b:62:a7:3e:3b: d3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FB:08:F8:B1:EA:3F:35:C1:39:BF:E2:DB:22:D1:BE:B7:19:AF:41 X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:8f:19:a0:dd:20:0b:b2:82:41:dd:90:4b:a0:02:95:84:03: e8:3a:5e:ea:dd:c4:f3:82:87:9a:d1:99:3c:1d:90:8e:4a:f8: a2:b1:8d:7b:d8:d8:45:03:01:09:b7:b1:cd:9e:f9:1f:e6:8b: 20:dd:2c:84:63:29:a8:ae:93:aa:3c:6c:8e:f4:3b:79:8f:28: c3:ac:18:e9:45:df:c4:ef:48:3d:1a:db:59:d6:48:59:76:b3: 27:6f:94:1c:db:ab:46:2b:6b:85:8a:45:54:a6:c2:ae:0e:56: c5:a5:1c:a1:92:c7:9b:e3:ea:55:44:9f:0f:1d:68:53:a7:89: 3c:75:d3:19:5c:12:a9:d8:14:2a:e7:6b:bf:2d:df:77:fd:41: f9:f3:c9:31:b7:b3:e8:46:58:be:df:95:24:61:0d:26:49:39: 80:cc:6d:d5:a6:dd:3a:cf:8c:d8:d5:a5:e6:82:f5:d0:35:4c: 09:b2:76:44:0e:94:2b:22:f8:5c:ac:4d:33:d1:f8:dc:8c:8c: 71:7b:a5:2c:78:a8:f7:ed:34:46:1d:62:86:a2:6e:54:99:ef: 2b:74:d8:93:f5:6f:c9:3d:5c:cf:18:3f:34:51:66:09:46:a3: 03:7c:a8:b3:08:cb:3d:14:cd:04:c2:79:65:de:de:ca:8a:1d: 38:97:01:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE RTc2Qzg0QkMwHhcNMjUwODIzMDYzMzM5WhcNMjUwODMwMDYzMzM5WjAYMRYwFAYD VQQDEw02OGE5NjBjMy0wMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OP0ykuz/JC8LbJViqF+bz6RtIYde5pLDDf6EhcEr36nqVzL+nH7leDG09Je LWHy6qE+F6i+y5KDNe5Na22sIXASeMVY5ZkBantxyOECBDSLUqB69Huvi3toHhNC GzP526SdDJupaUiKDrH0Wgac/49rZGCApPBIUgcU+E7aUYNPH4/6r7qsGd6HCMk7 KjYEK9TNP7fLHD5NxrsP7WDMJ9jw59WPiQWw6llptix9eK3/cPbcbq4hFSTy7NeH DQa7BUeewGrZV0kgNCDxgZ4WmTsJJP8w7mPWVx27VRgcmWf0E4DUIGLr9xuwxBdM aiDHkV7YcDHCeLb5C2KnPjvTHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJv7CPix 6j81wTm/4tsi0b63Ga9BMB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyjxmg3SALsoJB3ZBLoAKVhAPoOl7q3cTzgoea0Zk8HZCOSviisY17 2NhFAwEJt7HNnvkf5osg3SyEYymorpOqPGyO9Dt5jyjDrBjpRd/E70g9GttZ1khZ drMnb5Qc26tGK2uFikVUpsKuDlbFpRyhkseb4+pVRJ8PHWhTp4k8ddMZXBKp2BQq 52u/Ld93/UH588kxt7PoRli+35UkYQ0mSTmAzG3Vpt06z4zY1aXmgvXQNUwJsnZE DpQrIvhcrE0z0fjcjIxxe6UseKj37TRGHWKGom5Ume8rdNiT9W/JPVzPGD80UWYJ RqMDfKizCMs9FM0Ewnll3t7Kih04lwEY -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:23 2025 by rpki-client