$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft File: 57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json) Hash identifier: gQPQegpXQgjCQ5m2i3otDpw/36IdRiVM1prIAWq/zyo= Subject key identifier: D1:FF:DE:68:30:F2:A5:93:83:5F:88:92:BB:AF:7D:7B:EC:EF:9C:51 Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Certificate serial: 0E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft Manifest number: 0E1A Signing time: Fri 22 Aug 2025 17:56:48 +0000 Manifest this update: Fri 22 Aug 2025 17:56:47 +0000 Manifest next update: Fri 29 Aug 2025 17:56:47 +0000 Files and hashes: 1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: tv5nmWGoIbCDpVI7wtfhEhg+NEUdEzW639fdGPaiv4g=) 2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=) 3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3625 (0xe29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Validity Not Before: Aug 22 17:56:47 2025 GMT Not After : Aug 29 17:56:47 2025 GMT Subject: CN=68a8af60-1c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ff:62:42:19:09:90:7f:df:d9:8b:5d:f6:4d: db:12:15:f5:5b:ad:72:28:d8:7b:6d:84:8b:4b:8b: 74:4f:f3:dd:21:38:82:fd:2e:1c:02:5b:ac:24:0a: 89:c7:43:0c:e7:25:4a:78:e9:3a:fe:2b:be:8a:aa: 14:77:b7:55:5c:16:fd:5b:1f:10:05:f7:5e:6f:90: c1:b3:fc:75:fb:a9:85:3d:29:37:b8:9b:8e:b3:ea: 4b:26:0d:b3:58:f4:12:29:3a:57:41:fe:a5:ea:e5: a2:ce:01:60:6c:09:62:8e:a3:20:43:c9:34:2b:1c: 94:b0:68:5a:70:b7:a5:6b:e7:ab:6b:4a:8f:f4:89: cf:a4:60:c5:37:13:72:f8:02:47:e8:31:76:08:b6: 68:80:32:96:76:19:96:1e:22:f6:7b:2c:83:d1:db: 6b:56:10:70:2e:c9:7b:e1:28:84:d2:08:80:2f:cf: a7:cb:0e:d1:e9:61:a7:38:33:70:eb:75:b8:29:1a: 9c:35:45:e6:a8:0d:14:cc:d9:a1:1c:82:78:30:c9: 70:c0:e6:82:c2:58:61:77:63:ef:dc:30:b9:cd:65: 7b:2b:b6:1a:88:ce:74:ff:2b:96:b6:24:d3:3d:33: 64:5a:1f:b6:c7:49:d7:48:10:d1:f1:3f:80:9e:2a: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:DE:68:30:F2:A5:93:83:5F:88:92:BB:AF:7D:7B:EC:EF:9C:51 X509v3 Authority Key Identifier: keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e7:88:03:30:f7:dc:59:c1:a4:f5:4b:71:fb:09:0d:f8:ac: 85:24:b8:57:dc:fb:fc:c0:b1:ca:39:ad:b6:8a:97:48:38:21: 82:67:58:f7:68:29:bd:be:19:4b:08:26:d4:f9:16:68:c8:2a: 04:fe:73:34:76:a1:a2:44:19:83:f5:02:46:d0:c5:fa:79:d2: f7:e5:48:67:ae:e5:81:9b:38:0f:de:2c:cc:3d:03:af:09:3c: 1e:f9:43:3f:7e:5e:43:fd:89:05:b7:c0:0e:3d:14:c5:ea:47: b6:49:3b:50:6b:3e:35:ab:68:05:68:fa:a2:bc:b8:e8:00:85: 98:4d:33:ba:d6:e4:b9:06:8a:25:ef:dc:e2:57:20:a0:b1:15: f1:55:e8:06:c0:4f:21:91:f6:67:f4:1a:58:45:ed:d8:cb:be: 9b:74:14:49:a3:40:a2:8a:84:2e:23:68:79:23:04:a6:11:6b: f6:97:5a:80:89:3e:b6:ea:33:c1:46:8f:6a:3d:04:8a:da:23: b1:f4:99:4e:82:00:ab:27:90:f2:28:7c:61:4f:7d:08:4b:dd: 09:96:fc:f1:ca:b1:6b:1f:d6:34:cc:c2:eb:29:47:c4:ce:f0: e5:9e:52:d8:8a:9c:31:52:f8:50:60:eb:33:5d:ac:ec:e4:57: c8:f8:80:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0 MUI4MzVFNjEwHhcNMjUwODIyMTc1NjQ3WhcNMjUwODI5MTc1NjQ3WjAYMRYwFAYD VQQDEw02OGE4YWY2MC0xYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7v9iQhkJkH/f2Ytd9k3bEhX1W61yKNh7bYSLS4t0T/PdITiC/S4cAlusJAqJ x0MM5yVKeOk6/iu+iqoUd7dVXBb9Wx8QBfdeb5DBs/x1+6mFPSk3uJuOs+pLJg2z WPQSKTpXQf6l6uWizgFgbAlijqMgQ8k0KxyUsGhacLela+era0qP9InPpGDFNxNy +AJH6DF2CLZogDKWdhmWHiL2eyyD0dtrVhBwLsl74SiE0giAL8+nyw7R6WGnODNw 63W4KRqcNUXmqA0UzNmhHIJ4MMlwwOaCwlhhd2Pv3DC5zWV7K7YaiM50/yuWtiTT PTNkWh+2x0nXSBDR8T+AniqyrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH/3mgw 8qWTg1+IkruvfXvs75xRMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzOS83MzBGMDBCMkIxQzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhy ME01eEliTncza2RCdURYbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA54gDMPfcWcGk9Utx+wkN+KyFJLhX3Pv8wLHKOa22ipdIOCGCZ1j3 aCm9vhlLCCbU+RZoyCoE/nM0dqGiRBmD9QJG0MX6edL35UhnruWBmzgP3izMPQOv CTwe+UM/fl5D/YkFt8AOPRTF6ke2STtQaz41q2gFaPqivLjoAIWYTTO61uS5Bool 79ziVyCgsRXxVegGwE8hkfZn9BpYRe3Yy76bdBRJo0CiioQuI2h5IwSmEWv2l1qA iT626jPBRo9qPQSK2iOx9JlOggCrJ5DyKHxhT30IS90JlvzxyrFrH9Y0zMLrKUfE zvDlnlLYipwxUvhQYOszXazs5FfI+IBw -----END CERTIFICATE-----Generated at Sat Aug 23 07:08:14 2025 by rpki-client