$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: Syp6+DpgM2IjBwXevyOgT9lLLho30yn9mSeYBnBbO9M= Subject key identifier: AB:69:34:F7:A4:C2:7C:73:D2:2E:4C:5A:BE:7E:30:DC:A3:55:F2:16 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 0130 Signing time: Sat 23 Aug 2025 04:40:25 +0000 Manifest this update: Sat 23 Aug 2025 04:40:25 +0000 Manifest next update: Sat 30 Aug 2025 04:40:25 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: 24OAL2W81TfbZn4z1zGR/y6fKM51QQCH+qdkemP1gfE=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Aug 23 04:40:25 2025 GMT Not After : Aug 30 04:40:25 2025 GMT Subject: CN=68a94639-e204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:7e:0e:04:1e:4c:76:b6:f6:d1:6a:0f:c4: 24:2b:0a:5a:32:1b:82:c9:ff:dd:3a:9b:a3:71:1e: 60:bd:9e:07:ba:ad:65:d0:73:1f:a0:f4:8b:72:5a: 3d:2b:1d:9d:45:54:63:a8:a6:29:a7:a5:35:0c:11: 9f:01:d8:3c:2a:7b:bf:1b:89:e7:ae:45:f4:15:76: d5:68:e9:27:84:2f:a3:d6:6a:44:45:8c:73:28:46: 74:55:03:16:6c:f2:2e:aa:11:ea:dc:b4:33:36:2b: 9a:98:36:16:cb:6d:7c:5f:38:fe:a3:55:03:98:81: c3:77:c2:70:f8:ff:9b:d9:02:85:9f:b5:71:8a:00: fa:17:44:aa:d4:4f:84:f6:2a:c6:32:36:25:7f:f9: c0:cc:fe:24:f3:52:b9:17:0a:f0:93:3b:e5:79:13: d4:ed:2b:59:58:93:54:92:fb:ac:e5:64:51:3d:de: 6b:5d:fc:96:47:c4:cd:e5:10:fe:0c:e4:a7:6b:6d: 00:a0:12:e4:28:4c:d7:d1:14:26:90:da:0e:58:66: 9b:57:bf:1a:fe:ec:28:fe:02:13:ac:ed:36:6c:34: 2b:26:91:a4:45:a7:2b:ed:c3:24:22:c9:15:c5:5c: 19:95:5a:8b:a8:68:e8:1d:67:ed:ca:60:24:b1:04: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:34:F7:A4:C2:7C:73:D2:2E:4C:5A:BE:7E:30:DC:A3:55:F2:16 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:eb:e1:06:a6:35:98:be:c9:15:f8:f7:99:3e:c5:7a:ad:0e: c9:b6:41:58:67:46:69:fa:b3:16:d4:7c:b4:da:0e:c8:b8:e2: b2:57:d0:38:81:3e:44:4e:f8:0a:4e:3f:3d:8f:ec:8b:ac:5f: 49:42:f9:10:63:0b:76:e7:b6:7d:95:fd:f8:a3:51:0e:7a:0d: fb:94:c0:0e:8c:b5:29:4f:e4:d5:75:a4:4f:6e:20:00:20:39: 16:74:8a:42:e6:df:4f:bb:98:71:f5:33:fd:4e:38:87:fa:30: f9:1c:ae:2a:ca:3f:38:1b:73:71:53:29:2c:39:2b:9c:00:75: 6a:c3:56:95:16:23:6a:1f:cc:69:69:cf:65:ff:2e:3f:c9:9d: d2:b6:9b:af:bc:df:8c:bd:4f:9e:5f:96:f3:3f:c3:7d:a3:38: 6d:f8:be:ae:aa:7d:7e:47:b9:12:32:de:21:c5:3a:ed:da:f2: b7:6e:c8:76:39:f6:1c:65:11:46:22:bb:10:a1:dc:41:ef:7b: 5d:bf:48:59:fa:cc:6e:3a:e8:98:26:b3:02:67:27:87:9b:69: fa:f0:22:5c:36:d9:79:4a:11:73:c5:db:f6:fe:fc:a5:56:0c: 70:b0:7f:cb:30:7c:c4:d4:9f:f1:b0:ea:b5:b9:46:a4:5a:7a: 4e:39:c1:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwODIzMDQ0MDI1WhcNMjUwODMwMDQ0MDI1WjAYMRYwFAYD VQQDEw02OGE5NDYzOS1lMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P5+DgQeTHa29tFqD8QkKwpaMhuCyf/dOpujcR5gvZ4Huq1l0HMfoPSLclo9 Kx2dRVRjqKYpp6U1DBGfAdg8Knu/G4nnrkX0FXbVaOknhC+j1mpERYxzKEZ0VQMW bPIuqhHq3LQzNiuamDYWy218Xzj+o1UDmIHDd8Jw+P+b2QKFn7VxigD6F0Sq1E+E 9irGMjYlf/nAzP4k81K5FwrwkzvleRPU7StZWJNUkvus5WRRPd5rXfyWR8TN5RD+ DOSna20AoBLkKEzX0RQmkNoOWGabV78a/uwo/gITrO02bDQrJpGkRacr7cMkIskV xVwZlVqLqGjoHWftymAksQSjFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtpNPek wnxz0i5MWr5+MNyjVfIWMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO6+EGpjWYvskV+PeZPsV6rQ7JtkFYZ0Zp+rMW1Hy02g7IuOKyV9A4 gT5ETvgKTj89j+yLrF9JQvkQYwt257Z9lf34o1EOeg37lMAOjLUpT+TVdaRPbiAA IDkWdIpC5t9Pu5hx9TP9TjiH+jD5HK4qyj84G3NxUyksOSucAHVqw1aVFiNqH8xp ac9l/y4/yZ3StpuvvN+MvU+eX5bzP8N9ozht+L6uqn1+R7kSMt4hxTrt2vK3bsh2 OfYcZRFGIrsQodxB73tdv0hZ+sxuOuiYJrMCZyeHm2n68CJcNtl5ShFzxdv2/vyl VgxwsH/LMHzE1J/xsOq1uUakWnpOOcFU -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:30 2025 by rpki-client