$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: ty7t0EKJopAT2D2Hs7ajR+nGjkqjv+Dgt9LfcwHQnIY= Subject key identifier: A8:5D:0B:09:E1:F6:31:59:AE:3C:E2:CE:74:7E:3A:6A:30:0F:E6:11 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0B4E Signing time: Fri 22 Aug 2025 21:01:24 +0000 Manifest this update: Fri 22 Aug 2025 21:01:24 +0000 Manifest next update: Fri 29 Aug 2025 21:01:24 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: zevvA/Nu+6KNTErTGGKWBviALvKfJ2zIM8ncME12uLY=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: yncjWp9xwqpvqOv+gMeMTuxPHETfxjYdM3Cwt+khuW8=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: leiC+N+7T7KBF8xTueIqh0RjFttyTRTBR+jUcxpvEWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Aug 22 21:01:24 2025 GMT Not After : Aug 29 21:01:24 2025 GMT Subject: CN=68a8daa4-77f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:ce:97:59:9a:b3:0e:88:2d:5f:02:4f:4b: 71:ec:d8:e8:c2:f5:0d:d5:db:df:c1:ad:37:98:71: e1:2c:eb:94:56:18:51:68:df:12:47:9a:d3:9e:34: 54:79:c0:f2:c8:d4:03:b7:80:db:c5:cf:2c:eb:74: 42:14:fc:4f:83:1b:5f:2a:06:18:4b:9d:74:d9:01: 5c:4a:56:2d:68:88:af:44:35:4b:fd:70:0b:a3:6c: 90:5f:af:28:94:93:78:b5:f0:9e:1f:89:f0:e9:9b: 2f:9c:8d:d6:ec:fa:f7:e6:a9:c3:15:9e:c9:cc:2e: 12:14:e1:07:d8:4c:a2:5e:cb:13:1b:87:f3:7d:fd: eb:6d:c8:a8:68:5e:87:8d:8c:b1:28:e5:52:c6:d6: b1:2d:ab:33:aa:55:84:fd:72:a6:36:7e:5c:9f:5e: df:f1:45:9f:be:04:d8:97:24:52:10:a0:fd:58:9a: 83:6e:29:16:cb:89:2f:d9:8e:10:2e:e0:2e:46:d0: 84:7d:ff:fd:42:e7:45:20:68:77:a3:1d:52:d9:ec: 51:68:0a:f4:3c:13:4f:e1:4d:de:82:c7:0b:53:e5: 7f:6a:6c:8f:ce:a1:44:f4:b9:da:c5:f6:5a:1f:6e: 73:fe:42:00:38:62:60:61:20:d1:18:d8:a3:3b:d0: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:0B:09:E1:F6:31:59:AE:3C:E2:CE:74:7E:3A:6A:30:0F:E6:11 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:35:c7:ed:ee:4e:40:17:9a:87:98:7b:3e:bf:2c:05:0f:8d: 6b:5d:09:39:c0:90:a6:29:c4:b8:3f:fb:3b:9b:02:26:ef:b3: 57:6b:80:50:91:df:07:30:12:b8:38:ad:c3:1f:17:e7:90:d9: e8:67:49:41:36:49:1c:61:02:19:fd:cd:06:7f:50:a9:d7:68: 93:49:17:fc:d0:0e:f7:1b:72:91:b8:7b:50:5c:d6:c8:b8:f6: aa:ee:9a:d1:6d:69:68:21:ef:bb:a1:a5:78:d9:cc:c3:8b:c7: ec:14:2e:70:ea:36:7b:90:ff:5e:1e:ed:1d:8f:3e:4f:50:78: bf:b6:91:15:ca:1a:e2:f1:ea:d9:c8:89:ff:ec:22:6d:64:b1: b7:e6:f7:6b:4a:a8:8a:33:50:9f:66:54:42:53:c7:e6:6b:31: e7:8c:2d:eb:77:6f:64:3c:28:97:4a:6f:86:70:3b:be:e5:e4: 03:fd:ff:31:1e:b5:db:78:79:84:e0:ab:e0:a1:3a:1c:46:60: ce:c8:53:1d:7e:84:f5:f2:c8:38:0c:b6:df:18:70:d9:f2:ba: 35:1c:a4:8e:29:19:74:33:2c:b2:68:a1:30:3d:b2:0e:41:4d: 77:22:01:5b:a5:71:9a:64:a1:d1:33:72:25:1c:83:3c:66:90: ea:52:d0:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwODIyMjEwMTI0WhcNMjUwODI5MjEwMTI0WjAYMRYwFAYD VQQDEw02OGE4ZGFhNC03N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbfOl1masw6ILV8CT0tx7NjowvUN1dvfwa03mHHhLOuUVhhRaN8SR5rTnjRU ecDyyNQDt4Dbxc8s63RCFPxPgxtfKgYYS5102QFcSlYtaIivRDVL/XALo2yQX68o lJN4tfCeH4nw6ZsvnI3W7Pr35qnDFZ7JzC4SFOEH2EyiXssTG4fzff3rbcioaF6H jYyxKOVSxtaxLaszqlWE/XKmNn5cn17f8UWfvgTYlyRSEKD9WJqDbikWy4kv2Y4Q LuAuRtCEff/9QudFIGh3ox1S2exRaAr0PBNP4U3egscLU+V/amyPzqFE9LnaxfZa H25z/kIAOGJgYSDRGNijO9CRtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhdCwnh 9jFZrjziznR+OmowD+YRMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXNcft7k5AF5qHmHs+vywFD41rXQk5wJCmKcS4P/s7mwIm77NXa4BQ kd8HMBK4OK3DHxfnkNnoZ0lBNkkcYQIZ/c0Gf1Cp12iTSRf80A73G3KRuHtQXNbI uPaq7prRbWloIe+7oaV42czDi8fsFC5w6jZ7kP9eHu0djz5PUHi/tpEVyhri8erZ yIn/7CJtZLG35vdrSqiKM1CfZlRCU8fmazHnjC3rd29kPCiXSm+GcDu+5eQD/f8x HrXbeHmE4KvgoTocRmDOyFMdfoT18sg4DLbfGHDZ8ro1HKSOKRl0MyyyaKEwPbIO QU13IgFbpXGaZKHRM3IlHIM8ZpDqUtCm -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:10 2025 by rpki-client