$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json) Hash identifier: JbaP+3wfluJRqWkb8+ljyZkDaS9sP4G7SEu0wJOLPyo= Subject key identifier: E5:40:28:62:C4:03:E2:E9:E9:F1:AA:CB:CC:58:F9:2A:80:A6:21:6F Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft Manifest number: 01A8 Signing time: Sat 23 Aug 2025 03:20:18 +0000 Manifest this update: Sat 23 Aug 2025 03:20:17 +0000 Manifest next update: Sat 30 Aug 2025 03:20:17 +0000 Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: nTWJRGaliZ+xbejVvrtqmXfKLLdQOlSqiGuoVDdRJFM=) 2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: obDYb1FFvr0mB7iBHTgY83tEv9YylCIEzp5d/KneH78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Validity Not Before: Aug 23 03:20:17 2025 GMT Not After : Aug 30 03:20:17 2025 GMT Subject: CN=68a93372-ebc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f6:5d:82:93:13:50:31:84:b0:49:58:9a:de: c3:45:9e:2a:cc:da:11:02:74:96:6b:b3:2d:b4:9d: bf:51:61:0a:1b:f2:ea:c9:c4:36:6d:7f:02:dc:44: a7:10:b0:99:3b:38:45:b8:33:6c:29:01:91:81:0b: 2a:38:99:fd:52:65:92:00:86:03:21:9f:1b:ab:10: 1b:b1:1d:8f:74:ba:b3:ff:47:5d:62:82:66:84:ab: 1d:24:ae:bf:34:47:c9:ec:a8:55:9d:d6:42:95:fb: c1:c2:18:82:91:73:26:f2:25:54:50:10:e7:00:6e: 1d:57:8e:cc:dd:aa:18:53:e9:71:46:36:d9:26:91: b8:cf:6b:79:2a:df:be:4d:79:b2:52:da:ef:41:d9: 3a:1f:15:e4:b3:5d:6a:9f:0f:e9:4c:f4:95:45:b6: eb:54:53:35:41:32:46:87:93:ee:55:15:8f:57:65: 94:7a:6b:8a:9a:73:71:dc:72:2e:83:94:e3:a7:54: f9:16:bb:a9:a5:8d:04:68:c8:ea:ad:56:ae:ac:78: 6a:d3:00:e6:fe:e1:54:2f:81:2b:32:65:ba:72:24: 1c:39:67:ae:82:4e:85:0a:f3:bc:94:7b:07:e3:4b: 1f:a5:54:e6:2c:9d:93:77:38:9a:76:c9:fe:82:08: 5d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:28:62:C4:03:E2:E9:E9:F1:AA:CB:CC:58:F9:2A:80:A6:21:6F X509v3 Authority Key Identifier: keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:45:f3:49:9b:d8:ec:da:45:42:c5:e3:b4:90:08:96:7d:6a: 38:fb:19:c3:e6:f6:72:50:7d:55:1a:b4:2e:7c:8f:ad:32:a7: fd:61:85:eb:98:40:39:ab:69:38:85:9e:94:4f:7c:4b:d9:97: dc:10:2d:1e:56:2b:ba:e6:37:be:23:e8:17:4d:cf:51:ab:06: d9:0b:bf:08:08:e5:c9:84:3c:df:85:b9:9f:aa:78:bb:ed:7a: 93:89:54:41:e6:ed:b4:37:9b:22:9d:7d:2e:95:a4:2c:b8:e7: 8a:1e:ac:64:a2:58:36:b0:60:2e:79:39:2f:d6:86:8d:0e:1c: 96:59:31:37:7b:6b:c1:42:d4:44:4c:ee:f8:91:b1:5b:59:be: a1:c9:0f:69:56:b8:39:e1:7b:de:d8:ec:ac:e7:cd:7f:88:76: d8:a8:e3:b3:cb:70:1c:94:27:91:05:bd:76:16:c1:1e:78:0c: cf:21:5d:97:1e:a7:0c:f5:aa:07:14:ad:01:45:3a:74:64:cb: 01:2e:1d:c7:a8:b4:16:5c:b4:1f:2d:4e:81:15:bf:ec:bb:26: 41:58:02:55:49:5c:c2:34:0c:25:fb:ce:ac:58:57:5c:eb:f1: a5:2d:07:f3:dd:af:39:f0:d0:54:5f:c9:c5:9b:a0:f6:d5:03: 2d:bb:5f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx QjZGQ0M5M0QwHhcNMjUwODIzMDMyMDE3WhcNMjUwODMwMDMyMDE3WjAYMRYwFAYD VQQDEw02OGE5MzM3Mi1lYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vZdgpMTUDGEsElYmt7DRZ4qzNoRAnSWa7MttJ2/UWEKG/LqycQ2bX8C3ESn ELCZOzhFuDNsKQGRgQsqOJn9UmWSAIYDIZ8bqxAbsR2PdLqz/0ddYoJmhKsdJK6/ NEfJ7KhVndZClfvBwhiCkXMm8iVUUBDnAG4dV47M3aoYU+lxRjbZJpG4z2t5Kt++ TXmyUtrvQdk6HxXks11qnw/pTPSVRbbrVFM1QTJGh5PuVRWPV2WUemuKmnNx3HIu g5Tjp1T5FruppY0EaMjqrVaurHhq0wDm/uFUL4ErMmW6ciQcOWeugk6FCvO8lHsH 40sfpVTmLJ2Tdziadsn+gghdiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVAKGLE A+Lp6fGqy8xY+SqApiFvMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4 NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5 aGhWZHBSOWExNHdiYjh5VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlRfNJm9js2kVCxeO0kAiWfWo4+xnD5vZyUH1VGrQufI+tMqf9YYXr mEA5q2k4hZ6UT3xL2ZfcEC0eViu65je+I+gXTc9RqwbZC78ICOXJhDzfhbmfqni7 7XqTiVRB5u20N5sinX0ulaQsuOeKHqxkolg2sGAueTkv1oaNDhyWWTE3e2vBQtRE TO74kbFbWb6hyQ9pVrg54Xve2Oys581/iHbYqOOzy3AclCeRBb12FsEeeAzPIV2X HqcM9aoHFK0BRTp0ZMsBLh3HqLQWXLQfLU6BFb/suyZBWAJVSVzCNAwl+86sWFdc 6/GlLQfz3a858NBUX8nFm6D21QMtu18B -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:35 2025 by rpki-client