$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: e3PzYJgsVz9+OhTFP54t1lwifghbq3ohWINcIh6NrPo= Subject key identifier: 77:03:CD:62:F6:1D:F2:89:9D:C6:AC:C7:47:70:41:FF:CC:01:B7:B8 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 01F8 Signing time: Sat 23 Aug 2025 02:42:40 +0000 Manifest this update: Sat 23 Aug 2025 02:42:40 +0000 Manifest next update: Sat 30 Aug 2025 02:42:40 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: dtLuqPYJDj2qProGdeA8zJ5UM/hlUMcZPXv2sgoql7k=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: jnHEv+tk9LEmiC9T0eLpIu0ka8tlgw/1HGmQA/hDw9s=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: Tod+meVH3/YYDYyQo78I9vVyyLfaumC1ya5cnKT+hFM=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 3zWqR+4/bbh/62pxX54wkuJs0uKg6zeZhN4dCLWwFho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Aug 23 02:42:40 2025 GMT Not After : Aug 30 02:42:40 2025 GMT Subject: CN=68a92aa0-087b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:e7:f3:c5:a4:31:72:87:f6:eb:4e:e7:9b: ab:0e:2c:97:bd:a5:3b:48:8e:4b:1b:ea:61:56:f7: 7a:00:d9:f0:e6:00:a8:5f:02:18:63:31:ae:1e:15: 01:f1:0d:9f:ba:b7:c6:8f:4b:c3:f5:e4:4d:c5:58: 51:fe:ff:03:59:5a:cb:ac:26:a6:27:03:18:59:40: 7f:bc:8a:a1:a7:ad:7e:c0:23:af:9f:be:37:e2:06: c7:f7:ed:3a:1b:77:7c:04:10:1c:2f:2a:4e:9b:5b: e3:b4:a2:0c:c7:e7:7b:6d:27:a7:0a:11:cc:3f:2d: 9e:f3:85:0c:ac:fd:b9:73:5f:9f:b5:79:68:86:ad: a3:73:03:54:1c:e6:9b:d6:63:8f:8e:00:52:4b:0e: 21:54:1e:c7:f7:2b:4c:5d:ec:8e:ac:06:05:56:47: 5c:39:5d:9c:af:de:1e:52:83:88:f3:c3:1f:80:e0: c2:95:72:d2:f8:e8:f3:71:73:72:d2:43:90:31:2d: 9f:5f:36:8b:e0:bc:ac:7b:b7:eb:9a:b8:62:a1:56: 20:4c:3a:b4:ab:58:ef:c9:8c:8a:9d:a7:42:dd:16: 3b:1d:c2:ad:7a:77:d3:e3:d5:2b:75:23:0a:9b:e3: 6b:56:dc:a4:29:35:3d:f5:cf:5b:b9:a3:46:83:90: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:03:CD:62:F6:1D:F2:89:9D:C6:AC:C7:47:70:41:FF:CC:01:B7:B8 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:49:63:81:68:1f:42:fe:43:3e:af:01:5b:03:04:48:65:bd: 92:82:d5:bf:9b:31:39:ce:30:13:72:85:d5:0d:70:4b:a0:66: df:aa:92:e8:9e:ae:24:9d:62:3e:34:f8:f0:86:ab:03:22:96: 0a:80:45:38:e4:80:67:2d:9a:2d:3f:18:d2:3b:d7:37:b2:95: e8:95:0a:c1:32:47:03:c6:45:32:3f:01:fc:65:b7:eb:f2:55: 4b:d7:33:5f:46:59:a7:a3:df:75:de:37:c4:f2:03:2e:55:70: 8e:84:e7:41:c2:f2:a4:73:b3:64:13:fd:6e:72:90:03:92:ac: e9:ac:67:05:e4:16:e6:9e:fc:05:7d:35:87:07:1e:eb:50:cc: a9:39:1c:47:b4:f0:3f:92:b5:aa:d7:eb:44:4c:6a:2b:19:df: e6:2b:4b:62:28:3d:11:ec:a9:ce:fd:62:3b:ff:ae:07:b8:35: b1:d9:19:46:23:a0:35:fb:c9:1f:c3:e8:28:55:e8:3d:34:25: 8a:0a:9c:a9:bd:5a:83:c6:56:72:d7:42:9e:70:d7:2d:dc:c8: bc:45:d4:08:99:f7:5a:32:a7:48:e1:dd:cd:d2:49:fb:8e:90: 0f:46:a5:9e:72:fd:20:bf:21:16:c3:d3:c3:f0:6f:d1:8d:09: f7:9f:26:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwODIzMDI0MjQwWhcNMjUwODMwMDI0MjQwWjAYMRYwFAYD VQQDEw02OGE5MmFhMC0wODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKjn88WkMXKH9utO55urDiyXvaU7SI5LG+phVvd6ANnw5gCoXwIYYzGuHhUB 8Q2furfGj0vD9eRNxVhR/v8DWVrLrCamJwMYWUB/vIqhp61+wCOvn7434gbH9+06 G3d8BBAcLypOm1vjtKIMx+d7bSenChHMPy2e84UMrP25c1+ftXlohq2jcwNUHOab 1mOPjgBSSw4hVB7H9ytMXeyOrAYFVkdcOV2cr94eUoOI88MfgODClXLS+OjzcXNy 0kOQMS2fXzaL4Lyse7frmrhioVYgTDq0q1jvyYyKnadC3RY7HcKtenfT49UrdSMK m+NrVtykKTU99c9buaNGg5C0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcDzWL2 HfKJncasx0dwQf/MAbe4MB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjSWOBaB9C/kM+rwFbAwRIZb2SgtW/mzE5zjATcoXVDXBLoGbfqpLo nq4knWI+NPjwhqsDIpYKgEU45IBnLZotPxjSO9c3spXolQrBMkcDxkUyPwH8Zbfr 8lVL1zNfRlmno9913jfE8gMuVXCOhOdBwvKkc7NkE/1ucpADkqzprGcF5BbmnvwF fTWHBx7rUMypORxHtPA/krWq1+tETGorGd/mK0tiKD0R7KnO/WI7/64HuDWx2RlG I6A1+8kfw+goVeg9NCWKCpypvVqDxlZy10KecNct3Mi8RdQImfdaMqdI4d3N0kn7 jpAPRqWecv0gvyEWw9PD8G/RjQn3nyZY -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:06 2025 by rpki-client