$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json) Hash identifier: GW9n+fJuQHD36GFo6yyLEXwdzsknE7dQ6lLD1Rikxkc= Subject key identifier: B1:B7:9A:B9:96:98:5C:86:D6:65:99:7A:54:66:E4:E1:73:C5:7F:78 Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft Manifest number: 0175 Signing time: Sat 23 Aug 2025 03:59:00 +0000 Manifest this update: Sat 23 Aug 2025 03:58:59 +0000 Manifest next update: Sat 30 Aug 2025 03:58:59 +0000 Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: edPZF6p/qRnckn1nv7abfZZWKpJb9dVi01vKn9IGxIQ=) 2: 3AB9E692C0D211EEB7BBBE4FC4F9AE02.roa (hash: A0mC9X2UnmVuFudZOyuXLKDdp8UzNcimAQJMyA4hcow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Validity Not Before: Aug 23 03:58:59 2025 GMT Not After : Aug 30 03:58:59 2025 GMT Subject: CN=68a93c84-aa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:6d:cc:9b:fb:66:eb:73:e2:3e:13:ef:79: 0f:cd:33:24:be:bf:39:75:9c:05:da:f6:91:4c:f8: 53:92:e6:72:ad:7d:a4:a1:41:3c:7c:1e:d9:34:c0: 9e:af:7e:37:13:70:2c:a8:e3:53:ff:bd:d0:fe:49: a3:db:e8:1b:da:f0:87:e9:6a:aa:55:a5:c9:47:8e: c8:cc:cf:53:39:4c:7d:a8:2d:a1:5b:a4:26:af:70: 69:01:81:5c:6b:7a:1b:5f:51:6a:37:27:e7:f1:8b: b0:41:c0:5f:59:47:77:a4:a4:f3:aa:85:4e:36:0d: bf:f4:67:64:d7:20:4a:6e:d9:e1:dd:0e:9c:41:fa: 54:1e:6f:2f:df:cc:b8:1f:9e:3c:48:1b:c5:4c:be: 61:f6:ac:87:71:d3:0a:66:c3:b6:53:62:ce:0e:14: 0b:9d:06:17:76:b2:d5:6d:81:ae:ef:4b:ad:01:b5: e9:aa:a2:73:d5:1e:2c:f7:3d:cb:99:4b:e0:f6:d6: 81:f6:f2:2d:ff:5e:fc:36:ee:03:d2:90:c5:ea:0c: 11:bf:7c:f2:ff:e0:92:64:4f:b8:e8:1c:0e:ef:04: 96:d6:3e:27:f4:0a:6b:12:20:1d:b9:69:6e:be:9c: 7d:77:cf:44:c8:96:d4:a3:0a:14:a9:74:70:31:d9: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B7:9A:B9:96:98:5C:86:D6:65:99:7A:54:66:E4:E1:73:C5:7F:78 X509v3 Authority Key Identifier: keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5c:1b:23:cc:67:7a:4f:28:fd:a3:89:73:c0:38:5c:cd:7a: 1d:03:59:97:cf:28:ff:e6:43:b5:63:50:16:32:77:13:01:70: 50:27:68:4d:78:bf:bb:ec:77:55:cc:b0:ae:17:d3:7e:b3:5f: df:01:ad:70:cc:cd:b3:92:45:8e:f9:ad:ba:01:63:02:de:ad: c8:5c:28:6b:73:d0:5d:df:d2:a6:1e:59:31:bd:18:74:18:7c: e5:95:0a:1d:14:b6:83:00:4a:68:82:a3:7b:b0:85:85:fb:19: 17:b4:ce:7d:f3:a1:3b:b9:a5:8c:f3:79:f7:0a:99:56:e2:e2: 65:f3:6d:f8:90:dd:c0:f3:31:76:a3:0b:8a:98:45:0e:01:09: 3a:15:0d:39:2a:af:e7:5b:37:03:61:12:46:2b:b8:4e:e4:5d: 1c:e6:48:fd:d2:ad:f0:80:66:68:73:f4:97:14:61:25:d5:60: 85:b7:52:46:5d:7f:43:89:2a:f2:ab:cf:32:e2:4c:b9:d6:eb: a3:a9:a4:60:9a:f7:f1:54:7e:22:f9:a2:1f:e1:16:b2:80:f4: c8:2d:01:65:59:95:0b:36:0e:70:13:7d:9d:e5:62:e7:02:c7: 77:32:b4:c6:22:41:94:c6:dc:67:16:2a:a2:78:8c:a3:7c:cc: ef:70:7c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0 QjkyQUQ4RDgwHhcNMjUwODIzMDM1ODU5WhcNMjUwODMwMDM1ODU5WjAYMRYwFAYD VQQDEw02OGE5M2M4NC1hYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14ltzJv7Zutz4j4T73kPzTMkvr85dZwF2vaRTPhTkuZyrX2koUE8fB7ZNMCe r343E3AsqONT/73Q/kmj2+gb2vCH6WqqVaXJR47IzM9TOUx9qC2hW6Qmr3BpAYFc a3obX1FqNyfn8YuwQcBfWUd3pKTzqoVONg2/9Gdk1yBKbtnh3Q6cQfpUHm8v38y4 H548SBvFTL5h9qyHcdMKZsO2U2LODhQLnQYXdrLVbYGu70utAbXpqqJz1R4s9z3L mUvg9taB9vIt/178Nu4D0pDF6gwRv3zy/+CSZE+46BwO7wSW1j4n9AprEiAduWlu vpx9d89EyJbUowoUqXRwMdk5LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG3mrmW mFyG1mWZelRm5OFzxX94MB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS UTZoWkdqZEZwVDVMa3EyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiXBsjzGd6Tyj9o4lzwDhczXodA1mXzyj/5kO1Y1AWMncTAXBQJ2hN eL+77HdVzLCuF9N+s1/fAa1wzM2zkkWO+a26AWMC3q3IXChrc9Bd39KmHlkxvRh0 GHzllQodFLaDAEpogqN7sIWF+xkXtM5986E7uaWM83n3CplW4uJl8234kN3A8zF2 owuKmEUOAQk6FQ05Kq/nWzcDYRJGK7hO5F0c5kj90q3wgGZoc/SXFGEl1WCFt1JG XX9DiSryq88y4ky51uujqaRgmvfxVH4i+aIf4RaygPTILQFlWZULNg5wE32d5WLn Asd3MrTGIkGUxtxnFiqieIyjfMzvcHxU -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:47 2025 by rpki-client