$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: o03UNB9g6+hDEz6NLxUZXSviVu3ES6b5C/cHeZFxMQ8= Subject key identifier: AA:78:20:E0:CE:0A:0D:83:67:56:91:AF:A0:DD:0A:5C:5A:3F:5C:71 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0439 Signing time: Sat 23 Aug 2025 00:31:21 +0000 Manifest this update: Sat 23 Aug 2025 00:31:21 +0000 Manifest next update: Sat 30 Aug 2025 00:31:21 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: XJ3pKVU0t5FizUpyeF6uwEYnX8NUwLgSl0o6Dy4WBCU=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Aug 23 00:31:21 2025 GMT Not After : Aug 30 00:31:21 2025 GMT Subject: CN=68a90bd9-06b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:ae:c0:77:2d:49:f1:d9:bc:36:0a:4d:5e: 2b:25:24:01:b0:75:ee:83:b9:9e:3c:71:81:d3:d8: 86:10:49:d5:4f:58:49:08:ba:38:6b:15:17:f4:f9: ea:2b:15:08:96:5f:e0:ac:20:3e:3e:47:c8:84:35: fc:d4:37:b8:e6:02:87:1d:4c:db:18:0e:f3:39:b6: ac:a9:42:cc:ab:80:e3:0e:b3:d1:06:32:19:dd:6e: 5f:e1:2c:06:2f:65:78:b5:a9:70:31:d9:94:f6:d4: 32:77:60:3f:1a:4e:20:b5:16:34:71:06:d1:9f:48: f2:24:11:a1:0a:c0:5f:b7:3c:8e:94:69:86:fa:35: 16:7d:ab:33:8a:0d:d6:de:15:27:24:ba:9c:03:cb: b7:bc:c1:a1:bd:56:47:d5:4a:e4:5e:05:03:24:98: 01:87:65:ac:84:fa:79:4d:d1:86:35:45:04:03:a7: fa:bd:62:2d:69:db:04:fb:84:eb:40:99:eb:ae:71: 56:0e:30:77:e3:d2:60:15:1d:85:90:b2:d1:b9:99: db:9a:c3:43:03:0f:29:e0:78:37:9a:d5:4b:04:e5: bb:39:96:f4:82:3b:d6:1b:fc:5a:ef:23:26:b3:b1: c8:bd:56:c2:e9:6f:be:03:a0:56:2c:fc:01:dc:27: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:78:20:E0:CE:0A:0D:83:67:56:91:AF:A0:DD:0A:5C:5A:3F:5C:71 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:08:6d:31:f1:49:e7:fe:5d:8c:0d:cd:c8:5f:3b:b2:4a:53: b8:0a:a3:ac:ec:56:3d:f0:28:f3:db:48:84:82:f7:4c:5c:be: 74:f1:0d:b2:2f:d1:3a:3c:c1:77:52:db:21:c9:86:c0:f9:07: 48:1e:f6:14:b2:0f:58:43:b2:f4:1c:f7:c9:e7:2a:56:6a:8b: a0:8e:32:e0:d3:af:9f:bf:4c:42:0d:9b:bd:2f:f3:26:82:3f: 2f:f1:3f:8f:8d:22:a6:ca:37:f9:40:c3:e2:84:7f:4b:2f:2c: 51:52:ea:ee:59:e8:44:33:25:58:18:91:5f:33:d3:59:3b:65: cf:f0:09:f3:2e:02:0a:cb:21:01:66:95:fc:63:66:1e:39:ce: cb:31:cd:11:c3:c7:e2:27:e6:4c:e6:48:be:a5:61:10:99:a6: 9d:88:1f:35:1d:10:04:4a:a9:68:46:3b:24:08:3a:40:5a:05: e8:09:bc:80:a6:f5:4d:fb:64:1c:8f:b4:4e:97:41:40:47:d5: c1:ce:c0:fd:8b:8c:8d:04:20:b6:e9:20:22:dd:aa:6b:6f:99: 31:da:28:f8:b6:24:29:8c:a0:a1:e3:54:b9:08:f6:e7:cd:b4: d7:41:a4:7f:cc:d6:23:08:a3:8f:ce:4e:05:1e:c3:a1:3e:5d: 50:d5:c4:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUwODIzMDAzMTIxWhcNMjUwODMwMDAzMTIxWjAYMRYwFAYD VQQDEw02OGE5MGJkOS0wNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ+uwHctSfHZvDYKTV4rJSQBsHXug7mePHGB09iGEEnVT1hJCLo4axUX9Pnq KxUIll/grCA+PkfIhDX81De45gKHHUzbGA7zObasqULMq4DjDrPRBjIZ3W5f4SwG L2V4talwMdmU9tQyd2A/Gk4gtRY0cQbRn0jyJBGhCsBftzyOlGmG+jUWfaszig3W 3hUnJLqcA8u3vMGhvVZH1UrkXgUDJJgBh2WshPp5TdGGNUUEA6f6vWItadsE+4Tr QJnrrnFWDjB349JgFR2FkLLRuZnbmsNDAw8p4Hg3mtVLBOW7OZb0gjvWG/xa7yMm s7HIvVbC6W++A6BWLPwB3CfTbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp4IODO Cg2DZ1aRr6DdClxaP1xxMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBACG0x8Unn/l2MDc3IXzuySlO4CqOs7FY98Cjz20iEgvdMXL508Q2y L9E6PMF3UtshyYbA+QdIHvYUsg9YQ7L0HPfJ5ypWaougjjLg06+fv0xCDZu9L/Mm gj8v8T+PjSKmyjf5QMPihH9LLyxRUuruWehEMyVYGJFfM9NZO2XP8AnzLgIKyyEB ZpX8Y2YeOc7LMc0Rw8fiJ+ZM5ki+pWEQmaadiB81HRAESqloRjskCDpAWgXoCbyA pvVN+2Qcj7ROl0FAR9XBzsD9i4yNBCC26SAi3aprb5kx2ij4tiQpjKCh41S5CPbn zbTXQaR/zNYjCKOPzk4FHsOhPl1Q1cRC -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:36 2025 by rpki-client