$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: QqiTGWuNkDMDBkcAMViuv3jmalDtUmR7M9+w68NTjww= Subject key identifier: 52:64:E4:D1:8F:DE:1E:6A:68:7C:77:0C:87:53:5C:85:07:A4:38:60 Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1392 Signing time: Fri 22 Aug 2025 19:26:21 +0000 Manifest this update: Fri 22 Aug 2025 19:26:21 +0000 Manifest next update: Fri 29 Aug 2025 19:26:21 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: V4FtwNVJjmaGsl8GuyPNmhO869csYatZuVejkxbY/og=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Aug 22 19:26:21 2025 GMT Not After : Aug 29 19:26:21 2025 GMT Subject: CN=68a8c45d-b28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:dc:97:ef:b3:38:6f:39:b1:86:a8:d7:e1: d0:b7:7f:9c:63:cd:60:ec:06:93:52:d4:49:03:e9: b1:fd:5c:96:9b:c2:5b:15:20:1b:9e:d9:87:84:ba: 98:d9:87:9d:12:52:52:7b:b4:59:e8:15:12:c2:c3: 93:97:d8:be:dd:75:98:a8:1e:e8:22:c1:1e:36:cd: 21:96:b2:ff:e8:2f:92:e5:bd:b2:33:30:51:99:64: 85:b4:42:2c:71:61:49:7c:76:91:05:19:af:93:ac: 95:3a:60:5f:c6:2e:ca:a8:57:4d:f3:6a:40:d2:5f: 2f:98:06:94:e4:bf:f4:02:a0:b1:75:ef:84:60:95: 0e:69:e6:69:79:02:07:63:9f:bf:30:2a:54:bf:9c: 43:b7:66:62:77:74:b1:f9:50:0a:69:3a:f0:24:58: 53:4f:cf:a7:f0:20:be:2e:12:f8:51:33:92:bd:29: 20:65:13:2d:d8:e7:07:b6:c5:53:18:65:fa:18:1a: ea:bb:1c:16:cd:28:7b:ae:40:d5:df:61:99:88:65: a2:87:0d:d8:70:f5:9e:63:df:0d:79:eb:27:e0:18: 26:5e:bd:77:00:d4:1c:b8:a7:7d:d7:02:3d:75:08: 57:fd:c8:88:26:0b:67:20:bf:85:2d:e9:7a:15:c0: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:E4:D1:8F:DE:1E:6A:68:7C:77:0C:87:53:5C:85:07:A4:38:60 X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0d:50:6f:79:f9:a4:cf:66:2a:16:74:56:13:68:e5:d6:e4: ca:0a:38:45:e9:21:57:51:e9:51:ea:8c:87:77:90:95:cf:75: 2f:8c:2e:c2:8a:4a:97:f1:b3:41:ae:16:c4:e5:18:33:42:48: 52:85:95:62:5d:eb:f3:b5:cf:c7:18:00:57:d9:08:8d:08:d4: 7f:0a:28:83:bc:5a:eb:41:c4:93:40:83:28:fe:ea:46:99:ba: 02:33:e0:79:c6:8f:5f:9d:44:83:50:bd:3a:ff:23:46:ce:75: b4:52:dd:1d:8e:27:e0:ef:d1:83:3b:7d:c9:57:1d:1f:be:0d: 75:c3:9a:99:1a:cc:85:8e:a3:5e:dc:94:0c:83:a9:b9:b1:18: 02:1b:7a:a9:19:40:16:ea:cd:00:c3:4d:c5:1b:ab:17:58:70: 26:58:70:e3:57:57:23:b1:7a:34:37:d4:97:f2:ee:d7:d6:84: c6:17:c6:5c:6a:e3:18:c5:3e:8b:b3:7e:ff:e8:da:75:34:82: 85:37:84:06:a1:db:6c:3e:30:46:13:a2:35:76:f1:66:96:ab: 78:39:0b:a9:fd:e7:56:54:14:a5:cd:6c:7c:b9:d3:bc:77:41: 09:a7:fb:58:b7:ba:95:e9:39:80:52:9d:f8:d4:ab:e8:ff:87: bb:a6:a7:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTA4MjIxOTI2MjFaFw0yNTA4MjkxOTI2MjFaMBgxFjAUBgNV BAMTDTY4YThjNDVkLWIyOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSndyX77M4bzmxhqjX4dC3f5xjzWDsBpNS1EkD6bH9XJabwlsVIBue2YeEupjZ h50SUlJ7tFnoFRLCw5OX2L7ddZioHugiwR42zSGWsv/oL5LlvbIzMFGZZIW0Qixx YUl8dpEFGa+TrJU6YF/GLsqoV03zakDSXy+YBpTkv/QCoLF174RglQ5p5ml5Agdj n78wKlS/nEO3ZmJ3dLH5UAppOvAkWFNPz6fwIL4uEvhRM5K9KSBlEy3Y5we2xVMY ZfoYGuq7HBbNKHuuQNXfYZmIZaKHDdhw9Z5j3w156yfgGCZevXcA1By4p33XAj11 CFf9yIgmC2cgv4Ut6XoVwInVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUmTk0Y/e HmpofHcMh1NchQekOGAwHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkNUG95+aTPZioWdFYTaOXW5MoKOEXpIVdR6VHqjId3kJXPdS+MLsKK Spfxs0GuFsTlGDNCSFKFlWJd6/O1z8cYAFfZCI0I1H8KKIO8WutBxJNAgyj+6kaZ ugIz4HnGj1+dRINQvTr/I0bOdbRS3R2OJ+Dv0YM7fclXHR++DXXDmpkazIWOo17c lAyDqbmxGAIbeqkZQBbqzQDDTcUbqxdYcCZYcONXVyOxejQ31Jfy7tfWhMYXxlxq 4xjFPouzfv/o2nU0goU3hAah22w+MEYTojV28WaWq3g5C6n951ZUFKXNbHy507x3 QQmn+1i3upXpOYBSnfjUq+j/h7ump8k= -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:57 2025 by rpki-client