$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: CYOQ/PD47hdRZJJaJEhgnTSflNF73D1NvGL8jeEjt1g= Subject key identifier: 43:2C:52:18:A0:27:AF:F2:DB:0D:41:B8:4E:0E:78:54:81:2C:9C:F7 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E22 Signing time: Fri 22 Aug 2025 17:56:17 +0000 Manifest this update: Fri 22 Aug 2025 17:56:17 +0000 Manifest next update: Fri 29 Aug 2025 17:56:17 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: K2EY6SDbBqskPCvQeb9IR5ytMvA/lWIEwB1cZam/CxU=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3627 (0xe2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Aug 22 17:56:17 2025 GMT Not After : Aug 29 17:56:17 2025 GMT Subject: CN=68a8af41-180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:f0:46:89:89:a9:22:68:84:e3:5f:11:2c: a2:cb:b0:22:bd:e3:f1:e3:4f:4f:ab:b6:73:f7:24: 4e:20:67:fc:6d:13:17:72:12:a5:93:3d:b0:2e:83: 1a:6c:81:2f:f9:c3:ff:ad:17:85:c4:19:22:9d:91: 44:10:de:23:c7:d1:63:b8:74:84:2f:7d:5b:78:5f: d1:7b:9e:38:70:1d:d8:ed:89:d0:2e:17:cb:47:f1: ba:20:a0:8a:cd:70:8c:b2:20:b5:a9:b4:b9:7c:dc: 82:1e:fc:82:ff:7c:31:31:7e:26:03:1c:3f:2b:a6: 3e:b9:75:df:44:c9:e5:54:06:95:51:21:51:ff:ea: 9d:4b:ab:36:7c:d7:80:1b:66:3d:cc:76:d8:52:1f: ec:8e:0f:fa:d6:68:0e:50:4c:15:19:0f:5c:a4:0d: fa:c9:9b:9b:19:fa:70:e4:6b:4e:c4:a0:8a:f9:9d: 44:a2:15:c4:f3:d3:bd:d8:ab:b3:c7:8e:0b:fc:b0: a6:68:c3:44:49:84:a4:b9:82:2a:26:00:27:e1:8e: e2:60:de:6c:22:71:69:c9:6c:8c:f4:a6:a8:f6:e1: 2c:3c:75:7f:e2:69:85:cc:6e:dd:45:c1:32:aa:63: e1:fa:9e:3a:21:58:e3:fb:f3:4e:05:b2:70:5c:e2: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2C:52:18:A0:27:AF:F2:DB:0D:41:B8:4E:0E:78:54:81:2C:9C:F7 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d2:21:64:07:0a:66:e9:41:57:ee:01:14:1a:e4:25:38:55: 13:fa:57:ae:b0:be:12:af:cf:cf:c0:19:df:29:b0:14:1e:12: 0f:5d:bb:a8:c5:f5:38:0c:46:46:6e:32:52:db:8b:6e:0a:d1: 98:e3:f7:d9:13:be:14:e0:b8:cd:7a:5f:dc:e4:70:8f:72:c6: ba:b6:0e:cc:56:75:66:ef:b1:f2:d5:d4:de:c3:72:d0:c2:ea: a0:e3:8b:20:9d:d2:8d:cf:7a:6a:62:b0:44:1f:0a:45:9f:88: 1c:d5:52:44:75:34:31:f5:f6:4b:3e:90:96:d0:5a:0f:6b:a0: 6c:90:22:89:aa:91:c2:6c:ee:51:0c:d3:b2:78:67:7d:66:ba: 00:6a:0b:20:5c:3c:c5:58:69:20:9f:fa:27:71:4f:f8:82:8e: 45:ba:66:60:28:49:49:c3:b8:5b:4c:5c:c2:07:98:96:db:05: 89:f7:c5:a4:f7:59:ed:36:c0:40:6b:d4:81:0a:49:54:06:24: e6:a5:1c:36:79:70:7d:c9:7e:65:f1:be:53:dc:c9:f7:f9:ec: c4:fa:63:45:23:3c:e4:cf:90:0a:1b:ed:1f:3c:fe:78:7d:67: 4d:b8:b1:6b:a2:d8:dc:b5:88:ba:ef:26:48:6e:ca:e1:a6:61: df:7c:f8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUwODIyMTc1NjE3WhcNMjUwODI5MTc1NjE3WjAYMRYwFAYD VQQDEw02OGE4YWY0MS0xODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uDwRomJqSJohONfESyiy7AivePx409Pq7Zz9yROIGf8bRMXchKlkz2wLoMa bIEv+cP/rReFxBkinZFEEN4jx9FjuHSEL31beF/Re544cB3Y7YnQLhfLR/G6IKCK zXCMsiC1qbS5fNyCHvyC/3wxMX4mAxw/K6Y+uXXfRMnlVAaVUSFR/+qdS6s2fNeA G2Y9zHbYUh/sjg/61mgOUEwVGQ9cpA36yZubGfpw5GtOxKCK+Z1EohXE89O92Kuz x44L/LCmaMNESYSkuYIqJgAn4Y7iYN5sInFpyWyM9Kao9uEsPHV/4mmFzG7dRcEy qmPh+p46IVjj+/NOBbJwXOJ2YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMsUhig J6/y2w1BuE4OeFSBLJz3MB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl0iFkBwpm6UFX7gEUGuQlOFUT+leusL4Sr8/PwBnfKbAUHhIPXbuo xfU4DEZGbjJS24tuCtGY4/fZE74U4LjNel/c5HCPcsa6tg7MVnVm77Hy1dTew3LQ wuqg44sgndKNz3pqYrBEHwpFn4gc1VJEdTQx9fZLPpCW0FoPa6BskCKJqpHCbO5R DNOyeGd9ZroAagsgXDzFWGkgn/oncU/4go5FumZgKElJw7hbTFzCB5iW2wWJ98Wk 91ntNsBAa9SBCklUBiTmpRw2eXB9yX5l8b5T3Mn3+ezE+mNFIzzkz5AKG+0fPP54 fWdNuLFrotjctYi67yZIbsrhpmHffPgQ -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:59 2025 by rpki-client