$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: UahiPa4+u8hVnVup15TxTYHkWkx6hQGE90Sdq5bO1Pw= Subject key identifier: 57:8E:31:CF:8D:99:AB:22:94:8E:42:20:A8:A1:98:22:2B:69:27:2E Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 0844 Signing time: Sun 20 Jul 2025 20:55:26 +0000 Manifest this update: Sun 20 Jul 2025 20:55:25 +0000 Manifest next update: Sun 27 Jul 2025 20:55:25 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: Nb2Z8tdg3E+f5FY4dH3j7x/K41X5Y/4kuofyeybCSnY=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=) 4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Jul 20 20:55:25 2025 GMT Not After : Jul 27 20:55:25 2025 GMT Subject: CN=687d57be-3885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:e5:46:65:46:4f:a2:15:da:57:4b:09:54: fa:83:30:70:31:11:cd:cc:0e:00:0a:7d:d8:bf:fa: 67:65:d0:70:a3:1e:11:d4:9b:ff:13:49:16:03:27: b2:17:b5:62:3a:a6:87:b7:4d:b0:6b:8b:68:c8:3c: 05:c6:bd:b1:da:c8:8b:f4:82:ca:c6:49:3b:bc:31: 55:1a:10:6a:8e:96:41:72:85:bb:51:ff:4c:9a:2b: 57:5c:28:34:09:b3:1d:ea:e3:36:4d:0a:ff:54:96: fc:2a:77:e3:e7:21:0d:76:35:f2:9a:9b:ec:c9:e1: 03:b3:ce:46:f3:e5:02:4b:7f:df:c1:ea:f7:a9:26: d9:e3:e5:49:52:81:91:1e:fe:f8:86:10:0c:f5:da: 98:dc:67:93:85:ec:e7:5b:67:2e:a8:89:ee:d4:97: c5:e7:48:33:13:bf:70:b8:5f:f3:3b:c0:09:1c:ba: 70:8c:22:93:12:2b:23:e5:19:75:4b:ec:df:8d:b9: ce:03:c8:c2:96:b4:26:80:64:17:c9:2b:af:bc:b3: 98:8a:85:3f:8b:5f:82:5c:0e:1c:25:e9:8f:0e:0f: 55:1c:ae:98:33:a0:45:56:65:4a:51:31:fd:67:e8: b3:eb:4e:a4:9f:d5:1e:55:ec:8a:d6:b3:dd:7a:37: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8E:31:CF:8D:99:AB:22:94:8E:42:20:A8:A1:98:22:2B:69:27:2E X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:42:aa:05:b1:99:85:bf:04:a2:7e:ed:a1:c5:cd:60:b2:a6: 5f:9d:af:86:97:2b:5e:7d:de:22:cf:cd:da:c4:a4:c2:9b:fe: 54:2f:10:0f:6b:09:9a:0b:56:8e:e2:d2:c7:42:8c:da:11:dc: ed:59:dc:3e:01:2b:a2:13:8b:9f:b7:95:2c:bd:b7:ad:95:3f: b9:30:57:94:95:c7:cd:56:84:68:7c:64:73:97:93:fe:7d:b5: 34:07:6c:11:ef:10:fe:67:72:9a:3c:fe:90:ef:ae:d5:26:fd: 22:07:d5:4e:d2:19:82:16:dd:f5:a7:88:34:7e:b2:43:63:ef: 88:b0:9c:4f:8c:57:db:90:82:1d:ae:b0:46:e2:b9:85:e1:d2: ff:f7:d5:ce:e7:71:e4:39:22:68:e7:b8:4b:16:28:76:07:6e: 3a:a0:f4:d5:fb:00:08:0a:81:e6:3b:3d:f1:1b:e3:c1:b7:cf: f9:30:96:0d:43:8a:be:e9:09:45:77:6f:24:fd:89:c2:dd:29: de:0f:61:07:c1:1b:cc:03:5b:9d:0a:d2:40:7a:f4:c6:4e:11: fd:e2:f4:64:51:6b:01:da:e8:dc:47:25:6e:74:7f:9c:9b:90: 54:af:13:e3:e5:5a:86:09:8a:99:1e:d3:f2:b1:35:21:d1:97: 65:aa:94:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUwNzIwMjA1NTI1WhcNMjUwNzI3MjA1NTI1WjAYMRYwFAYD VQQDEw02ODdkNTdiZS0zODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VjlRmVGT6IV2ldLCVT6gzBwMRHNzA4ACn3Yv/pnZdBwox4R1Jv/E0kWAyey F7ViOqaHt02wa4toyDwFxr2x2siL9ILKxkk7vDFVGhBqjpZBcoW7Uf9MmitXXCg0 CbMd6uM2TQr/VJb8Knfj5yENdjXympvsyeEDs85G8+UCS3/fwer3qSbZ4+VJUoGR Hv74hhAM9dqY3GeTheznW2cuqInu1JfF50gzE79wuF/zO8AJHLpwjCKTEisj5Rl1 S+zfjbnOA8jClrQmgGQXySuvvLOYioU/i1+CXA4cJemPDg9VHK6YM6BFVmVKUTH9 Z+iz606kn9UeVeyK1rPdejeD2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeOMc+N masilI5CIKihmCIraScuMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTQqoFsZmFvwSifu2hxc1gsqZfna+Glytefd4iz83axKTCm/5ULxAP awmaC1aO4tLHQozaEdztWdw+ASuiE4uft5UsvbetlT+5MFeUlcfNVoRofGRzl5P+ fbU0B2wR7xD+Z3KaPP6Q767VJv0iB9VO0hmCFt31p4g0frJDY++IsJxPjFfbkIId rrBG4rmF4dL/99XO53HkOSJo57hLFih2B246oPTV+wAICoHmOz3xG+PBt8/5MJYN Q4q+6QlFd28k/YnC3SneD2EHwRvMA1udCtJAevTGThH94vRkUWsB2ujcRyVudH+c m5BUrxPj5VqGCYqZHtPysTUh0ZdlqpQ6 -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:33 2025 by rpki-client