$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: 7lBhmsY7legoW517SzmsRJYcJxHEhP6qGv7TfEIltXA= Subject key identifier: 18:AE:6B:A1:18:74:61:D3:21:E1:04:42:05:80:D4:EC:78:F0:BD:60 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1A08 Signing time: Thu 24 Jul 2025 16:29:07 +0000 Manifest this update: Thu 24 Jul 2025 16:29:07 +0000 Manifest next update: Thu 31 Jul 2025 16:29:07 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: 6+z2hdqmQ6Z4JFvxLqL4J+xmU/dNw0Jg2lNyKAMqo/w=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 16:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6671 (0x1a0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Jul 24 16:29:07 2025 GMT Not After : Jul 31 16:29:07 2025 GMT Subject: CN=68825f53-e645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:52:35:26:36:f5:e6:3f:5b:fc:b9:18:61: cc:79:19:92:8a:1e:8b:58:28:93:91:78:66:fb:38: 7a:ec:27:01:1c:79:56:0e:c2:ba:24:fb:e3:90:5c: 88:da:82:65:52:7b:e7:18:0b:d4:1b:2a:59:7d:7c: 18:c2:77:f9:ea:f9:7c:4f:db:e2:25:25:ec:5f:c8: 62:97:7e:ab:23:fc:22:f6:e8:6e:88:92:e7:34:b8: af:10:94:8c:0d:99:55:f8:78:36:4f:62:53:6f:4d: a2:43:2f:cf:72:af:ec:35:f2:79:77:76:48:d8:35: 17:c8:e8:b7:1c:01:8f:6b:3f:05:22:32:17:96:51: c7:ee:fa:70:27:73:32:85:5a:59:15:f5:f2:cb:df: 03:07:90:8e:8b:fc:2a:65:b8:d5:1c:91:37:a3:34: 68:89:10:7a:c1:b6:0c:83:f5:fd:f9:74:2a:53:71: 0f:d5:17:ad:af:06:40:34:0a:59:cb:1c:fd:e8:3b: 42:4e:b1:39:5e:6e:42:fd:41:c1:3c:6f:68:dc:90: 60:71:5f:6f:6b:df:bf:9c:58:b1:5a:21:eb:03:74: b8:05:34:ad:3d:25:2b:f6:da:81:99:21:0b:c8:1e: a4:43:af:b7:12:8e:6d:28:f3:bc:41:75:7b:14:b5: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:6B:A1:18:74:61:D3:21:E1:04:42:05:80:D4:EC:78:F0:BD:60 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7e:98:b6:20:c0:87:5c:e9:c0:2a:55:95:ca:0f:b6:12:b3: e2:9f:52:40:37:94:62:39:91:76:9d:15:fa:c4:5d:2c:4e:b1: 8f:db:ae:ed:17:4a:be:c6:b0:4d:3e:c8:d1:a0:2d:57:ad:ec: 16:e3:cb:97:8f:16:4b:0a:32:52:44:9e:88:a6:a2:3b:ca:b7: c7:c3:61:bb:39:9d:b3:ce:e4:78:6a:cb:26:81:ec:0d:bd:bb: 91:31:0d:62:1b:af:17:26:8a:d9:ab:b0:8d:cc:fe:13:65:79: ef:39:7b:40:a7:a7:18:b9:ff:c6:5c:ac:68:9e:97:e3:6c:46: fc:67:b3:65:2d:f5:55:a2:57:1d:84:cd:45:be:a7:3f:0b:a0: 94:4f:55:ab:fb:94:9d:24:cb:4e:d9:b5:eb:9b:7c:2a:e1:bf: 57:97:a5:5c:c0:e9:91:8c:e7:5b:2f:99:75:c1:a5:c4:65:15: 3a:b4:88:74:57:89:c9:76:74:70:d0:91:63:eb:19:3e:3f:dc: 49:de:ee:7f:0b:66:41:d1:9d:3f:7f:5d:13:1c:fe:50:3b:52: 41:81:4b:f3:8b:f8:3b:63:b0:72:fa:23:16:4f:8b:d6:cb:dd: 06:7c:40:0f:37:52:6b:ee:7a:65:92:50:44:26:6d:16:75:b8: 6b:42:c4:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwNzI0MTYyOTA3WhcNMjUwNzMxMTYyOTA3WjAYMRYwFAYD VQQDEw02ODgyNWY1My1lNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzlSNSY29eY/W/y5GGHMeRmSih6LWCiTkXhm+zh67CcBHHlWDsK6JPvjkFyI 2oJlUnvnGAvUGypZfXwYwnf56vl8T9viJSXsX8hil36rI/wi9uhuiJLnNLivEJSM DZlV+Hg2T2JTb02iQy/Pcq/sNfJ5d3ZI2DUXyOi3HAGPaz8FIjIXllHH7vpwJ3My hVpZFfXyy98DB5COi/wqZbjVHJE3ozRoiRB6wbYMg/X9+XQqU3EP1RetrwZANApZ yxz96DtCTrE5Xm5C/UHBPG9o3JBgcV9va9+/nFixWiHrA3S4BTStPSUr9tqBmSEL yB6kQ6+3Eo5tKPO8QXV7FLW7PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiua6EY dGHTIeEEQgWA1Ox48L1gMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbfpi2IMCHXOnAKlWVyg+2ErPin1JAN5RiOZF2nRX6xF0sTrGP267t F0q+xrBNPsjRoC1XrewW48uXjxZLCjJSRJ6IpqI7yrfHw2G7OZ2zzuR4assmgewN vbuRMQ1iG68XJorZq7CNzP4TZXnvOXtAp6cYuf/GXKxonpfjbEb8Z7NlLfVVolcd hM1Fvqc/C6CUT1Wr+5SdJMtO2bXrm3wq4b9Xl6VcwOmRjOdbL5l1waXEZRU6tIh0 V4nJdnRw0JFj6xk+P9xJ3u5/C2ZB0Z0/f10THP5QO1JBgUvzi/g7Y7By+iMWT4vW y90GfEAPN1Jr7nplklBEJm0WdbhrQsQw -----END CERTIFICATE-----Generated at Sat Jul 26 10:49:39 2025 by rpki-client