$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: y/4bpMM5T886GGaiQeKdwtKytxvN1Hvkk4p5iJQDdOA= Subject key identifier: C9:AE:FB:53:4A:08:EE:17:F9:6E:4C:E5:85:AE:5A:54:F8:FA:D1:4B Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 011E Signing time: Sat 19 Jul 2025 04:56:40 +0000 Manifest this update: Sat 19 Jul 2025 04:56:39 +0000 Manifest next update: Sat 26 Jul 2025 04:56:39 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: BOuBzXljrk8Vb8padWU0Te9m4EfAuwZg21t1hZmprwA=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Jul 19 04:56:39 2025 GMT Not After : Jul 26 04:56:39 2025 GMT Subject: CN=687b2588-6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:67:87:a1:eb:5e:22:86:70:77:f7:b0:69: 81:a4:46:1f:26:3f:73:7d:10:2f:2c:e5:19:9d:11: 75:4b:53:84:fd:41:f2:16:fe:ef:aa:58:af:cd:0b: f5:17:57:5e:85:bf:ab:5d:7d:de:65:f5:4a:bb:a9: fe:36:10:fb:0a:45:7c:92:52:46:da:15:ee:f7:c9: f1:06:90:90:2a:72:5d:71:4c:95:ca:0e:3e:5d:3c: 6a:ee:ba:94:b2:83:73:59:66:bd:55:c5:29:14:9c: 80:dd:87:0f:ef:6c:6c:d1:b7:a8:3c:ab:95:40:b8: e2:64:4e:cd:94:a3:65:5e:fb:85:fd:c7:ab:5c:37: 4c:80:36:68:49:df:09:40:69:c5:4b:a5:55:36:cc: d6:c1:93:46:ff:59:ed:f5:71:c7:a8:4a:50:e0:64: 66:b3:01:f0:b5:eb:c4:43:56:fe:51:20:11:0e:ff: ce:de:40:4f:4b:c8:d3:0c:f8:bf:d9:31:d8:46:6a: 0d:5f:33:32:6a:94:84:9f:76:23:6d:42:9f:89:3c: ae:a7:71:ba:33:5e:eb:f0:05:6b:c4:b5:73:76:6c: 5c:82:b4:76:5b:8d:30:bc:07:2b:82:a4:f2:9a:58: e7:fd:55:45:fe:98:05:8c:c0:9f:b1:ec:57:e8:ba: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:FB:53:4A:08:EE:17:F9:6E:4C:E5:85:AE:5A:54:F8:FA:D1:4B X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:11:ee:a9:a4:e8:96:53:26:b5:1c:57:0d:53:67:cc:28:9f: ac:00:12:e6:bd:de:a2:77:3f:91:47:b1:a9:94:fc:7f:6f:10: 95:9d:62:38:1a:92:bb:49:ad:69:2d:bb:76:69:46:01:fd:d0: 4a:ba:7d:60:23:47:70:a4:db:7d:b1:b8:b0:35:85:ee:66:e6: f3:bc:07:32:94:10:27:a2:e2:6a:bc:29:d3:d8:5e:1c:cb:10: e8:1f:20:6d:44:b3:8c:8d:6c:2d:a1:02:25:03:85:05:d2:c2: 9e:15:36:62:65:99:94:80:d9:06:b3:4f:4f:eb:6f:6f:ba:63: 2f:cc:91:2b:14:3a:15:d1:08:07:56:e7:53:d1:88:ca:76:88: 25:1c:ab:54:01:eb:74:70:b3:d7:27:9a:a8:ee:bb:ef:8d:23: be:54:02:45:91:ab:05:bf:0f:70:f4:9e:70:c3:e2:d5:b3:51: e4:0a:54:e1:36:12:98:91:a3:60:e1:9d:e5:73:43:11:4b:a4: 64:a8:2f:be:0c:f3:59:45:03:8d:36:44:1e:6d:73:32:1e:6f: c8:08:13:7b:9a:8d:b8:af:cb:8e:77:e7:5c:bc:a3:32:49:44: d0:a6:2a:89:06:43:77:ef:e2:9c:be:e6:b3:ad:cd:c2:6d:ba: c3:ff:ef:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwNzE5MDQ1NjM5WhcNMjUwNzI2MDQ1NjM5WjAYMRYwFAYD VQQDEw02ODdiMjU4OC02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK9nh6HrXiKGcHf3sGmBpEYfJj9zfRAvLOUZnRF1S1OE/UHyFv7vqlivzQv1 F1dehb+rXX3eZfVKu6n+NhD7CkV8klJG2hXu98nxBpCQKnJdcUyVyg4+XTxq7rqU soNzWWa9VcUpFJyA3YcP72xs0beoPKuVQLjiZE7NlKNlXvuF/cerXDdMgDZoSd8J QGnFS6VVNszWwZNG/1nt9XHHqEpQ4GRmswHwtevEQ1b+USARDv/O3kBPS8jTDPi/ 2THYRmoNXzMyapSEn3YjbUKfiTyup3G6M17r8AVrxLVzdmxcgrR2W40wvAcrgqTy mljn/VVF/pgFjMCfsexX6LoJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmu+1NK CO4X+W5M5YWuWlT4+tFLMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLEe6ppOiWUya1HFcNU2fMKJ+sABLmvd6idz+RR7GplPx/bxCVnWI4 GpK7Sa1pLbt2aUYB/dBKun1gI0dwpNt9sbiwNYXuZubzvAcylBAnouJqvCnT2F4c yxDoHyBtRLOMjWwtoQIlA4UF0sKeFTZiZZmUgNkGs09P629vumMvzJErFDoV0QgH VudT0YjKdoglHKtUAet0cLPXJ5qo7rvvjSO+VAJFkasFvw9w9J5ww+LVs1HkClTh NhKYkaNg4Z3lc0MRS6RkqC++DPNZRQONNkQebXMyHm/ICBN7mo24r8uOd+dcvKMy SUTQpiqJBkN37+Kcvuazrc3CbbrD/++N -----END CERTIFICATE-----Generated at Sun Jul 20 03:25:12 2025 by rpki-client