$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: O55m16nAUqvlQalsjbUfKebm9sE7af+k7nL0MXK1EC8= Subject key identifier: 7E:5B:5B:28:58:2A:75:CA:4D:1D:32:A3:2D:7A:9B:59:5F:BA:52:68 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 01F3 Signing time: Sat 19 Jul 2025 02:43:00 +0000 Manifest this update: Sat 19 Jul 2025 02:42:59 +0000 Manifest next update: Sat 26 Jul 2025 02:42:59 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: JXnynpNsAdGzIszKeqaTLOIRqj6pVIBd4bpRV6msS3o=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Jul 19 02:42:59 2025 GMT Not After : Jul 26 02:42:59 2025 GMT Subject: CN=687b0633-a592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:24:39:45:98:93:68:cc:1c:d0:12:09:d8:0d: 52:97:57:4d:34:11:39:6c:d2:57:9e:4f:da:cf:09: 6a:04:63:03:1f:61:b7:04:88:4e:1a:c6:31:c6:5b: 4d:ae:08:7b:10:a4:02:bc:e9:35:f6:77:23:21:c5: d4:8a:4d:e1:c0:70:40:0d:6b:85:32:c9:d6:8e:4a: 57:ca:b8:d4:23:24:f5:8e:9f:2c:81:13:a2:72:87: 5e:9f:6d:85:3f:30:fd:83:6a:ce:a3:7e:98:95:06: d5:05:64:aa:32:4b:4c:e5:78:e2:78:ee:79:21:a1: 20:00:7e:fa:b2:47:b5:e3:29:c5:f0:33:6b:b5:6d: a9:41:12:71:7a:6f:b3:f7:67:33:94:1f:14:94:8b: d0:b4:11:f2:f7:95:4c:45:db:ca:a5:9f:26:56:93: 4d:eb:18:2a:52:d8:57:3b:39:cf:bd:06:41:d0:1d: b8:fd:1b:9a:e3:38:e9:de:13:1b:a1:5a:f9:77:f9: 42:f1:3e:16:15:d0:0b:96:f6:bd:de:e0:60:0a:58: 0a:f1:3d:75:e6:13:8c:53:02:5d:29:f2:72:42:e4: ea:66:fb:83:a5:18:ba:f8:37:6d:fe:eb:99:fd:b8: d6:ef:47:b4:c2:cc:01:f1:45:1a:47:19:3e:8e:2a: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:5B:28:58:2A:75:CA:4D:1D:32:A3:2D:7A:9B:59:5F:BA:52:68 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fe:d3:b9:03:dc:05:7c:f2:54:f8:ec:76:54:e5:ab:92:e4: 51:54:c3:43:cc:d9:87:f1:9d:d8:73:04:0e:eb:a8:34:e4:ce: 89:eb:9d:b0:f7:2e:c5:7a:fe:56:e3:b2:5a:2b:f1:a8:a8:4c: 95:b2:8d:c1:bb:63:66:eb:4e:0f:6e:8a:8b:78:d2:8b:24:0c: 9e:9c:d8:f5:f0:d6:b7:b5:ac:50:10:3d:e5:59:1c:43:5c:47: fd:71:b8:4f:97:2e:bc:2a:06:e4:fb:a2:5e:0c:25:7d:14:c9: 86:80:83:5e:9b:5b:38:4a:f7:0e:e9:2b:73:d6:1d:14:d8:ae: ce:14:55:0f:08:94:97:44:f9:ba:6c:bf:a7:0b:8b:1a:67:3b: 4c:78:7b:f6:78:23:1b:de:dc:18:6a:7f:9a:da:18:ff:bd:3a: a1:f1:86:b1:95:b7:d0:6f:11:d9:c6:67:cc:be:d1:93:f4:0b: 55:e8:74:87:46:67:ba:4e:d7:ff:42:77:41:0c:ee:a7:6f:f2: 50:33:2c:d1:fa:b6:db:88:f6:f1:4c:fb:11:b2:76:96:85:7b: 77:92:78:cf:24:d3:30:40:86:8b:2b:e2:f4:35:85:2c:67:a6: 54:28:fe:30:ef:76:0e:88:0a:43:a2:e5:fe:0e:f9:e0:be:36: 6d:62:2e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUwNzE5MDI0MjU5WhcNMjUwNzI2MDI0MjU5WjAYMRYwFAYD VQQDEw02ODdiMDYzMy1hNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9yQ5RZiTaMwc0BIJ2A1Sl1dNNBE5bNJXnk/azwlqBGMDH2G3BIhOGsYxxltN rgh7EKQCvOk19ncjIcXUik3hwHBADWuFMsnWjkpXyrjUIyT1jp8sgROicoden22F PzD9g2rOo36YlQbVBWSqMktM5XjieO55IaEgAH76ske14ynF8DNrtW2pQRJxem+z 92czlB8UlIvQtBHy95VMRdvKpZ8mVpNN6xgqUthXOznPvQZB0B24/Rua4zjp3hMb oVr5d/lC8T4WFdALlva93uBgClgK8T115hOMUwJdKfJyQuTqZvuDpRi6+Ddt/uuZ /bjW70e0wswB8UUaRxk+jiq2WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5bWyhY KnXKTR0yoy16m1lfulJoMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd/tO5A9wFfPJU+Ox2VOWrkuRRVMNDzNmH8Z3YcwQO66g05M6J652w 9y7Fev5W47JaK/GoqEyVso3Bu2Nm604PboqLeNKLJAyenNj18Na3taxQED3lWRxD XEf9cbhPly68Kgbk+6JeDCV9FMmGgINem1s4SvcO6Stz1h0U2K7OFFUPCJSXRPm6 bL+nC4saZztMeHv2eCMb3twYan+a2hj/vTqh8YaxlbfQbxHZxmfMvtGT9AtV6HSH Rme6Ttf/QndBDO6nb/JQMyzR+rbbiPbxTPsRsnaWhXt3knjPJNMwQIaLK+L0NYUs Z6ZUKP4w73YOiApDouX+DvngvjZtYi50 -----END CERTIFICATE-----Generated at Sun Jul 20 07:29:16 2025 by rpki-client