$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: fbQDnomk+9WyZzs7CimFeTKmMzpCf3GM6+k8C0atBAU= Subject key identifier: CF:C0:92:57:F7:67:42:06:48:77:6C:E7:29:B4:AE:59:5C:75:26:F8 Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 068A Signing time: Wed 20 Aug 2025 22:26:48 +0000 Manifest this update: Wed 20 Aug 2025 22:26:48 +0000 Manifest next update: Wed 27 Aug 2025 22:26:48 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: kSvOo5CoInG7JZZMrHLfhecWbOR2nMrXUbHpK8DcpFE=) 2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: Aug 20 22:26:48 2025 GMT Not After : Aug 27 22:26:48 2025 GMT Subject: CN=68a64ba8-4b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:10:9e:18:28:db:f3:dc:2f:1e:64:fd:00: 96:94:0a:cb:9c:34:e2:2a:98:2f:95:c4:70:de:ad: ec:05:b4:07:a1:09:38:c7:06:fa:b8:f7:63:74:0a: 96:58:9a:1f:dd:74:d3:11:ab:ac:98:db:d2:a0:20: 3c:3c:a6:53:79:68:0a:f1:8a:c4:6a:12:69:ce:24: 11:b0:c2:ed:57:a2:12:4a:fc:4f:d0:de:eb:7e:c4: 3f:f1:db:88:fd:5c:99:3a:57:16:94:09:35:43:1e: 64:71:52:5f:c7:28:6d:a3:1e:31:46:20:d0:e2:d3: ee:04:33:c9:85:12:af:5f:ab:df:e9:44:79:45:27: 6e:de:ba:e9:b2:53:7e:3a:22:98:9c:10:71:05:a1: 20:81:21:f4:60:fa:4c:94:46:0a:0c:dd:bd:1c:fe: 23:00:dc:d3:2e:1b:36:cf:c5:a0:f9:36:75:d9:b4: a4:4e:82:08:68:40:85:93:89:1d:21:7f:12:8f:c7: 37:51:10:e2:84:57:1e:a9:f2:fa:29:10:2f:d4:27: 09:4b:c1:1e:17:af:31:54:39:41:9a:f6:69:52:d4: 2a:a9:ac:98:1a:7c:25:ca:5e:96:dc:17:88:6d:c5: 44:1b:a5:a0:b5:e2:a5:96:94:af:94:c8:bb:e4:d8: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:92:57:F7:67:42:06:48:77:6C:E7:29:B4:AE:59:5C:75:26:F8 X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:dc:c9:39:de:55:7d:b5:45:04:78:d0:40:34:a6:4d:64:9b: 62:9f:31:90:18:18:a0:bd:45:13:71:18:1a:96:a1:c6:90:27: a6:56:e0:ff:37:b8:95:88:87:d9:9a:e1:42:cd:90:2b:f5:69: f1:48:29:d2:c4:49:7b:40:4f:84:d1:c3:0c:13:c5:20:04:86: d3:0d:71:e1:51:6e:9d:07:a3:3e:7a:09:53:11:14:97:b5:bd: 7c:31:73:3d:50:8f:1b:7b:cc:b2:62:d9:2d:6f:42:eb:65:18: 99:d1:d3:ec:d0:55:0f:2e:a3:29:ee:70:ee:e2:7f:b9:cb:c8: 89:bf:20:8a:dd:87:4d:0c:9d:7b:d7:64:69:c0:83:7d:53:a5: 78:0c:3a:d8:91:14:3b:b6:73:65:1e:a0:eb:34:19:cb:e3:88: d0:1b:f3:c3:5a:0d:86:f0:4c:45:a2:cf:60:dd:ee:77:6a:ba: 4f:0f:e7:3a:3a:a7:4d:ca:e9:70:92:0f:b8:f7:64:c5:85:a0: 94:75:a7:2d:4f:d9:19:9b:39:63:61:f1:3f:47:5b:3b:f2:71: fa:0b:6b:d4:58:df:29:85:55:e9:ad:5a:72:b8:04:e6:1d:6e: 33:67:cf:bc:70:a6:cb:b0:b4:c1:dd:bd:58:6b:66:79:9c:f1: 3a:0b:30:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUwODIwMjIyNjQ4WhcNMjUwODI3MjIyNjQ4WjAYMRYwFAYD VQQDEw02OGE2NGJhOC00YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wQQnhgo2/PcLx5k/QCWlArLnDTiKpgvlcRw3q3sBbQHoQk4xwb6uPdjdAqW WJof3XTTEausmNvSoCA8PKZTeWgK8YrEahJpziQRsMLtV6ISSvxP0N7rfsQ/8duI /VyZOlcWlAk1Qx5kcVJfxyhtox4xRiDQ4tPuBDPJhRKvX6vf6UR5RSdu3rrpslN+ OiKYnBBxBaEggSH0YPpMlEYKDN29HP4jANzTLhs2z8Wg+TZ12bSkToIIaECFk4kd IX8Sj8c3URDihFceqfL6KRAv1CcJS8EeF68xVDlBmvZpUtQqqayYGnwlyl6W3BeI bcVEG6WgteKllpSvlMi75Njo1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/Aklf3 Z0IGSHds5ym0rllcdSb4MB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo3Mk53lV9tUUEeNBANKZNZJtinzGQGBigvUUTcRgalqHGkCemVuD/ N7iViIfZmuFCzZAr9WnxSCnSxEl7QE+E0cMME8UgBIbTDXHhUW6dB6M+eglTERSX tb18MXM9UI8be8yyYtktb0LrZRiZ0dPs0FUPLqMp7nDu4n+5y8iJvyCK3YdNDJ17 12RpwIN9U6V4DDrYkRQ7tnNlHqDrNBnL44jQG/PDWg2G8ExFos9g3e53arpPD+c6 OqdNyulwkg+492TFhaCUdactT9kZmzljYfE/R1s78nH6C2vUWN8phVXprVpyuATm HW4zZ8+8cKbLsLTB3b1Ya2Z5nPE6CzAd -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:42 2025 by rpki-client