$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: EmPcOZq16gSOoo6tlyPFMok/bo+YN4Vz2wfMEMH+sIM= Subject key identifier: 40:5C:4E:6D:2A:CA:44:9E:BA:CF:9D:41:51:87:81:48:F1:F2:9F:3B Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 01A1 Signing time: Thu 21 Aug 2025 03:25:52 +0000 Manifest this update: Thu 21 Aug 2025 03:25:51 +0000 Manifest next update: Thu 28 Aug 2025 03:25:51 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: 0nr3ZrQd5BMh8Ejujxp/g279QLe+Zuulj8E4pjaYt30=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Aug 21 03:25:51 2025 GMT Not After : Aug 28 03:25:51 2025 GMT Subject: CN=68a691bf-442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:b9:b1:42:ef:e7:51:c6:fe:8e:24:7a:64: 6f:c7:61:91:56:9a:9b:ba:c8:ad:69:9a:4c:cb:6a: e3:2b:22:e6:48:82:dd:c5:38:45:2d:0b:86:87:dc: 1d:33:3d:55:a2:bf:62:8d:ff:67:96:4f:4e:aa:b1: 8f:61:12:b2:26:30:69:d1:c6:29:5b:fd:f6:c6:93: 87:33:f0:fc:c2:58:18:70:94:f6:38:f7:97:0b:71: c3:f2:42:f5:45:b2:e2:4d:26:81:5d:de:36:ef:0b: 58:2d:43:1e:f7:af:d3:8b:31:0f:d5:8e:9a:be:94: fc:2f:e4:a7:dc:ee:30:54:77:8a:14:27:be:48:56: 3a:a3:47:1e:54:84:1d:a7:2a:88:02:bb:f2:89:75: cc:92:52:6b:d4:6f:9c:b1:55:fb:7d:44:a3:e3:a8: a0:a9:af:62:94:0a:84:3d:b2:7b:4a:ba:c8:87:e7: 7e:c0:d4:5f:6a:d8:89:8a:8b:e3:10:af:7b:d2:84: 9b:77:8b:48:89:f2:a9:62:c4:39:f5:85:18:c1:7c: 56:c0:e9:78:6d:44:be:33:86:75:9f:9b:e1:06:b4: f0:e0:68:6c:69:a1:38:67:9e:ac:71:6b:f9:c6:9f: 35:35:a1:47:f7:e4:b7:60:5e:60:db:00:d0:45:24: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:4E:6D:2A:CA:44:9E:BA:CF:9D:41:51:87:81:48:F1:F2:9F:3B X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d5:71:e7:55:a9:00:e0:c9:11:65:94:0a:71:d4:7a:4e:c3: 19:41:ef:74:8c:24:7f:9b:9d:e7:69:2a:bd:e5:8f:c7:49:dc: 76:ab:5d:42:d3:f8:76:a2:d9:16:b7:b8:b0:9b:ce:82:06:eb: b1:da:94:8d:1e:ec:45:dc:e7:87:02:d0:98:eb:c1:64:5f:d1: 96:5f:e3:f7:f7:4b:67:ae:40:84:7f:97:a4:97:20:d9:45:02: 82:ec:0f:56:33:14:a8:fe:10:4a:3c:c2:81:1f:54:29:dd:03: 82:b9:4f:53:ba:04:b5:9c:c5:37:17:ae:46:00:e2:5f:4c:f1: 02:cf:26:49:51:b9:2b:06:6b:35:36:bb:29:d9:7a:dc:9c:6a: d9:dd:7e:b6:f1:d2:c9:94:9e:03:6f:d5:65:ff:09:9f:da:e9: e9:97:04:dc:83:d4:84:8d:5b:e6:62:54:f6:eb:08:75:eb:49: 78:db:53:63:99:bb:ee:76:92:59:91:85:a8:80:ba:f9:87:79: d3:cb:bd:e1:b4:6f:f2:ff:82:3c:f3:33:7f:07:57:67:74:23: 5c:64:2a:64:0d:c8:b2:1a:e7:18:35:29:20:b4:d4:d6:6d:16: 92:63:10:27:71:05:27:e4:eb:5a:70:3c:f5:70:a0:2c:8a:58: 9a:02:6f:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUwODIxMDMyNTUxWhcNMjUwODI4MDMyNTUxWjAYMRYwFAYD VQQDEw02OGE2OTFiZi00NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmV65sULv51HG/o4kemRvx2GRVpqbusitaZpMy2rjKyLmSILdxThFLQuGh9wd Mz1Vor9ijf9nlk9OqrGPYRKyJjBp0cYpW/32xpOHM/D8wlgYcJT2OPeXC3HD8kL1 RbLiTSaBXd427wtYLUMe96/TizEP1Y6avpT8L+Sn3O4wVHeKFCe+SFY6o0ceVIQd pyqIArvyiXXMklJr1G+csVX7fUSj46igqa9ilAqEPbJ7SrrIh+d+wNRfatiJiovj EK970oSbd4tIifKpYsQ59YUYwXxWwOl4bUS+M4Z1n5vhBrTw4GhsaaE4Z56scWv5 xp81NaFH9+S3YF5g2wDQRSSQUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBcTm0q ykSeus+dQVGHgUjx8p87MB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL1XHnVakA4MkRZZQKcdR6TsMZQe90jCR/m53naSq95Y/HSdx2q11C 0/h2otkWt7iwm86CBuux2pSNHuxF3OeHAtCY68FkX9GWX+P390tnrkCEf5eklyDZ RQKC7A9WMxSo/hBKPMKBH1Qp3QOCuU9TugS1nMU3F65GAOJfTPECzyZJUbkrBms1 Nrsp2XrcnGrZ3X628dLJlJ4Db9Vl/wmf2unplwTcg9SEjVvmYlT26wh160l421Nj mbvudpJZkYWogLr5h3nTy73htG/y/4I88zN/B1dndCNcZCpkDciyGucYNSkgtNTW bRaSYxAncQUn5OtacDz1cKAsiliaAm9r -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:59 2025 by rpki-client