$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: EA/rlMVMmjuPC2/mwdb/+yqM7GGZeWsgZj8zsG0havI= Subject key identifier: 39:6D:CA:12:4A:35:8B:2E:E0:B5:CF:0A:3C:42:2F:44:6D:FD:64:93 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 0A2E Signing time: Sun 24 Aug 2025 19:45:53 +0000 Manifest this update: Sun 24 Aug 2025 19:45:52 +0000 Manifest next update: Sun 31 Aug 2025 19:45:52 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: faRJKm0se4UgoIiqVYa21mpV0Lu2NLqUUbd4ej8eb/Y=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: yZGCclZoBxnBhfhgaEtvdMtpamiVGJaHMeM0i3edazA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: Aug 24 19:45:52 2025 GMT Not After : Aug 31 19:45:52 2025 GMT Subject: CN=68ab6bf1-4c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:ff:54:79:53:b4:37:3c:7f:d5:13:7e:64: ae:f9:17:8a:f0:4e:af:1e:82:44:03:c6:ce:cf:a6: c3:e9:2a:2c:b0:8e:1f:55:f0:44:ef:cd:d5:cf:64: 67:7e:2a:4b:1a:c7:29:bb:10:d3:e0:6c:b8:c8:e1: e3:2a:56:9b:34:95:c7:0b:b3:9f:1b:90:6c:d0:62: 40:0e:f6:2c:60:c9:25:5b:ab:96:d0:45:ad:19:fe: f2:c8:2c:33:de:9c:f5:13:0a:16:3d:e2:27:67:f9: f6:49:98:35:62:ea:f3:88:c2:af:2f:5d:45:1c:a9: 92:8b:20:5d:1f:b2:ac:31:4f:88:78:01:b0:c0:1f: 36:b8:27:59:49:93:e6:e3:17:25:85:54:22:0d:e1: 7f:9f:2c:5b:48:94:9b:31:7c:10:bd:c6:41:df:92: 3c:9c:93:de:7e:a4:56:2e:a4:15:1f:65:f2:0f:0d: d1:34:ee:58:b1:6b:fb:68:f0:cb:cd:7e:17:7e:00: 8b:84:27:d8:4f:7c:23:89:39:cd:ac:b2:a6:74:71: 2d:d4:4a:80:df:6e:8f:d9:46:54:4a:3f:96:fe:13: b9:b8:b1:26:a2:10:b3:f9:35:e6:1b:87:90:a6:e1: 6a:1e:ad:11:36:53:a0:32:0a:3b:c2:eb:7d:30:10: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:CA:12:4A:35:8B:2E:E0:B5:CF:0A:3C:42:2F:44:6D:FD:64:93 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e4:bf:ca:39:59:a9:cb:b0:81:97:b4:80:62:bd:78:04:a5: c6:3b:27:e1:7b:4a:1d:d9:c4:71:c7:22:15:1c:94:8f:34:7d: 5e:94:ef:ba:63:b8:7e:14:c3:88:f8:cf:16:87:13:a9:30:20: d5:98:bf:d3:aa:ec:b0:b7:37:39:e9:28:cc:0f:70:cd:de:57: 08:42:c2:a9:87:ad:b6:f9:f7:14:8f:bf:d6:67:fc:b4:85:cd: e8:54:96:9c:5c:c2:2a:2a:f5:50:0d:02:f8:ea:a1:07:11:de: 75:0f:0a:94:4c:a9:71:ef:21:91:b5:d9:55:ee:b2:e0:b4:8d: 11:23:c5:65:eb:22:56:a9:db:53:2b:d2:a3:a6:7e:62:0d:c4: df:9f:41:4a:54:5a:2d:5d:f8:2c:d7:0c:a5:c4:d8:e6:d1:df: c7:1b:28:6a:bc:46:03:74:0b:9e:0e:bf:0b:30:1b:5e:f0:b1: fb:b5:5c:43:ac:5d:74:26:73:9f:9b:f7:32:17:d9:3e:00:22: f4:2c:fc:1d:f7:86:11:5a:00:58:88:da:35:1e:e8:92:cc:10: 65:cc:8f:54:2d:5c:08:79:18:87:84:fe:7c:13:52:59:b6:ff: 68:56:97:d2:e9:0b:1c:12:5c:7c:8c:45:de:ad:04:d5:55:c9: d6:f9:4c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjUwODI0MTk0NTUyWhcNMjUwODMxMTk0NTUyWjAYMRYwFAYD VQQDEw02OGFiNmJmMS00YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQn/VHlTtDc8f9UTfmSu+ReK8E6vHoJEA8bOz6bD6SossI4fVfBE783Vz2Rn fipLGscpuxDT4Gy4yOHjKlabNJXHC7OfG5Bs0GJADvYsYMklW6uW0EWtGf7yyCwz 3pz1EwoWPeInZ/n2SZg1YurziMKvL11FHKmSiyBdH7KsMU+IeAGwwB82uCdZSZPm 4xclhVQiDeF/nyxbSJSbMXwQvcZB35I8nJPefqRWLqQVH2XyDw3RNO5YsWv7aPDL zX4XfgCLhCfYT3wjiTnNrLKmdHEt1EqA326P2UZUSj+W/hO5uLEmohCz+TXmG4eQ puFqHq0RNlOgMgo7wut9MBDtCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDltyhJK NYsu4LXPCjxCL0Rt/WSTMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC5L/KOVmpy7CBl7SAYr14BKXGOyfhe0od2cRxxyIVHJSPNH1elO+6 Y7h+FMOI+M8WhxOpMCDVmL/Tquywtzc56SjMD3DN3lcIQsKph622+fcUj7/WZ/y0 hc3oVJacXMIqKvVQDQL46qEHEd51DwqUTKlx7yGRtdlV7rLgtI0RI8Vl6yJWqdtT K9Kjpn5iDcTfn0FKVFotXfgs1wylxNjm0d/HGyhqvEYDdAueDr8LMBte8LH7tVxD rF10JnOfm/cyF9k+ACL0LPwd94YRWgBYiNo1HuiSzBBlzI9ULVwIeRiHhP58E1JZ tv9oVpfS6QscElx8jEXerQTVVcnW+Uwl -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:29 2025 by rpki-client