$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: WOtF4/0iuN+x/7Ps2zaMZByxo9+KaBhJlKCEkK/G+GY= Subject key identifier: 3C:1F:78:B1:41:9C:C9:E2:0B:19:2A:FD:20:28:CC:AC:B7:D2:A2:64 Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 73 Signing time: Thu 21 Aug 2025 07:02:08 +0000 Manifest this update: Thu 21 Aug 2025 07:02:08 +0000 Manifest next update: Thu 28 Aug 2025 07:02:08 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: qCGcvy+0TBZ7sAcOpl7RBJwb8h6lqQdyhsKFkoqbikU=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Aug 21 07:02:08 2025 GMT Not After : Aug 28 07:02:08 2025 GMT Subject: CN=68a6c470-cce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:6b:ec:84:a2:7f:4d:8a:0a:3c:42:ad:8d: 65:db:0c:c4:6c:0a:61:10:f3:b3:49:73:db:11:ca: 69:12:dd:cd:99:ca:97:bd:10:e2:af:0c:65:b4:0e: 29:b7:64:b5:2c:a4:d7:cb:0f:de:7f:7b:d9:f9:ac: 92:ab:cd:38:fc:b3:dc:09:61:f1:ed:63:ab:d6:94: 6f:55:c5:04:23:0b:2e:02:31:a9:c9:4f:f4:db:d4: 6e:26:83:39:16:43:e3:be:69:01:79:35:df:2e:bc: 9e:32:45:b6:e1:6c:87:0e:38:af:2b:33:11:f3:5d: fb:07:26:26:9a:8a:0f:5b:38:ba:c4:18:03:46:7f: 70:9d:db:bb:b0:7e:07:f0:78:be:b5:98:10:89:ff: d9:69:fc:a7:18:3f:07:4f:80:5e:16:a6:5e:25:2d: fd:b1:ab:21:d0:93:16:59:1c:57:31:22:5c:72:3a: e7:83:82:97:aa:79:59:8d:a7:4f:c2:9b:13:96:8c: ca:7a:a0:68:1e:2c:c7:79:50:38:58:dc:50:87:10: d0:58:aa:69:be:b2:89:f0:e6:b6:8e:85:4b:37:8a: 60:11:73:21:da:1f:df:eb:46:61:4e:d3:0f:e8:0b: 43:0f:2d:be:10:4d:51:ab:06:a2:cb:f8:ce:f1:ec: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1F:78:B1:41:9C:C9:E2:0B:19:2A:FD:20:28:CC:AC:B7:D2:A2:64 X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:ba:cb:94:95:2f:77:83:6e:cd:3d:ef:1e:69:bb:d5:5f: 6e:59:d2:c6:88:7d:f6:cc:e6:d1:7e:20:86:aa:3f:94:a9:3b: 4a:1f:f3:c4:bb:35:3e:1a:11:6c:82:f5:bd:7b:ec:7a:49:44: b4:ad:bf:22:1d:fc:3c:8e:cb:6b:13:f8:a6:24:02:db:83:20: a2:c7:b2:9c:8c:50:de:e7:2e:24:72:db:05:05:7b:9e:61:85: af:f2:8a:11:3d:0a:36:e5:e4:21:20:12:4b:a4:91:3c:73:da: c3:03:cb:1a:cc:68:18:4e:da:8a:11:9b:09:19:01:cf:60:24: 14:2b:86:5d:1b:d1:d3:c0:7d:fd:55:9d:60:82:58:5e:33:15: 7d:a8:ac:df:6b:f4:5d:e9:a8:3a:6e:f7:f2:74:b2:fc:3f:0f: c1:69:6b:da:cc:31:e5:95:96:d3:83:42:d1:6e:8a:7d:70:0f: 24:a4:97:38:85:9d:63:b5:50:04:ca:4e:a0:2a:26:37:0f:5c: 35:e4:8c:a0:55:a0:27:90:5d:a0:86:7b:af:c0:3e:eb:a9:2f: 0d:08:b8:9d:52:8a:0d:17:fd:2c:c4:c7:cc:53:a4:b1:bb:8a: 88:06:d6:e0:c9:5d:0e:12:77:5e:a3:0d:ae:21:44:91:92:d2: f6:61:56:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJCMjlBREZFOEVG NDYzQjJFRDAeFw0yNTA4MjEwNzAyMDhaFw0yNTA4MjgwNzAyMDhaMBgxFjAUBgNV BAMTDTY4YTZjNDcwLWNjZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGJGvshKJ/TYoKPEKtjWXbDMRsCmEQ87NJc9sRymkS3c2Zype9EOKvDGW0Dim3 ZLUspNfLD95/e9n5rJKrzTj8s9wJYfHtY6vWlG9VxQQjCy4CManJT/Tb1G4mgzkW Q+O+aQF5Nd8uvJ4yRbbhbIcOOK8rMxHzXfsHJiaaig9bOLrEGANGf3Cd27uwfgfw eL61mBCJ/9lp/KcYPwdPgF4Wpl4lLf2xqyHQkxZZHFcxIlxyOueDgpeqeVmNp0/C mxOWjMp6oGgeLMd5UDhY3FCHENBYqmm+sonw5raOhUs3imARcyHaH9/rRmFO0w/o C0MPLb4QTVGrBqLL+M7x7HUfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPB94sUGc yeILGSr9ICjMrLfSomQwHwYDVR0jBBgwFoAU024QQmH4GdaND3C7Ka3+jvRjsu0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzRGRUMxQzA0Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDI0UVFtSDRHZGFORDNDN0thMy1qdlJqc3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2Rh TkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACBiusuUlS93g27NPe8eabvVX25Z0saIffbM5tF+IIaqP5SpO0of88S7 NT4aEWyC9b177HpJRLStvyId/DyOy2sT+KYkAtuDIKLHspyMUN7nLiRy2wUFe55h ha/yihE9Cjbl5CEgEkukkTxz2sMDyxrMaBhO2ooRmwkZAc9gJBQrhl0b0dPAff1V nWCCWF4zFX2orN9r9F3pqDpu9/J0svw/D8Fpa9rMMeWVltODQtFuin1wDySklziF nWO1UATKTqAqJjcPXDXkjKBVoCeQXaCGe6/APuupLw0IuJ1Sig0X/SzEx8xTpLG7 iogG1uDJXQ4Sd16jDa4hRJGS0vZhVss= -----END CERTIFICATE-----Generated at Sat Aug 23 03:25:09 2025 by rpki-client