$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: vBtffDI4jslSEP4V5XE66ku8HZNf8SJjIMz1tWjZRVQ= Subject key identifier: EA:41:93:4C:CD:C1:F8:ED:CA:36:85:F7:6C:AD:1F:2D:F1:25:A9:79 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AD3 Signing time: Wed 20 Aug 2025 19:32:32 +0000 Manifest this update: Wed 20 Aug 2025 19:32:32 +0000 Manifest next update: Wed 27 Aug 2025 19:32:32 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: x8EiTeNEHYzZcwFJxWcXBuOe+PioS7V5gICL/v6qtbU=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Aug 20 19:32:32 2025 GMT Not After : Aug 27 19:32:32 2025 GMT Subject: CN=68a622d0-92ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:c2:eb:d7:b3:b6:61:bd:3e:b2:a8:39:8a: 1c:fb:c3:ae:66:ef:4b:11:04:92:bb:3c:df:c7:e5: 09:39:f7:90:dd:eb:27:3f:f4:62:90:e5:45:3a:4d: 45:67:ed:97:c2:87:4c:f4:56:6d:0f:1f:ef:27:16: 3e:ff:3d:e2:9e:f7:8b:f3:75:7e:ca:ce:b8:1d:b4: 2e:97:9a:c1:67:08:de:f4:59:58:ce:b6:77:a2:2d: a0:73:18:53:4a:1a:c5:09:2c:56:e0:fc:81:9c:e9: 05:f9:d6:89:22:20:df:86:18:bf:c2:a2:4f:a6:b0: 51:5d:7d:03:93:fa:e1:81:e6:a4:fa:d0:31:9e:d9: b1:d3:b4:42:ce:91:e9:10:87:6a:d6:11:60:84:36: b8:95:3d:aa:bd:70:6f:dd:66:b9:6e:90:38:68:94: d4:18:a6:87:c1:bc:b2:3a:e5:bf:96:59:83:e4:8a: 28:b4:78:a7:a6:50:5b:9e:c0:3e:7e:9a:e6:19:3d: cb:2c:29:0e:a6:bb:4a:fc:60:7b:a2:02:c3:e9:65: 76:7c:3a:2e:26:b2:c7:d6:26:14:80:da:c3:89:fa: 76:34:69:22:c4:4c:52:26:bc:88:66:a6:03:ee:37: 3b:7b:30:04:73:e1:a7:cb:b9:f0:3a:dd:3f:63:e3: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:41:93:4C:CD:C1:F8:ED:CA:36:85:F7:6C:AD:1F:2D:F1:25:A9:79 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8a:34:88:16:69:e1:8a:56:52:13:d9:a7:ad:70:d4:3c:e9: c5:22:84:a3:6c:06:c4:e4:97:e4:02:b5:fc:5c:2c:79:5b:b5: 5b:c5:43:5c:c3:04:8c:b8:50:8d:32:31:06:8b:15:5f:28:b1: 61:d2:d1:09:41:f5:8e:3b:4a:51:b7:d3:b2:2e:89:32:4e:9d: 87:12:5b:2b:f2:01:31:7e:49:16:b6:57:26:b0:f9:2a:e0:8a: f2:66:98:b0:29:f2:20:80:f0:53:5e:ac:9d:49:36:87:45:53: fb:3b:87:87:b1:bd:d7:37:4d:24:3c:2f:4d:f2:89:40:71:99: 21:81:4f:c6:2a:ca:29:23:2b:ec:c0:9b:87:b6:61:f3:dd:51: 9f:bd:e9:bc:ca:ad:bc:b9:65:96:ce:5d:be:8d:97:c2:17:0e: 98:42:63:af:0a:fa:70:c6:3c:94:ac:f7:78:85:9f:b3:7d:e5: cb:c6:99:69:b0:75:bc:47:8c:b6:78:75:16:84:9a:29:fe:6a: 72:24:9d:9c:54:1d:c2:65:79:ef:f7:9b:d0:d1:98:d9:8a:79: 36:02:7c:24:f1:9b:a9:50:1e:fe:b6:d5:f1:a1:db:49:a1:a1: 7b:fb:cf:9a:35:cb:b2:e9:9b:06:e4:26:48:72:1d:48:5e:ee: 43:ce:95:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwODIwMTkzMjMyWhcNMjUwODI3MTkzMjMyWjAYMRYwFAYD VQQDEw02OGE2MjJkMC05MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuHC69eztmG9PrKoOYoc+8OuZu9LEQSSuzzfx+UJOfeQ3esnP/RikOVFOk1F Z+2XwodM9FZtDx/vJxY+/z3inveL83V+ys64HbQul5rBZwje9FlYzrZ3oi2gcxhT ShrFCSxW4PyBnOkF+daJIiDfhhi/wqJPprBRXX0Dk/rhgeak+tAxntmx07RCzpHp EIdq1hFghDa4lT2qvXBv3Wa5bpA4aJTUGKaHwbyyOuW/llmD5IootHinplBbnsA+ fprmGT3LLCkOprtK/GB7ogLD6WV2fDouJrLH1iYUgNrDifp2NGkixExSJryIZqYD 7jc7ezAEc+Gny7nwOt0/Y+PKBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpBk0zN wfjtyjaF92ytHy3xJal5MB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfijSIFmnhilZSE9mnrXDUPOnFIoSjbAbE5JfkArX8XCx5W7VbxUNc wwSMuFCNMjEGixVfKLFh0tEJQfWOO0pRt9OyLokyTp2HElsr8gExfkkWtlcmsPkq 4IryZpiwKfIggPBTXqydSTaHRVP7O4eHsb3XN00kPC9N8olAcZkhgU/GKsopIyvs wJuHtmHz3VGfvem8yq28uWWWzl2+jZfCFw6YQmOvCvpwxjyUrPd4hZ+zfeXLxplp sHW8R4y2eHUWhJop/mpyJJ2cVB3CZXnv95vQ0ZjZink2Anwk8ZupUB7+ttXxodtJ oaF7+8+aNcuy6ZsG5CZIch1IXu5DzpW6 -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:08 2025 by rpki-client