$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: LDU8T4Bs33f1n82pRYptE7AVMxpqTzKkLKzXvx1BxIw= Subject key identifier: FF:25:D4:45:FD:F0:33:2A:C0:D9:7F:3B:00:44:53:AF:2F:14:E8:F6 Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1BB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1B9E Signing time: Thu 31 Jul 2025 16:28:54 +0000 Manifest this update: Thu 31 Jul 2025 16:28:53 +0000 Manifest next update: Thu 07 Aug 2025 16:28:53 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: 91IUiiKEsrpE4cxuOcVtD1/d0fMxFJWa7NZ4lcZHjsI=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 16:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7093 (0x1bb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Jul 31 16:28:53 2025 GMT Not After : Aug 7 16:28:53 2025 GMT Subject: CN=688b99c6-0afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:02:8f:d9:89:17:bc:0b:65:7a:e1:17:fc: bb:31:bc:34:26:b1:93:3c:4d:68:94:74:2c:83:ec: 54:12:40:8c:9a:3b:76:eb:d8:28:a6:19:55:6a:26: 0a:fd:a4:6a:ef:a9:fa:1a:1b:0b:ad:02:b5:ef:fe: 04:33:76:55:38:d8:82:3a:54:26:2c:17:25:c9:ac: 04:3f:5e:09:f0:6b:10:3f:7e:a1:50:68:ee:41:0f: f3:5e:24:ad:ec:6f:33:ca:c5:cd:ba:6c:0b:99:be: cd:62:b7:e0:76:3a:1e:e7:22:3f:c9:cb:08:94:9f: 46:67:fd:00:dd:03:5f:56:87:58:e2:55:12:f3:d4: d7:3c:cf:ab:e0:c4:ad:c4:c3:1b:cc:da:a7:1c:3d: 74:d2:9b:0e:dd:76:f2:cc:ed:98:05:98:d3:bb:36: 00:e8:bc:1a:53:f0:07:48:78:77:8c:1e:1d:18:21: 49:4c:9a:5b:2c:2d:c0:be:a6:e7:77:1a:a2:5c:fe: 3c:10:e5:b4:ae:65:69:34:0a:7c:70:dc:bb:5f:cc: a2:8c:69:4f:ec:c6:b3:85:69:09:bc:e8:80:15:d9: bd:ad:0d:3d:89:f5:5c:7b:7a:e2:e8:8c:ef:91:a4: d9:18:f6:a4:5c:65:26:05:dd:fa:be:19:5c:65:ff: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:25:D4:45:FD:F0:33:2A:C0:D9:7F:3B:00:44:53:AF:2F:14:E8:F6 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:79:1f:a1:fa:87:17:96:ee:87:dd:5f:00:c9:85:83:55:e6: 38:61:82:d8:9e:00:fa:3a:bf:72:39:b7:9f:06:99:30:92:a1: 25:61:a4:c9:89:39:9d:84:25:61:15:96:a6:8a:f6:dc:c3:d8: 3f:8e:03:14:6e:09:d1:96:f0:ba:da:72:d0:d2:38:9b:b1:7b: 14:11:cd:e9:b1:77:76:ef:72:63:5a:8c:e5:47:10:3c:92:4b: ac:5b:cc:5f:c6:9e:03:2d:a9:50:54:5e:ec:7a:aa:47:9c:e4: e2:a9:45:b6:da:01:80:9a:7b:05:1f:03:12:8c:84:59:2f:8d: 25:6f:59:9a:64:65:d7:a4:2b:e5:d0:86:8f:54:9c:5a:25:6e: c3:5f:78:f7:e9:a1:05:c6:6b:97:d4:9a:20:1b:b5:65:a8:ff: 9a:7b:c7:80:d2:69:d5:8e:09:5a:3a:a4:cf:19:e5:23:e1:ab: a3:d9:d0:0b:2d:92:bf:43:75:de:67:6a:40:77:e6:2e:f6:b6: 7a:85:14:c9:42:c7:b0:8d:1d:a3:21:6c:cd:c5:61:2d:ae:d5: 99:6e:fb:48:2b:b2:f4:9a:c2:c8:ec:bc:b3:7f:f8:c4:4f:ad: 6f:d1:56:af:65:b8:a9:35:b6:94:12:f1:d7:9f:3b:ef:11:4a: 4e:1d:0e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUwNzMxMTYyODUzWhcNMjUwODA3MTYyODUzWjAYMRYwFAYD VQQDEw02ODhiOTljNi0wYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25YCj9mJF7wLZXrhF/y7Mbw0JrGTPE1olHQsg+xUEkCMmjt269gophlVaiYK /aRq76n6GhsLrQK17/4EM3ZVONiCOlQmLBclyawEP14J8GsQP36hUGjuQQ/zXiSt 7G8zysXNumwLmb7NYrfgdjoe5yI/ycsIlJ9GZ/0A3QNfVodY4lUS89TXPM+r4MSt xMMbzNqnHD100psO3XbyzO2YBZjTuzYA6LwaU/AHSHh3jB4dGCFJTJpbLC3Avqbn dxqiXP48EOW0rmVpNAp8cNy7X8yijGlP7MazhWkJvOiAFdm9rQ09ifVce3ri6Izv kaTZGPakXGUmBd36vhlcZf+NyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8l1EX9 8DMqwNl/OwBEU68vFOj2MB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoeR+h+ocXlu6H3V8AyYWDVeY4YYLYngD6Or9yObefBpkwkqElYaTJ iTmdhCVhFZamivbcw9g/jgMUbgnRlvC62nLQ0jibsXsUEc3psXd273JjWozlRxA8 kkusW8xfxp4DLalQVF7seqpHnOTiqUW22gGAmnsFHwMSjIRZL40lb1maZGXXpCvl 0IaPVJxaJW7DX3j36aEFxmuX1JogG7VlqP+ae8eA0mnVjglaOqTPGeUj4auj2dAL LZK/Q3XeZ2pAd+Yu9rZ6hRTJQsewjR2jIWzNxWEtrtWZbvtIK7L0msLI7Lyzf/jE T61v0VavZbipNbaUEvHXnzvvEUpOHQ4k -----END CERTIFICATE-----Generated at Thu Jul 31 18:09:59 2025 by rpki-client