$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: 0wDhBW+TC+ST31Zo9xgqRT/gorVIglfpfq/gKJyR06c= Subject key identifier: A3:62:15:27:9D:24:08:FB:3D:60:4A:6C:62:86:D4:2F:E9:4F:D8:C4 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 0139 Signing time: Tue 09 Sep 2025 04:30:31 +0000 Manifest this update: Tue 09 Sep 2025 04:30:31 +0000 Manifest next update: Tue 16 Sep 2025 04:30:31 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: F9GnSqFSQe+hxG3yDbkHNBj6JC5fRfesj4cMzMhuRsU=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Sep 9 04:30:31 2025 GMT Not After : Sep 16 04:30:31 2025 GMT Subject: CN=68bfad67-f0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4f:72:0a:7a:3c:92:5f:f0:ab:89:c4:60:f6: 55:42:92:c1:2d:b9:c1:21:3f:ff:d7:c9:9e:6f:f1: 85:65:ca:da:f6:1d:61:00:9e:c1:4a:da:72:eb:a7: 88:76:89:b4:4d:43:e0:e8:e3:9a:d4:d9:e0:4a:8a: 74:04:b6:ba:c0:b0:9f:83:cf:ef:ec:e3:fc:d2:43: 0c:bf:c9:2f:ac:63:f2:e2:61:40:a4:d1:31:7c:15: 81:b4:af:46:73:db:72:6e:f1:c3:b0:ca:91:78:b3: d4:b8:3b:99:f0:11:d4:c2:eb:e7:ef:b0:bf:ab:a2: 79:c6:89:89:7f:f3:43:0f:da:cb:f3:12:08:f1:4c: b3:ad:9f:a9:09:8f:c2:96:39:64:e0:b3:6c:7c:45: 16:67:33:2f:b7:bd:3e:43:90:87:e7:87:d4:90:7b: 47:43:65:54:3f:0a:9f:cc:fc:21:7f:3e:bf:98:8b: 52:6d:59:cb:2a:ab:b9:4c:5b:e8:77:e4:00:ea:40: 99:d5:7c:c3:76:fe:f0:3f:66:56:53:bf:45:d8:be: a2:2b:31:b8:99:73:ed:47:49:02:17:c1:9d:36:2b: 60:23:89:85:ef:63:c9:1f:55:29:45:fd:59:14:e6: e9:5e:84:65:0b:78:28:80:2a:fa:d2:4f:3d:06:cf: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:62:15:27:9D:24:08:FB:3D:60:4A:6C:62:86:D4:2F:E9:4F:D8:C4 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:78:1c:12:16:ae:0f:e6:ac:31:95:7d:5d:ab:50:3e:35:c8: 86:67:b5:54:d6:57:73:da:c9:b9:cb:f0:d3:58:a5:58:a5:e8: 3b:20:56:77:9f:2d:52:37:ba:0e:2b:57:06:69:4e:ed:6b:b9: 91:ff:7d:a5:69:95:e3:af:48:0a:99:c3:ce:cf:5c:a7:30:1d: bc:71:6a:61:06:9d:64:cf:a1:c8:84:20:a2:93:f2:35:f7:68: 2a:1b:e8:ee:94:ea:18:65:7b:bf:ab:6b:d9:7f:f6:63:58:7c: e0:94:a8:67:57:0f:de:81:ad:63:d5:2f:3d:6f:eb:06:01:a3: cc:33:62:32:cd:46:d4:e6:3a:81:2d:cd:e1:db:20:54:5d:d8: 53:32:bb:fa:c0:ac:76:40:2b:8f:67:cf:a6:64:bd:49:a8:dd: a9:8d:7a:74:43:2e:77:b6:4b:33:d2:42:39:21:a3:ae:58:aa: c4:f5:9e:f6:73:2d:89:1b:fa:76:38:4c:5b:3e:88:51:bd:44: b3:e3:41:8f:3c:b9:47:c7:88:1d:8b:ad:72:f3:5c:9e:88:21: 1c:95:7a:d9:fa:74:ff:b9:d2:98:05:53:cb:29:f0:c5:5e:d2: de:0f:48:84:f1:f9:1c:76:f7:8c:b1:db:85:54:50:8a:36:f1: 26:37:f7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwOTA5MDQzMDMxWhcNMjUwOTE2MDQzMDMxWjAYMRYwFAYD VQQDEw02OGJmYWQ2Ny1mMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA409yCno8kl/wq4nEYPZVQpLBLbnBIT//18meb/GFZcra9h1hAJ7BStpy66eI dom0TUPg6OOa1NngSop0BLa6wLCfg8/v7OP80kMMv8kvrGPy4mFApNExfBWBtK9G c9tybvHDsMqReLPUuDuZ8BHUwuvn77C/q6J5xomJf/NDD9rL8xII8UyzrZ+pCY/C ljlk4LNsfEUWZzMvt70+Q5CH54fUkHtHQ2VUPwqfzPwhfz6/mItSbVnLKqu5TFvo d+QA6kCZ1XzDdv7wP2ZWU79F2L6iKzG4mXPtR0kCF8GdNitgI4mF72PJH1UpRf1Z FObpXoRlC3gogCr60k89Bs+DKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNiFSed JAj7PWBKbGKG1C/pT9jEMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAReBwSFq4P5qwxlX1dq1A+NciGZ7VU1ldz2sm5y/DTWKVYpeg7IFZ3 ny1SN7oOK1cGaU7ta7mR/32laZXjr0gKmcPOz1ynMB28cWphBp1kz6HIhCCik/I1 92gqG+julOoYZXu/q2vZf/ZjWHzglKhnVw/ega1j1S89b+sGAaPMM2IyzUbU5jqB Lc3h2yBUXdhTMrv6wKx2QCuPZ8+mZL1JqN2pjXp0Qy53tksz0kI5IaOuWKrE9Z72 cy2JG/p2OExbPohRvUSz40GPPLlHx4gdi61y81yeiCEclXrZ+nT/udKYBVPLKfDF XtLeD0iE8fkcdveMsduFVFCKNvEmN/eM -----END CERTIFICATE-----Generated at Wed Sep 10 00:03:51 2025 by rpki-client