$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: B6pg6zPmf5ZMSfvVfHF16oWguMwGKVTGiKiQOKK+Rbc= Subject key identifier: 08:E5:E8:52:0C:61:6F:B0:7E:41:3E:E0:BD:F5:15:BD:4D:80:C9:9D Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DED Signing time: Sun 24 Aug 2025 16:04:53 +0000 Manifest this update: Sun 24 Aug 2025 16:04:52 +0000 Manifest next update: Sun 31 Aug 2025 16:04:52 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: ctoy+lRvfCA5dOhS2zEEaRWVjN95ybA8i/RCQ2nebwM=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7670 (0x1df6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Aug 24 16:04:52 2025 GMT Not After : Aug 31 16:04:52 2025 GMT Subject: CN=68ab3825-22ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:d6:72:d3:b8:91:b7:02:dc:f3:92:50:11: 09:47:2a:91:7c:dc:07:eb:a5:97:a9:51:1f:54:c3: f8:d3:e1:c3:8e:b7:17:4a:89:91:d8:4a:08:5a:8a: 4d:c8:68:99:6b:ae:47:2b:7a:c8:b7:63:7a:91:4a: 64:a9:aa:71:51:49:b5:39:96:33:d1:38:b0:b7:8f: f7:9f:b9:9e:15:33:b3:d3:4a:88:20:d9:93:64:dc: 43:f0:25:f7:75:1b:f7:0c:12:d4:c7:be:6c:4d:5a: 11:e9:f6:51:c9:4a:7a:2e:20:35:81:f6:f6:6e:c7: 3a:ff:ef:9d:9a:e7:47:ed:a4:6a:17:9d:84:b5:d6: ff:8d:d4:ba:33:12:49:d6:f0:64:b3:3f:71:fc:8b: 44:24:ae:4d:16:e1:42:c8:71:3d:a3:b4:e5:b1:08: 5f:a4:96:ed:d6:19:8d:9e:29:82:97:08:74:a5:4f: 25:4b:5c:54:a2:99:c7:f8:bf:b1:b1:08:95:c1:17: 85:e2:b2:e2:27:59:67:70:3f:08:db:8b:aa:41:8b: e9:bd:06:84:15:87:cb:f9:2d:8b:37:88:f4:1c:8b: 83:81:32:08:2c:fe:69:a4:6d:41:a4:d3:bd:80:df: 2f:6a:74:37:83:25:32:c7:25:f9:2a:cb:e6:22:15: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:E8:52:0C:61:6F:B0:7E:41:3E:E0:BD:F5:15:BD:4D:80:C9:9D X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c1:ee:d1:53:45:fa:67:c3:78:57:b8:e2:b7:d8:d2:79:13: 62:b4:2a:3d:05:e9:7f:aa:46:f0:b3:fa:d2:c7:73:69:b0:d2: 9f:4a:1a:f3:bc:c7:80:fc:29:fd:69:2e:e8:07:a6:99:45:70: f3:d0:57:89:44:34:d4:2c:ab:99:88:a6:68:41:c0:9f:c0:b5: 2f:0c:ac:ca:92:cb:a0:8f:67:63:29:9f:a5:ea:64:8a:3b:46: 69:33:14:9b:7b:1e:52:f7:8a:35:19:36:4e:d5:99:89:53:3e: 56:ff:4c:a5:dc:8a:57:95:80:5e:2a:73:23:3a:27:b7:11:9a: 0c:66:06:53:47:ca:74:f3:f3:dd:f6:57:a3:4f:71:f6:c3:b5: 27:29:45:ad:1a:0e:e3:6f:34:5e:3c:cd:6f:ea:d6:61:00:3a: 72:7e:93:3d:32:53:3c:b3:7c:54:56:25:75:17:be:15:10:15: cf:4e:68:78:82:18:0f:e7:4a:5b:dc:0e:1e:10:c1:a2:39:e3: 6b:dd:10:f7:59:56:1e:88:c0:75:4a:98:b8:7d:e3:26:e5:6b: 09:97:89:1f:e9:eb:66:57:70:2f:a6:a8:01:6c:b8:47:03:1a: 5c:2b:16:e0:02:29:1a:04:9c:f7:3b:d2:c0:12:2b:05:96:87: db:a6:cb:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwODI0MTYwNDUyWhcNMjUwODMxMTYwNDUyWjAYMRYwFAYD VQQDEw02OGFiMzgyNS0yMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTnWctO4kbcC3POSUBEJRyqRfNwH66WXqVEfVMP40+HDjrcXSomR2EoIWopN yGiZa65HK3rIt2N6kUpkqapxUUm1OZYz0Tiwt4/3n7meFTOz00qIINmTZNxD8CX3 dRv3DBLUx75sTVoR6fZRyUp6LiA1gfb2bsc6/++dmudH7aRqF52Etdb/jdS6MxJJ 1vBksz9x/ItEJK5NFuFCyHE9o7TlsQhfpJbt1hmNnimClwh0pU8lS1xUopnH+L+x sQiVwReF4rLiJ1lncD8I24uqQYvpvQaEFYfL+S2LN4j0HIuDgTIILP5ppG1BpNO9 gN8vanQ3gyUyxyX5KsvmIhULSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjl6FIM YW+wfkE+4L31Fb1NgMmdMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5we7RU0X6Z8N4V7jit9jSeRNitCo9Bel/qkbws/rSx3NpsNKfShrz vMeA/Cn9aS7oB6aZRXDz0FeJRDTULKuZiKZoQcCfwLUvDKzKksugj2djKZ+l6mSK O0ZpMxSbex5S94o1GTZO1ZmJUz5W/0yl3IpXlYBeKnMjOie3EZoMZgZTR8p08/Pd 9lejT3H2w7UnKUWtGg7jbzRePM1v6tZhADpyfpM9MlM8s3xUViV1F74VEBXPTmh4 ghgP50pb3A4eEMGiOeNr3RD3WVYeiMB1Spi4feMm5WsJl4kf6etmV3AvpqgBbLhH AxpcKxbgAikaBJz3O9LAEisFlofbpssx -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:24 2025 by rpki-client