$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json) Hash identifier: EX8xvT3jaZnwHPTUmdzb0M3guJHotNOt0fvNgsn1Oeo= Subject key identifier: 18:40:FF:6C:D8:7C:E8:A7:85:9D:35:7F:95:09:4D:35:F1:4D:27:FB Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft Manifest number: 1A Signing time: Thu 21 Aug 2025 08:10:33 +0000 Manifest this update: Thu 21 Aug 2025 08:10:32 +0000 Manifest next update: Thu 28 Aug 2025 08:10:32 +0000 Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: NOavysyHYA/fJ9F0LKhq9dkzJrR0StG1yq9qGf5uF18=) 2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Validity Not Before: Aug 21 08:10:32 2025 GMT Not After : Aug 28 08:10:32 2025 GMT Subject: CN=68a6d478-3540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:a8:b3:e5:e1:79:63:a2:a1:ac:52:53:f9: 52:e6:31:e0:42:17:d5:d4:1c:d5:c6:03:7b:c4:ac: 5f:de:0c:c8:e5:d8:d8:4a:59:72:e2:ce:13:7d:d3: 46:d3:6e:05:c1:11:90:d8:15:6d:bf:7c:d0:43:37: 58:fe:cb:d3:b5:7f:dd:b6:0e:6a:12:63:47:04:47: 72:68:4e:e1:a5:3a:a0:33:7b:27:7e:a6:6c:e1:37: 3d:f5:b2:23:fa:59:28:7c:f0:e4:7a:d5:8c:3c:40: 8e:2b:d4:fa:7b:b2:de:6a:a7:3a:80:c5:9f:ed:12: fc:37:18:77:b2:41:7b:cd:7c:47:43:6d:31:fe:54: 1d:64:9c:23:7f:6c:fb:49:d9:7f:97:89:3e:3c:70: 81:d5:8e:fb:cb:92:4c:2f:88:9e:eb:1f:77:fa:1c: 34:99:8f:62:d9:35:e3:4c:89:e3:e8:b4:ba:44:7b: c5:e4:5e:d3:0b:f2:f9:53:7f:85:3f:c3:61:cf:78: 95:32:69:ba:01:e5:ca:c8:3e:f0:af:d7:4f:d7:14: cf:31:a1:21:2e:39:82:b4:ba:8f:81:71:44:64:7b: eb:cb:d1:58:60:9f:1e:78:70:67:41:c2:61:72:16: 99:a9:f1:a7:17:c4:b6:cf:bb:d8:31:f0:11:1d:84: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:40:FF:6C:D8:7C:E8:A7:85:9D:35:7F:95:09:4D:35:F1:4D:27:FB X509v3 Authority Key Identifier: keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8f:07:ed:1a:da:d6:bb:9c:01:aa:1a:a4:51:d2:f3:1d:31: bb:b5:92:f1:67:b2:25:a3:94:fa:f9:b5:3f:70:a9:d4:36:c0: 1d:4a:59:e0:b2:cf:22:ba:a1:94:cd:f5:0b:0f:55:b4:17:f6: 3d:45:95:73:c6:cd:71:1a:9a:5a:9d:41:47:d1:bc:5c:e5:56: 62:5f:12:19:0c:01:58:6b:a5:50:ca:e1:02:61:84:5d:a7:e7: 36:37:f2:01:51:f9:45:53:2b:2b:7f:f5:f2:0b:25:ae:51:13: cd:18:b4:4a:a6:ae:20:a5:c9:e5:11:78:41:d8:f7:c8:0b:6a: ad:68:71:db:45:eb:c1:e7:02:f6:70:62:92:ab:13:ae:0b:28: 28:1b:ab:13:01:d7:6e:32:6c:38:ad:3a:71:4e:a2:78:87:bd: ec:a7:06:4c:7c:29:c9:32:ca:52:9a:25:79:08:65:9b:03:59: 4f:47:e8:28:e7:12:f5:ca:bb:49:f9:21:3f:01:e2:8c:dd:cd: e3:a7:86:8e:63:ce:4f:1c:b4:aa:c1:46:f8:96:1a:16:3f:25: 1b:e6:01:d9:45:73:2a:1a:43:d3:e4:ca:e4:b4:db:a4:a5:f2: a5:2a:52:b7:6c:d5:be:78:7c:8d:f3:09:bc:a2:c4:2f:3e:73: cf:31:65:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURDMTExMC8GA1UEBRMoOTgyNDIxODFBNzU1NEEyOEU3OEMxQUU4QTczQkUyNzk0 NTJDQ0JGNDAeFw0yNTA4MjEwODEwMzJaFw0yNTA4MjgwODEwMzJaMBgxFjAUBgNV BAMTDTY4YTZkNDc4LTM1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw+6iz5eF5Y6KhrFJT+VLmMeBCF9XUHNXGA3vErF/eDMjl2NhKWXLizhN900bT bgXBEZDYFW2/fNBDN1j+y9O1f922DmoSY0cER3JoTuGlOqAzeyd+pmzhNz31siP6 WSh88OR61Yw8QI4r1Pp7st5qpzqAxZ/tEvw3GHeyQXvNfEdDbTH+VB1knCN/bPtJ 2X+XiT48cIHVjvvLkkwviJ7rH3f6HDSZj2LZNeNMiePotLpEe8XkXtML8vlTf4U/ w2HPeJUyaboB5crIPvCv10/XFM8xoSEuOYK0uo+BcURke+vL0Vhgnx54cGdBwmFy Fpmp8acXxLbPu9gx8BEdhFwbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGED/bNh8 6KeFnTV/lQlNNfFNJ/swHwYDVR0jBBgwFoAUmCQhgadVSijnjBropzvieUUsy/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREMxL0ZEMTEyQjc2NUQ2 OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUNRaGdhZFZTaWpuakJyb3B6dmllVVVzeV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REMxL0ZEMTEyQjc2NUQ2OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lq bmpCcm9wenZpZVVVc3lfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCPB+0a2ta7nAGqGqRR0vMdMbu1kvFnsiWjlPr5tT9wqdQ2wB1KWeCy zyK6oZTN9QsPVbQX9j1FlXPGzXEamlqdQUfRvFzlVmJfEhkMAVhrpVDK4QJhhF2n 5zY38gFR+UVTKyt/9fILJa5RE80YtEqmriClyeUReEHY98gLaq1ocdtF68HnAvZw YpKrE64LKCgbqxMB124ybDitOnFOoniHveynBkx8KckyylKaJXkIZZsDWU9H6Cjn EvXKu0n5IT8B4ozdzeOnho5jzk8ctKrBRviWGhY/JRvmAdlFcyoaQ9PkyuS026Sl 8qUqUrds1b54fI3zCbyixC8+c88xZXI= -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:38 2025 by rpki-client