$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: qpk9Eo691CvyE/QeAIVTJWHtgUv99dC5nx4iIzF+xk0= Subject key identifier: ED:D7:CA:B1:10:AF:68:72:C1:28:74:40:56:B2:19:13:C1:BF:78:C6 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0438 Signing time: Thu 21 Aug 2025 00:26:07 +0000 Manifest this update: Thu 21 Aug 2025 00:26:06 +0000 Manifest next update: Thu 28 Aug 2025 00:26:06 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: xwojbuIpytvZN6JnzQR13sioegYj5iqRnOb+jhp033g=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Aug 21 00:26:06 2025 GMT Not After : Aug 28 00:26:06 2025 GMT Subject: CN=68a6679f-3f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:6d:73:c8:4b:c7:16:93:e9:08:68:8d:29: 40:58:24:12:a6:bf:6c:40:5e:01:68:ee:52:2b:ec: 4b:0e:8f:44:6a:8a:f0:4e:a7:82:0d:6a:63:81:47: e8:0b:5c:18:34:66:16:62:4e:ec:88:62:b9:96:b5: c8:b1:58:6c:8a:cc:a0:90:a1:80:6b:e1:78:e2:65: 86:f8:b8:3b:71:09:51:dc:4e:2d:18:c2:92:67:0f: ea:20:3a:e1:a6:a1:ff:89:26:55:d6:c5:55:a5:a9: 44:f0:21:26:66:ae:1f:1b:87:b5:e5:e5:a0:d8:4f: 3e:ca:fc:9a:61:43:4e:e4:c1:9d:5c:72:eb:ad:12: bf:6b:be:d2:2c:a3:ba:01:a1:e7:36:cb:37:fa:98: dc:b6:16:e3:0b:a9:eb:f4:ff:1a:72:fe:1e:3a:3f: 77:31:68:5c:78:ab:2e:64:c9:33:8a:27:89:2a:8a: 19:af:0f:b2:77:00:d7:26:50:db:a1:e2:36:21:e2: 9c:f4:29:72:61:ab:d0:ab:0f:fe:f4:21:ee:c5:cd: 8a:b2:b6:80:06:0b:09:83:a0:52:85:dd:6c:6f:24: 1c:9c:48:14:3b:5c:61:30:79:53:e8:c8:1c:1c:da: 7b:52:b0:ef:86:b4:df:63:e3:19:13:22:d7:5d:60: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:CA:B1:10:AF:68:72:C1:28:74:40:56:B2:19:13:C1:BF:78:C6 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a6:c8:68:77:3a:6a:e4:0c:1f:86:c5:8d:9b:e6:d8:6a:e8: 9a:a1:19:db:3f:f1:a4:82:09:55:f8:e1:34:5f:4d:c4:1e:4e: ec:7b:9d:43:bf:23:42:7e:54:88:fb:f1:a6:7c:90:60:54:1b: 36:8e:c7:11:82:1d:fa:eb:04:f7:e3:16:47:95:37:ae:a9:38: 79:4a:3f:7a:b7:69:53:2f:fd:1a:40:13:f8:78:c8:87:57:85: 30:2b:b1:ed:73:2f:be:9e:b9:63:3b:81:eb:4d:c9:98:57:58: f8:78:c3:82:6b:dc:3c:7c:95:5a:b7:0e:07:52:81:8c:81:db: 67:b9:f2:cf:67:42:ff:51:36:2c:83:8f:7e:00:93:a4:89:46: d5:d2:48:fd:db:cd:8e:38:c4:6e:6d:e9:8f:f1:22:b9:31:05: 6c:ff:37:52:19:e6:91:d7:68:87:bb:3b:f5:73:7e:0b:86:c0: 53:ba:3a:d3:fd:b5:25:3b:a5:83:70:1c:40:ee:5e:6b:7d:e6: d8:c4:d0:09:91:c1:d6:0c:2e:8f:66:01:58:42:00:00:53:bc: 66:be:9e:c4:a9:66:c0:2a:72:86:ad:1a:c9:8f:51:65:00:51: d1:ec:e8:45:c5:10:32:2f:7f:f8:c4:35:b7:3a:9f:02:6e:9e: 93:e4:32:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUwODIxMDAyNjA2WhcNMjUwODI4MDAyNjA2WjAYMRYwFAYD VQQDEw02OGE2Njc5Zi0zZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQJtc8hLxxaT6QhojSlAWCQSpr9sQF4BaO5SK+xLDo9EaorwTqeCDWpjgUfo C1wYNGYWYk7siGK5lrXIsVhsisygkKGAa+F44mWG+Lg7cQlR3E4tGMKSZw/qIDrh pqH/iSZV1sVVpalE8CEmZq4fG4e15eWg2E8+yvyaYUNO5MGdXHLrrRK/a77SLKO6 AaHnNss3+pjcthbjC6nr9P8acv4eOj93MWhceKsuZMkziieJKooZrw+ydwDXJlDb oeI2IeKc9ClyYavQqw/+9CHuxc2KsraABgsJg6BShd1sbyQcnEgUO1xhMHlT6Mgc HNp7UrDvhrTfY+MZEyLXXWBooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3XyrEQ r2hywSh0QFayGRPBv3jGMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnpshodzpq5AwfhsWNm+bYauiaoRnbP/GkgglV+OE0X03EHk7se51D vyNCflSI+/GmfJBgVBs2jscRgh366wT34xZHlTeuqTh5Sj96t2lTL/0aQBP4eMiH V4UwK7Htcy++nrljO4HrTcmYV1j4eMOCa9w8fJVatw4HUoGMgdtnufLPZ0L/UTYs g49+AJOkiUbV0kj9282OOMRubemP8SK5MQVs/zdSGeaR12iHuzv1c34LhsBTujrT /bUlO6WDcBxA7l5rfebYxNAJkcHWDC6PZgFYQgAAU7xmvp7EqWbAKnKGrRrJj1Fl AFHR7OhFxRAyL3/4xDW3Op8Cbp6T5DKT -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:41 2025 by rpki-client