$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: KTvxuiSH0gTEDCtIAiVeP2oZ+nnTgBK2x47DySrwdZQ= Subject key identifier: 44:8A:9C:EB:B8:18:E5:54:BD:44:A2:BF:9C:5B:83:A5:01:5B:85:3F Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1395 Signing time: Sun 24 Aug 2025 19:18:13 +0000 Manifest this update: Sun 24 Aug 2025 19:18:13 +0000 Manifest next update: Sun 31 Aug 2025 19:18:13 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: HPsViqykB1pMXyUFcU5x1YPdqCI6Wu23Od6xwJA3kJE=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Aug 24 19:18:13 2025 GMT Not After : Aug 31 19:18:13 2025 GMT Subject: CN=68ab6575-9314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:13:34:fd:cf:04:7a:08:8e:aa:4a:78:a7: 47:b3:41:3d:df:b8:3b:2b:1e:aa:b3:bf:55:a6:0e: ba:eb:2a:22:2c:7f:0a:c9:73:ff:20:f8:30:4b:2f: 77:11:8b:b1:6c:85:c1:c0:fa:e7:97:a4:35:3f:96: b6:cc:71:e5:f8:0b:51:86:e6:b2:3f:00:c7:82:12: d5:6b:8a:1d:a3:75:9b:88:8a:40:63:85:86:c0:9d: cc:a0:5b:90:6a:89:ed:70:10:34:50:36:fb:fc:e0: 08:11:af:ee:f7:9a:75:a9:d3:ea:d6:f8:62:1f:21: 20:5f:af:a8:03:95:6a:56:b0:11:93:3d:d6:15:c0: 04:b4:b4:4e:c2:49:bc:a4:c5:17:7a:3b:a2:5f:ce: bd:a4:8a:87:b8:66:7e:61:53:f3:d7:f7:40:90:ee: 28:9d:8a:26:5f:05:6d:2c:04:e4:85:30:f5:10:7b: 05:3a:fa:ae:45:79:8f:e8:82:26:ab:27:ce:6d:4c: 82:4c:96:5e:0d:59:4d:e6:d6:79:73:a8:00:11:5a: 87:1c:03:df:ed:6d:41:39:ac:1d:99:a2:69:19:52: e8:eb:e1:fc:bb:9a:c7:ac:2e:ab:43:0b:b5:ba:7e: 0b:77:6b:9d:c2:19:98:41:43:ad:59:3a:47:8d:b2: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:9C:EB:B8:18:E5:54:BD:44:A2:BF:9C:5B:83:A5:01:5B:85:3F X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:47:57:fc:f9:65:39:aa:12:3d:68:e7:42:96:03:8f:47:6c: ad:53:2c:83:f5:7d:3a:7a:5b:42:ee:d5:dd:97:94:88:36:1e: 1f:e2:55:cf:5d:5c:92:38:9f:04:cd:8f:a7:19:8d:64:55:ba: 2d:dd:d7:3a:9c:9e:31:b3:6a:54:1e:ac:b9:af:7a:b4:0d:41: 07:ef:0e:da:07:af:8d:ff:d7:c2:3d:f6:4b:3d:48:b8:6c:bc: 82:fb:bd:ec:fc:45:14:cf:64:07:c0:f6:5a:ca:08:6f:0b:a6: b7:f6:14:8c:8e:2d:31:9a:66:be:ad:fa:5f:59:71:2d:ef:df: 95:b1:eb:47:f8:b4:94:7e:d1:37:11:e1:94:8b:cd:60:85:98: c9:f8:55:5e:cb:6f:55:7a:4b:74:f2:cc:1e:de:ba:5f:24:83: 73:96:c3:d1:47:b2:8b:52:83:11:7f:8a:e5:c2:83:2f:2e:e5: 1a:79:db:86:1d:57:ef:a5:94:ca:09:30:81:4c:af:54:f3:a2: 01:18:33:33:5c:32:9d:4d:b9:37:a8:f9:48:76:56:f2:e5:1b: 6e:aa:3b:fa:ac:c8:0b:34:74:ca:b9:a5:3d:de:78:d2:be:c2: fc:a4:6e:22:4c:82:b1:47:75:29:a3:b6:6c:d0:cc:21:0a:85: 32:c3:0e:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTA4MjQxOTE4MTNaFw0yNTA4MzExOTE4MTNaMBgxFjAUBgNV BAMTDTY4YWI2NTc1LTkzMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMRxM0/c8EegiOqkp4p0ezQT3fuDsrHqqzv1WmDrrrKiIsfwrJc/8g+DBLL3cR i7FshcHA+ueXpDU/lrbMceX4C1GG5rI/AMeCEtVrih2jdZuIikBjhYbAncygW5Bq ie1wEDRQNvv84AgRr+73mnWp0+rW+GIfISBfr6gDlWpWsBGTPdYVwAS0tE7CSbyk xRd6O6Jfzr2kioe4Zn5hU/PX90CQ7iidiiZfBW0sBOSFMPUQewU6+q5FeY/ogiar J85tTIJMll4NWU3m1nlzqAARWoccA9/tbUE5rB2ZomkZUujr4fy7msesLqtDC7W6 fgt3a53CGZhBQ61ZOkeNst+lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURIqc67gY 5VS9RKK/nFuDpQFbhT8wHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBHV/z5ZTmqEj1o50KWA49HbK1TLIP1fTp6W0Lu1d2XlIg2Hh/iVc9d XJI4nwTNj6cZjWRVui3d1zqcnjGzalQerLmverQNQQfvDtoHr43/18I99ks9SLhs vIL7vez8RRTPZAfA9lrKCG8Lprf2FIyOLTGaZr6t+l9ZcS3v35Wx60f4tJR+0TcR 4ZSLzWCFmMn4VV7Lb1V6S3TyzB7eul8kg3OWw9FHsotSgxF/iuXCgy8u5Rp524Yd V++llMoJMIFMr1TzogEYMzNcMp1NuTeo+Uh2VvLlG26qO/qsyAs0dMq5pT3eeNK+ wvykbiJMgrFHdSmjtmzQzCEKhTLDDrE= -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:26 2025 by rpki-client