$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: vaSXDVcGvBOuRRFBvrg081lbFO6xmV4+ZISDYVLjdd0= Subject key identifier: 0D:5D:51:57:60:F0:1B:24:13:4E:B4:3F:20:47:F3:C5:8E:95:65:AB Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 01D4 Signing time: Sat 06 Sep 2025 15:57:54 +0000 Manifest this update: Sat 06 Sep 2025 15:57:54 +0000 Manifest next update: Sat 13 Sep 2025 15:57:54 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: zIDUJ44uDA057x5QtDYPbXV4OocxQXoZ3cbMWonjzns=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: Sep 6 15:57:54 2025 GMT Not After : Sep 13 15:57:54 2025 GMT Subject: CN=68bc5a02-5154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:e8:2e:6a:7f:f4:e2:9a:bc:39:3e:97:7d: 3c:86:a7:d7:f3:c7:7b:ef:47:11:54:e9:86:fb:c2: 7b:be:96:7f:49:b7:b0:14:8f:fc:49:e9:ff:cb:7d: 33:ac:4a:aa:a9:8e:13:85:e3:6f:de:70:f9:3c:22: 18:77:aa:0f:d6:ee:ec:57:d0:ed:9f:a2:c9:55:44: 5b:a4:25:78:da:02:76:4a:16:7c:12:e1:cc:7d:e9: e7:eb:43:f4:24:30:0b:ff:7e:53:03:b8:f3:59:6c: 87:30:86:80:4b:95:32:f7:77:1d:98:14:9d:a3:1d: 4b:1f:6a:5f:ef:17:65:03:df:1f:c7:b8:09:7d:1e: 6f:89:9f:79:af:3c:d8:80:aa:31:9b:99:0c:4d:16: f9:72:82:16:e1:0a:8c:f2:55:43:4f:84:cf:2a:31: 9b:89:bc:fc:86:9c:a3:ec:cd:33:71:99:2e:04:97: ef:e8:6f:b8:cd:98:35:b1:b0:42:d3:89:44:7d:41: d1:8b:14:ed:b6:ff:62:fb:11:13:a4:18:3b:55:70: 6a:0a:8f:c5:ee:2c:a3:62:52:f6:e9:6c:86:a4:a4: f1:f2:32:0c:22:de:43:7a:04:64:fb:3e:5e:36:d3: cb:f0:16:cc:4e:e2:27:cd:5d:19:b0:af:37:35:5b: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5D:51:57:60:F0:1B:24:13:4E:B4:3F:20:47:F3:C5:8E:95:65:AB X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:24:2c:74:b1:59:e8:23:e0:86:01:50:6f:4e:ef:c3:13:63: ce:a4:f1:bc:40:11:64:52:61:a7:2d:d1:62:2d:26:ee:08:bd: f7:ce:e5:c3:03:c5:fd:a5:57:f0:3d:a4:3f:c0:1b:43:1c:96: 9d:be:c7:c4:d0:a3:9f:53:96:28:93:e1:cf:12:64:f2:88:c2: da:c2:db:e1:0e:9b:51:67:a8:7d:49:c6:08:67:4a:dd:93:f6: d5:73:d2:e5:04:4d:3e:6f:c7:2b:b1:c5:a5:40:89:be:cc:e9: ac:8d:b2:1b:ae:4c:58:52:ab:04:a7:2f:df:22:1b:ab:d0:eb: fe:72:d3:c8:b2:07:55:3e:7b:73:52:b9:bf:d9:18:46:d8:1a: db:c2:e2:cf:f0:65:85:21:ac:a4:07:04:a8:32:b0:9c:71:5f: 41:64:62:89:b8:2d:fc:ab:4c:89:5b:99:78:d4:b7:7f:b3:68: f4:a6:3d:be:86:56:98:40:88:44:3b:00:69:a0:44:cd:be:8d: c6:f2:84:7a:99:4e:11:b5:2f:65:54:4f:3f:8e:19:89:92:5f: 0c:a8:e9:16:24:e9:d1:03:49:56:92:61:a5:b8:8d:d7:8f:86: 4d:13:58:08:11:a7:95:e2:0b:37:c3:7d:09:bc:b4:b6:62:81: a8:13:0a:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjUwOTA2MTU1NzU0WhcNMjUwOTEzMTU1NzU0WjAYMRYwFAYD VQQDEw02OGJjNWEwMi01MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ofoLmp/9OKavDk+l308hqfX88d770cRVOmG+8J7vpZ/SbewFI/8Sen/y30z rEqqqY4TheNv3nD5PCIYd6oP1u7sV9Dtn6LJVURbpCV42gJ2ShZ8EuHMfenn60P0 JDAL/35TA7jzWWyHMIaAS5Uy93cdmBSdox1LH2pf7xdlA98fx7gJfR5viZ95rzzY gKoxm5kMTRb5coIW4QqM8lVDT4TPKjGbibz8hpyj7M0zcZkuBJfv6G+4zZg1sbBC 04lEfUHRixTttv9i+xETpBg7VXBqCo/F7iyjYlL26WyGpKTx8jIMIt5DegRk+z5e NtPL8BbMTuInzV0ZsK83NVu0VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1dUVdg 8BskE060PyBH88WOlWWrMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaJCx0sVnoI+CGAVBvTu/DE2POpPG8QBFkUmGnLdFiLSbuCL33zuXD A8X9pVfwPaQ/wBtDHJadvsfE0KOfU5Yok+HPEmTyiMLawtvhDptRZ6h9ScYIZ0rd k/bVc9LlBE0+b8crscWlQIm+zOmsjbIbrkxYUqsEpy/fIhur0Ov+ctPIsgdVPntz Urm/2RhG2BrbwuLP8GWFIaykBwSoMrCccV9BZGKJuC38q0yJW5l41Ld/s2j0pj2+ hlaYQIhEOwBpoETNvo3G8oR6mU4RtS9lVE8/jhmJkl8MqOkWJOnRA0lWkmGluI3X j4ZNE1gIEaeV4gs3w30JvLS2YoGoEwod -----END CERTIFICATE-----Generated at Mon Sep 8 10:51:26 2025 by rpki-client