$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: 8HEx14BHlJafMvkfc5N3h1wtxrSI6X7S4m7bddEBgts= Subject key identifier: DC:BC:89:50:F9:33:F2:2F:22:45:74:23:56:96:B8:EB:77:0C:B7:46 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 0882 Signing time: Sun 20 Jul 2025 20:47:58 +0000 Manifest this update: Sun 20 Jul 2025 20:47:57 +0000 Manifest next update: Sun 27 Jul 2025 20:47:57 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: O/Bm0biFhkIwZB5NQyBxGd1zQPcYSRw5IVsEdZ3mTD8=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Jul 20 20:47:57 2025 GMT Not After : Jul 27 20:47:57 2025 GMT Subject: CN=687d55fd-0dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:da:22:05:15:6c:e2:4e:8b:37:85:69:a3: 5f:26:2e:45:5f:a5:c9:6d:a2:b6:78:2f:e6:99:1b: f0:3a:d0:43:59:3d:2b:e0:a2:59:10:c5:3d:d4:ff: 86:07:8e:fb:16:6e:d4:0d:ef:3e:85:ff:c0:a8:46: 06:a5:cd:14:4e:38:d1:82:85:10:fb:a4:f2:c1:c9: ff:fa:78:bc:91:2e:14:5c:49:c6:92:ea:65:8e:c1: 9f:8f:c0:fb:bc:96:92:d8:26:90:d6:b8:13:0b:63: c0:a4:3e:90:da:0a:77:ce:16:30:6d:a1:1b:a1:4e: bf:c4:10:1c:65:44:8d:2b:d8:29:d4:78:c5:ec:d9: c2:70:d4:f2:af:c3:bb:ad:65:10:78:0f:7c:f5:62: c0:b9:12:59:c4:cd:52:3a:62:be:de:3b:84:d3:d4: 04:d0:b9:bd:a2:5a:de:41:1a:06:80:2f:a1:1d:9c: 00:b5:91:f4:5e:2c:06:e4:42:77:28:18:8f:24:53: c3:0b:a1:f0:98:d8:7b:81:85:2d:17:97:f5:7f:d6: 87:b9:43:af:10:55:91:79:f5:8d:fd:37:93:bb:c0: 76:c9:36:99:03:14:17:de:d4:ca:f2:ab:ab:29:28: 72:16:ef:7a:89:bb:ca:5d:58:95:f6:89:ec:24:15: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BC:89:50:F9:33:F2:2F:22:45:74:23:56:96:B8:EB:77:0C:B7:46 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c9:5d:2a:31:2a:a7:51:0d:1f:60:92:c3:18:8b:af:6d:08: 75:8d:4f:a9:04:6d:c5:4f:cb:73:b1:dd:8d:dc:22:d9:33:b3: db:95:3d:fd:74:48:50:3f:ff:67:26:88:cc:3e:ad:2a:38:49: dd:b6:60:73:3b:60:d1:ad:76:cd:ab:68:47:d6:06:e0:f5:e8: 24:43:79:68:24:45:4a:b5:fd:c7:ac:2d:4d:e9:5a:89:90:37: 73:6e:38:46:55:8f:6a:35:d9:4f:80:c2:6c:07:4a:b8:93:53: 47:6e:12:a2:8a:96:63:ca:a9:38:38:de:e8:9f:3c:35:e1:18: 79:59:11:58:4a:54:89:fa:59:00:f4:89:b2:74:cb:92:1f:d6: 90:19:1b:2c:59:8c:22:87:f8:0c:85:98:7f:f4:95:82:e9:ca: d4:7b:b8:b5:63:a2:e6:4b:ab:72:59:79:2a:9d:a7:e4:75:fc: e2:a3:bd:2f:1c:cd:6c:e6:27:20:a6:75:2c:01:e0:91:1a:f4: a4:11:ab:6d:06:28:52:af:ee:8d:1f:d4:3b:46:96:cf:b0:e2: ab:63:3f:f5:e7:73:60:2d:15:78:e0:b4:dd:25:ec:cd:e6:bb: 03:1c:ce:9c:e9:47:bd:fa:e9:96:05:bd:0b:ae:ea:5d:b6:67: 87:00:1a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUwNzIwMjA0NzU3WhcNMjUwNzI3MjA0NzU3WjAYMRYwFAYD VQQDEw02ODdkNTVmZC0wZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWnaIgUVbOJOizeFaaNfJi5FX6XJbaK2eC/mmRvwOtBDWT0r4KJZEMU91P+G B477Fm7UDe8+hf/AqEYGpc0UTjjRgoUQ+6Tywcn/+ni8kS4UXEnGkupljsGfj8D7 vJaS2CaQ1rgTC2PApD6Q2gp3zhYwbaEboU6/xBAcZUSNK9gp1HjF7NnCcNTyr8O7 rWUQeA989WLAuRJZxM1SOmK+3juE09QE0Lm9olreQRoGgC+hHZwAtZH0XiwG5EJ3 KBiPJFPDC6HwmNh7gYUtF5f1f9aHuUOvEFWRefWN/TeTu8B2yTaZAxQX3tTK8qur KShyFu96ibvKXViV9onsJBUuaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy8iVD5 M/IvIkV0I1aWuOt3DLdGMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOyV0qMSqnUQ0fYJLDGIuvbQh1jU+pBG3FT8tzsd2N3CLZM7PblT39 dEhQP/9nJojMPq0qOEndtmBzO2DRrXbNq2hH1gbg9egkQ3loJEVKtf3HrC1N6VqJ kDdzbjhGVY9qNdlPgMJsB0q4k1NHbhKiipZjyqk4ON7onzw14Rh5WRFYSlSJ+lkA 9ImydMuSH9aQGRssWYwih/gMhZh/9JWC6crUe7i1Y6LmS6tyWXkqnafkdfzio70v HM1s5icgpnUsAeCRGvSkEattBihSr+6NH9Q7RpbPsOKrYz/153NgLRV44LTdJezN 5rsDHM6c6Ue9+umWBb0LrupdtmeHABrY -----END CERTIFICATE-----Generated at Sun Jul 20 22:33:13 2025 by rpki-client