$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: i4M+wK+O8zjsSqigJk/tB9szme7f5HqjEqeKLVm8xkk= Subject key identifier: 97:3E:65:BB:B1:29:79:63:32:EC:A1:06:F4:54:76:70:50:1D:78:90 Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 04 Signing time: Fri 19 Sep 2025 08:54:41 +0000 Manifest this update: Fri 19 Sep 2025 08:54:40 +0000 Manifest next update: Fri 26 Sep 2025 08:54:40 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: +8qrBFQrDklqgh1inmy89ODIlDyzPC3XZtBOr+BCxhk=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Sep 19 08:54:40 2025 GMT Not After : Sep 26 08:54:40 2025 GMT Subject: CN=68cd1a51-21c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8b:68:4c:7d:8e:ce:3c:ec:55:f6:bd:a0:57: 93:3d:dc:ee:93:f4:6c:84:5a:d5:a5:d1:b7:51:9f: 4f:37:94:60:81:84:5a:88:5f:0e:ec:84:13:e3:1e: 29:ca:b6:fa:c8:fd:7f:0c:49:94:d3:cc:c7:af:82: c3:52:7b:a4:3c:b2:af:c3:64:f3:7c:5c:24:1d:09: 76:3c:d7:80:d3:9a:90:6a:9f:08:17:94:99:12:6c: 5a:bf:90:f8:03:66:46:8f:75:4a:09:ac:f8:40:ca: 9c:dc:5d:36:95:47:a6:5b:86:43:d3:02:f0:b3:3f: b9:4e:22:24:9c:0f:db:07:f3:ee:da:53:bf:a5:6a: 1d:18:47:7b:bd:04:49:97:d0:5f:59:3b:86:e6:ec: 24:20:06:98:e2:c6:e0:3b:f3:b8:31:14:ff:7d:3b: 15:6d:08:89:6f:86:2e:35:16:c7:3a:fa:9f:7c:e8: 5f:86:3e:dc:c9:26:cb:4b:ee:81:78:3a:f7:16:70: 5a:11:52:30:9f:61:55:f7:43:4f:40:2e:b7:08:a6: dc:b2:a8:0d:c6:e4:18:95:7a:17:7f:b7:cc:1d:0e: 10:08:f9:0b:9e:f9:fb:bf:a2:19:8f:f0:27:d4:c4: b9:9f:f8:92:04:68:4f:11:83:25:45:7f:d0:40:a9: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:65:BB:B1:29:79:63:32:EC:A1:06:F4:54:76:70:50:1D:78:90 X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ba:64:8e:b3:b8:8a:b0:a9:cb:57:e1:e2:28:43:1f:72:90: ed:6c:34:17:89:d3:25:78:88:02:0f:cd:dc:84:bd:37:69:9d: 9d:37:71:37:a7:11:6d:1b:1b:50:69:ac:77:83:cf:4b:71:f5: d1:cf:c6:4b:85:2a:b9:46:3f:b2:68:f5:44:c3:ea:fe:c9:8d: 81:a0:a5:ec:29:66:5a:cf:e7:0e:8a:fe:c5:da:3c:2a:d2:e3: b0:b3:4a:8d:5e:f9:b1:e0:d1:94:ca:a0:98:96:b6:6e:67:6f: 85:85:1f:9d:d8:50:38:3c:c2:ec:74:0b:52:77:c0:06:f2:96: 97:2c:c8:07:19:db:1e:9a:7c:b1:6d:be:93:2c:0b:60:a8:93: 39:5e:87:24:d4:4d:fa:86:9e:55:62:56:50:2d:47:fc:ed:91: f5:1d:34:8f:f9:8f:56:67:3d:11:2c:d8:86:05:fd:c7:2c:9e: 33:c3:7d:99:c0:8c:6c:61:0a:6b:81:b3:a3:fe:bd:42:0f:b6: 32:64:04:65:f4:1e:57:33:41:96:8b:9d:b0:6a:f6:a3:ce:58: ac:db:e8:d9:a0:61:b7:63:5d:9e:5b:4b:ce:cb:0b:b6:90:c6: 82:17:99:9f:08:6c:ef:11:a5:c6:dd:f4:9d:5c:11:cf:87:e0: fe:ca:26:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNTA5MTkwODU0NDBaFw0yNTA5MjYwODU0NDBaMBgxFjAUBgNV BAMTDTY4Y2QxYTUxLTIxYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7i2hMfY7OPOxV9r2gV5M93O6T9GyEWtWl0bdRn083lGCBhFqIXw7shBPjHinK tvrI/X8MSZTTzMevgsNSe6Q8sq/DZPN8XCQdCXY814DTmpBqnwgXlJkSbFq/kPgD ZkaPdUoJrPhAypzcXTaVR6ZbhkPTAvCzP7lOIiScD9sH8+7aU7+lah0YR3u9BEmX 0F9ZO4bm7CQgBpjixuA787gxFP99OxVtCIlvhi41Fsc6+p986F+GPtzJJstL7oF4 OvcWcFoRUjCfYVX3Q09ALrcIptyyqA3G5BiVehd/t8wdDhAI+Que+fu/ohmP8CfU xLmf+JIEaE8RgyVFf9BAqVonAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlz5lu7Ep eWMy7KEG9FR2cFAdeJAwHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMW6ZI6zuIqwqctX4eIoQx9ykO1sNBeJ0yV4iAIPzdyEvTdpnZ03cTen EW0bG1BprHeDz0tx9dHPxkuFKrlGP7Jo9UTD6v7JjYGgpewpZlrP5w6K/sXaPCrS 47CzSo1e+bHg0ZTKoJiWtm5nb4WFH53YUDg8wux0C1J3wAbylpcsyAcZ2x6afLFt vpMsC2CokzlehyTUTfqGnlViVlAtR/ztkfUdNI/5j1ZnPREs2IYF/ccsnjPDfZnA jGxhCmuBs6P+vUIPtjJkBGX0HlczQZaLnbBq9qPOWKzb6NmgYbdjXZ5bS87LC7aQ xoIXmZ8IbO8Rpcbd9J1cEc+H4P7KJkY= -----END CERTIFICATE-----Generated at Fri Sep 19 15:32:39 2025 by rpki-client