$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft File: qP6b7_xlQea2MsQh14p9zAiwrIw.mft (raw, json) Hash identifier: VbtAKV4Zi5JvpAhyTEvKNgQTnWQ9p8mPQniDW+bwHFs= Subject key identifier: 26:8A:C3:D8:22:8D:7C:CF:ED:E2:AF:4D:00:50:AB:F7:21:BF:ED:94 Authority key identifier: A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C Certificate issuer: /CN=A9132C07/serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft Manifest number: 04 Signing time: Wed 17 Sep 2025 08:56:12 +0000 Manifest this update: Wed 17 Sep 2025 08:56:12 +0000 Manifest next update: Wed 24 Sep 2025 08:56:12 +0000 Files and hashes: 1: qP6b7_xlQea2MsQh14p9zAiwrIw.crl (hash: GI9h9hDnTcBisQJUWjNuHAhZnLZ5NoVDsu36BlAN+C0=) 2: EF9B0ACE909B11F09E634B7AC4F9AE02.roa (hash: 9dYGUjFWYuN31AuscKGSqmOWFznYjjVv+DbwenmQE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C07, serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Validity Not Before: Sep 17 08:56:12 2025 GMT Not After : Sep 24 08:56:12 2025 GMT Subject: CN=68ca77ac-8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:11:5b:3c:ce:4a:48:37:32:19:cf:88:df: 93:3c:6c:c6:19:06:52:76:84:10:6a:c0:6f:67:ae: e5:b0:6d:ed:3f:53:d5:cb:08:0d:6b:eb:53:0a:c8: 1f:cd:5b:f9:a7:3a:1e:11:eb:93:e2:a5:34:4e:7d: 0a:1a:e4:52:1f:c7:58:72:58:1f:bc:42:0a:4e:3c: 94:c3:7d:48:85:54:6b:31:f6:7d:31:01:3f:aa:1e: db:8e:cf:55:1f:72:9a:e1:71:6b:0b:b2:6e:74:d4: 40:19:2b:ed:7c:ee:7f:55:9f:d4:72:41:0a:f4:ac: 2d:6c:af:f8:43:08:bf:61:29:84:fb:8b:4a:b6:e1: 5c:86:7d:c9:01:91:6a:14:39:03:8c:b2:b8:26:c0: f3:3e:f6:f7:35:94:08:cb:04:e2:66:70:a3:93:e1: 6c:0b:4f:1f:ca:f3:9c:50:a5:ad:a0:95:62:33:b4: f7:c9:87:62:f5:34:f0:63:db:d5:b9:93:2e:ac:3c: 83:23:38:92:19:a0:62:8a:e2:ab:4b:86:35:7a:a9: b7:67:de:a1:6f:93:b7:75:57:75:4e:19:37:fe:b8: 43:d4:82:4d:a0:d2:a9:fb:ef:fe:45:5c:fe:3c:02: 8b:f9:f2:52:47:56:08:c8:5a:22:ea:0f:15:47:df: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:C3:D8:22:8D:7C:CF:ED:E2:AF:4D:00:50:AB:F7:21:BF:ED:94 X509v3 Authority Key Identifier: keyid:A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8e:a5:7f:85:ef:06:88:07:ec:f7:c7:35:c8:5f:cf:f0:46: 66:ff:4a:d9:c4:c8:5d:9f:35:b5:fb:2f:7c:20:97:5a:3f:45: 9c:43:13:67:4b:33:0f:37:c9:58:4d:70:ed:cf:db:63:11:0c: 0a:1e:7f:90:f5:79:c5:d2:9d:3f:2d:e8:a7:fb:dc:93:39:7d: 5f:3f:08:98:bf:fd:d4:f9:71:32:60:07:2a:77:fa:ea:70:99: 3a:7b:62:65:5b:a8:16:07:d0:bd:9c:83:4d:31:5a:3e:d6:3c: 7c:51:6a:58:45:23:28:76:f6:d8:26:42:e3:37:d5:67:7f:41: 83:14:1d:3a:21:5f:da:a1:91:f5:92:61:90:c9:64:95:2c:29: de:45:74:44:99:b6:54:70:d5:be:8a:07:22:e3:83:7c:4f:47: b3:66:c1:11:c6:88:44:73:c7:9c:b8:ba:2b:36:fa:ed:3c:0a: fa:5f:21:a5:03:31:27:0e:a1:3b:7e:48:10:4a:96:8c:9c:54: 7a:35:41:61:81:76:95:71:2e:48:7c:37:12:bb:45:8e:71:05: 84:78:42:22:97:ae:fa:db:d0:20:9b:18:11:dd:0e:ab:7f:66: b3:fc:8e:a9:3d:cd:9e:d1:59:9e:ea:e2:05:f6:c6:79:98:5a: 63:88:f5:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkMwNzExMC8GA1UEBRMoQThGRTlCRUZGQzY1NDFFNkI2MzJDNDIxRDc4QTdEQ0Mw OEIwQUM4QzAeFw0yNTA5MTcwODU2MTJaFw0yNTA5MjQwODU2MTJaMBgxFjAUBgNV BAMTDTY4Y2E3N2FjLTgyNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzSRFbPM5KSDcyGc+I35M8bMYZBlJ2hBBqwG9nruWwbe0/U9XLCA1r61MKyB/N W/mnOh4R65PipTROfQoa5FIfx1hyWB+8QgpOPJTDfUiFVGsx9n0xAT+qHtuOz1Uf cprhcWsLsm501EAZK+187n9Vn9RyQQr0rC1sr/hDCL9hKYT7i0q24VyGfckBkWoU OQOMsrgmwPM+9vc1lAjLBOJmcKOT4WwLTx/K85xQpa2glWIztPfJh2L1NPBj29W5 ky6sPIMjOJIZoGKK4qtLhjV6qbdn3qFvk7d1V3VOGTf+uEPUgk2g0qn77/5FXP48 Aov58lJHVgjIWiLqDxVH39k7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJorD2CKN fM/t4q9NAFCr9yG/7ZQwHwYDVR0jBBgwFoAUqP6b7/xlQea2MsQh14p9zAiwrIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyQzA3LzRDQTAyOTc2OTA5 QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVhMk1zUWgxNHA5ekFpd3JJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVA2YjdfeGxRZWEyTXNRaDE0cDl6QWl3ckl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy QzA3LzRDQTAyOTc2OTA5QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVh Mk1zUWgxNHA5ekFpd3JJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSOpX+F7waIB+z3xzXIX8/wRmb/StnEyF2fNbX7L3wgl1o/RZxDE2dL Mw83yVhNcO3P22MRDAoef5D1ecXSnT8t6Kf73JM5fV8/CJi//dT5cTJgByp3+upw mTp7YmVbqBYH0L2cg00xWj7WPHxRalhFIyh29tgmQuM31Wd/QYMUHTohX9qhkfWS YZDJZJUsKd5FdESZtlRw1b6KByLjg3xPR7NmwRHGiERzx5y4uis2+u08CvpfIaUD MScOoTt+SBBKloycVHo1QWGBdpVxLkh8NxK7RY5xBYR4QiKXrvrb0CCbGBHdDqt/ ZrP8jqk9zZ7RWZ7q4gX2xnmYWmOI9WY= -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:09 2025 by rpki-client