$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json) Hash identifier: UiEgUW/+oROHty3tVww+GsNL0pDmBApw+FoMFwX25PM= Subject key identifier: 3A:A5:AB:74:C3:4E:63:0D:23:FD:ED:CC:BA:E5:86:57:C9:7B:35:54 Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft Manifest number: 01BA Signing time: Wed 17 Sep 2025 03:48:44 +0000 Manifest this update: Wed 17 Sep 2025 03:48:43 +0000 Manifest next update: Wed 24 Sep 2025 03:48:43 +0000 Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: 5rE/VcABdOX4Huh/7H1g/kpFlajezAvx1EK7/R/4F3Q=) 2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: kG8HKid+EZkU/hyqnFNZ4Dj2sC9Icf/i925ERR1UGyw=) 3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: 7BVmNepQES6T7o+2bZV/zc2Q9T00B1Q0rsuk0jHEIvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF Validity Not Before: Sep 17 03:48:43 2025 GMT Not After : Sep 24 03:48:43 2025 GMT Subject: CN=68ca2f9b-9335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:e3:57:3a:52:e8:d0:59:d3:a9:5d:e7:c9: d2:1a:51:61:fc:40:5d:c6:ca:0d:3a:63:f4:03:43: 2b:89:65:9e:03:e6:71:d0:07:95:5f:0e:f1:6f:9e: 58:bb:a9:c9:be:9d:22:47:bd:54:a9:bd:91:ad:79: cb:45:07:19:be:f6:e9:06:2b:36:7e:ff:d6:96:41: 4b:3d:1a:fe:41:7c:d1:e1:04:88:17:6b:3a:75:58: 99:0b:4a:84:c0:fc:72:fb:1d:cd:f6:98:63:5c:c5: 57:a6:f0:40:3d:b4:41:75:1b:07:26:aa:52:81:a5: 5c:d1:f6:7f:04:43:a8:d8:24:f1:45:94:26:e4:80: c7:19:6d:46:ba:8c:db:67:2c:59:3b:75:16:47:a1: 6c:71:93:cf:b8:76:e2:00:f6:12:bd:0a:36:07:c3: ad:f4:02:6e:8d:62:fe:16:69:a8:a4:77:34:84:0f: 8d:96:4b:b9:ac:cf:ff:24:63:56:52:63:88:7e:ea: ba:4e:77:74:44:c0:a8:5e:ff:94:3d:88:08:98:cc: 7a:de:c7:a9:56:f5:d3:81:e6:13:aa:95:cd:da:6f: a0:d9:e7:80:7f:3c:bf:f1:4d:08:bf:6f:f5:9f:af: 6c:13:c4:e9:48:06:04:d5:26:c1:05:6e:d8:13:1d: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:AB:74:C3:4E:63:0D:23:FD:ED:CC:BA:E5:86:57:C9:7B:35:54 X509v3 Authority Key Identifier: keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:7a:d3:f2:26:0d:ef:ed:ab:9a:6e:1f:c0:46:ed:87:1a:7c: 99:da:5f:0a:61:76:20:51:e5:10:ab:e8:df:7a:76:b3:ab:e7: 0e:9b:e5:e5:33:43:7e:45:50:eb:f7:ef:8d:9d:34:51:ab:9c: f6:69:84:71:b6:e3:60:0c:ab:75:d8:97:c2:3e:a3:03:8a:15: b5:da:87:a3:f1:de:48:bf:32:6a:fe:97:37:91:f2:39:28:60: 8d:b6:f2:8d:ee:3a:96:d8:88:0c:50:3a:5f:2f:b7:8d:46:9a: 9c:fa:f3:43:03:1f:52:5c:21:94:08:f7:82:ac:6b:9b:10:11: 77:0a:97:4a:87:3e:c7:42:8c:4d:5e:ea:99:db:7d:4e:0a:4f: 5e:9c:d7:73:33:0c:3b:48:e2:da:1f:f0:7b:94:5f:2e:e0:92: be:35:dc:b7:48:ab:87:bf:2f:9f:19:9d:9a:99:da:77:5a:df: 5f:7b:31:7b:04:09:8e:05:32:76:c5:31:ec:00:96:ec:36:42: 8b:c8:d5:2d:89:fd:c7:0d:ad:a5:a5:76:4a:e9:63:dc:5e:7f: 62:e1:b2:31:b3:65:e3:7a:85:c5:f1:0b:63:19:a6:6d:da:c9: ab:94:4c:3c:25:14:fa:28:61:90:b6:f8:e4:47:83:a0:9e:8b: 87:fb:ce:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M5MUExMTAvBgNVBAUTKEFCODc4OUM3MEM3NDJFQUY5NTlGNDZBMUI5NzRFNTQ1 NEMwQUZGQUYwHhcNMjUwOTE3MDM0ODQzWhcNMjUwOTI0MDM0ODQzWjAYMRYwFAYD VQQDEw02OGNhMmY5Yi05MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbDjVzpS6NBZ06ld58nSGlFh/EBdxsoNOmP0A0MriWWeA+Zx0AeVXw7xb55Y u6nJvp0iR71Uqb2RrXnLRQcZvvbpBis2fv/WlkFLPRr+QXzR4QSIF2s6dViZC0qE wPxy+x3N9phjXMVXpvBAPbRBdRsHJqpSgaVc0fZ/BEOo2CTxRZQm5IDHGW1Guozb ZyxZO3UWR6FscZPPuHbiAPYSvQo2B8Ot9AJujWL+FmmopHc0hA+Nlku5rM//JGNW UmOIfuq6Tnd0RMCoXv+UPYgImMx63sepVvXTgeYTqpXN2m+g2eeAfzy/8U0Iv2/1 n69sE8TpSAYE1SbBBW7YEx2IMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqlq3TD TmMNI/3tzLrlhlfJezVUMB8GA1UdIwQYMBaAFKuHiccMdC6vlZ9Gobl05UVMCv+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxQS82MUU3MEQ4NjE2 MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExxLVZuMGFodVhUbFJVd0tf NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0ZUp4d3gwTHEtVm4wYWh1WFRsUlV3S182OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzkxQS82MUU3MEQ4NjE2MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExx LVZuMGFodVhUbFJVd0tfNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAetPyJg3v7auabh/ARu2HGnyZ2l8KYXYgUeUQq+jfenazq+cOm+Xl M0N+RVDr9++NnTRRq5z2aYRxtuNgDKt12JfCPqMDihW12oej8d5IvzJq/pc3kfI5 KGCNtvKN7jqW2IgMUDpfL7eNRpqc+vNDAx9SXCGUCPeCrGubEBF3CpdKhz7HQoxN XuqZ231OCk9enNdzMww7SOLaH/B7lF8u4JK+Ndy3SKuHvy+fGZ2amdp3Wt9fezF7 BAmOBTJ2xTHsAJbsNkKLyNUtif3HDa2lpXZK6WPcXn9i4bIxs2XjeoXF8QtjGaZt 2smrlEw8JRT6KGGQtvjkR4OgnouH+86W -----END CERTIFICATE-----Generated at Thu Sep 18 20:26:57 2025 by rpki-client