$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json) Hash identifier: V9w33OPWtgcDKDSTBalVOggf/KpvoBLUV39rJG/2FKM= Subject key identifier: E3:DB:25:8D:DD:ED:9B:4A:66:BB:EB:26:A3:6D:BF:A0:91:82:35:FF Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft Manifest number: 094A Signing time: Thu 18 Sep 2025 20:24:57 +0000 Manifest this update: Thu 18 Sep 2025 20:24:56 +0000 Manifest next update: Thu 25 Sep 2025 20:24:56 +0000 Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: 1w5r7J/h1Mq7U/T/6za2oxl65R2yASCU9JJPTdvE4zE=) 2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E9AD, serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Validity Not Before: Sep 18 20:24:56 2025 GMT Not After : Sep 25 20:24:56 2025 GMT Subject: CN=68cc6a99-2f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:d1:07:6a:d2:de:c3:ce:d1:30:c3:97:19: 9d:ab:de:36:35:3f:05:67:39:10:2a:30:32:fe:a4: 36:66:34:ef:95:b4:77:eb:7a:d6:68:23:fd:ec:e2: 64:3b:0c:b9:b7:b1:df:29:27:f0:5d:66:aa:ca:12: a5:86:de:f2:2c:3d:fe:2f:12:ad:03:92:c6:84:20: c9:39:0e:6f:cc:5e:62:4e:3e:c2:4d:e1:87:20:41: 1c:f8:47:ce:3e:e8:d6:b3:b9:58:c5:c9:34:64:62: db:b7:fe:3e:da:31:53:8d:0e:8c:99:3a:30:f5:a0: 27:31:b6:2f:60:a5:b9:2b:02:e6:ba:50:6c:72:36: f4:c1:29:b7:2b:72:28:f2:27:80:e1:04:3a:71:bc: 3f:14:8a:42:c2:4f:06:85:cb:38:f2:1e:6a:5b:d1: a9:5a:51:39:a9:87:94:1e:6b:76:72:91:8d:b7:22: dc:30:13:a8:5d:2a:89:c3:e1:0c:ac:f3:39:d3:8f: fc:30:8b:0b:99:a1:6d:7b:4f:a5:2d:5d:bf:73:97: 74:45:1e:93:05:e7:ec:13:78:29:c4:7c:e8:c6:39: 22:e1:66:b7:2b:63:45:3c:97:02:78:76:88:be:33: a1:16:c6:1e:f2:83:52:14:b3:db:85:9b:0b:8d:66: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:25:8D:DD:ED:9B:4A:66:BB:EB:26:A3:6D:BF:A0:91:82:35:FF X509v3 Authority Key Identifier: keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:25:ff:da:a2:1c:d6:c5:c4:6c:d8:c3:3b:00:3e:7f:76:35: 26:42:35:02:02:16:ac:ee:e0:8b:f0:a2:5a:a7:5a:c7:1c:76: 62:7f:37:da:ae:62:f2:29:76:d2:cb:a6:f0:18:0c:10:a4:0c: 0c:17:fd:dc:6c:f2:1a:6f:1e:9f:48:28:57:4d:1b:b8:fd:16: ce:a6:9a:c6:85:de:24:94:d4:06:ed:9b:89:d1:59:40:2e:7a: 0c:4b:c3:1c:75:50:a2:80:6e:46:0a:43:e3:23:eb:4c:b2:3f: cc:ee:57:fe:48:f1:c2:72:38:43:65:de:79:70:b8:ca:46:67: ae:a8:ef:30:0e:16:1a:91:66:be:6e:70:11:d7:d9:81:fb:f5: e2:8e:94:99:3c:0f:b9:7e:fd:22:2b:ae:7a:2a:13:64:dc:66: b0:6d:6b:58:ef:93:da:c7:bf:93:61:63:cd:05:bb:ce:c8:df: ba:1f:a8:a0:66:a0:59:b1:4c:44:a8:77:09:54:24:48:e0:ba: 41:08:e6:cf:aa:33:f4:66:97:80:47:fd:b4:bd:40:b4:c2:4e: f5:1a:d2:18:57:e6:35:59:dd:14:1b:b5:16:0f:54:34:f7:c3: 1b:dd:01:01:4b:65:f6:5e:00:54:e5:81:99:70:1b:22:3b:e8: 41:25:50:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD N0ZFNjg4Q0UwHhcNMjUwOTE4MjAyNDU2WhcNMjUwOTI1MjAyNDU2WjAYMRYwFAYD VQQDEw02OGNjNmE5OS0yZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VzRB2rS3sPO0TDDlxmdq942NT8FZzkQKjAy/qQ2ZjTvlbR363rWaCP97OJk Owy5t7HfKSfwXWaqyhKlht7yLD3+LxKtA5LGhCDJOQ5vzF5iTj7CTeGHIEEc+EfO PujWs7lYxck0ZGLbt/4+2jFTjQ6MmTow9aAnMbYvYKW5KwLmulBscjb0wSm3K3Io 8ieA4QQ6cbw/FIpCwk8Ghcs48h5qW9GpWlE5qYeUHmt2cpGNtyLcMBOoXSqJw+EM rPM504/8MIsLmaFte0+lLV2/c5d0RR6TBefsE3gpxHzoxjki4Wa3K2NFPJcCeHaI vjOhFsYe8oNSFLPbhZsLjWbEAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPbJY3d 7ZtKZrvrJqNtv6CRgjX/MB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0 MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCJf/aohzWxcRs2MM7AD5/djUmQjUCAhas7uCL8KJap1rHHHZifzfa rmLyKXbSy6bwGAwQpAwMF/3cbPIabx6fSChXTRu4/RbOpprGhd4klNQG7ZuJ0VlA LnoMS8McdVCigG5GCkPjI+tMsj/M7lf+SPHCcjhDZd55cLjKRmeuqO8wDhYakWa+ bnAR19mB+/XijpSZPA+5fv0iK656KhNk3GawbWtY75Pax7+TYWPNBbvOyN+6H6ig ZqBZsUxEqHcJVCRI4LpBCObPqjP0ZpeAR/20vUC0wk71GtIYV+Y1Wd0UG7UWD1Q0 98Mb3QEBS2X2XgBU5YGZcBsiO+hBJVBx -----END CERTIFICATE-----Generated at Fri Sep 19 00:58:37 2025 by rpki-client