$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: OhEBAriFev16uZudTybl35olFq5lP8Jctoz4SpHUC4A= Subject key identifier: 78:64:C9:01:A1:7D:CB:30:07:D5:AA:12:F8:36:AC:6A:0F:2D:DF:47 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 07BE Signing time: Tue 16 Sep 2025 21:30:35 +0000 Manifest this update: Tue 16 Sep 2025 21:30:35 +0000 Manifest next update: Tue 23 Sep 2025 21:30:35 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: 3Yrrsj0X7pFjQskibuX8XZOAjXVpJsL5ii0xMUjWtYA=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Sep 16 21:30:35 2025 GMT Not After : Sep 23 21:30:35 2025 GMT Subject: CN=68c9d6fb-45a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:3b:6b:74:c6:d5:6e:0e:de:06:2f:22:24: 50:fa:7c:f6:59:7d:20:42:7f:4b:19:a6:c5:9f:65: 1d:9f:ba:4c:b0:90:8c:00:3e:b3:9f:65:02:49:a7: 6d:81:d3:b9:19:87:18:ec:32:8f:0b:e7:6b:ac:20: 3e:26:10:9b:60:ce:60:63:2a:70:c7:06:c0:16:37: d7:52:17:de:20:40:97:ac:e3:9f:a3:f4:a3:a6:3b: e7:4e:5b:db:dd:c8:14:82:8f:86:e1:9a:d4:48:04: 99:38:64:71:f3:3d:2e:be:a5:24:35:04:1c:4d:cb: 3f:d0:d0:2c:69:2f:cd:3b:38:2d:f4:1a:46:50:fa: 37:15:8c:40:e8:b8:ec:e8:21:85:a0:d9:26:6d:2e: b3:6e:55:fe:2f:88:34:9b:b3:0b:eb:f9:b3:86:02: d4:2e:14:b0:33:4d:cd:52:53:22:96:78:7d:97:f9: 18:bb:9d:8b:e5:17:1e:ac:36:51:72:ad:0e:cb:f4: f1:58:e1:50:60:06:c5:4e:a0:b8:78:0a:63:45:bf: cc:c3:15:4c:1d:ca:65:48:cf:2a:f2:76:56:03:6f: ed:bb:ea:10:e6:a6:53:ee:7e:0d:6e:14:c4:03:88: 31:1d:70:0e:f9:2b:16:8e:81:3f:d5:2d:11:f7:02: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:C9:01:A1:7D:CB:30:07:D5:AA:12:F8:36:AC:6A:0F:2D:DF:47 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9a:3f:66:87:fa:dc:5a:7c:d5:5a:6a:33:1d:fa:1f:af:31: 1e:b9:4f:95:56:ec:26:dc:64:29:30:b3:3c:59:7d:95:dc:1b: e4:be:b7:df:c9:d1:f1:ca:3d:b8:db:af:a1:56:2b:22:a5:79: 01:80:0a:4f:e7:ca:07:d3:19:09:e2:25:09:79:5e:1c:39:c0: a4:fa:a0:85:df:c6:31:57:df:4b:c6:df:97:50:b6:51:ba:11: ee:d9:c5:54:7f:bc:5a:84:42:8e:bf:12:86:57:34:c3:a3:53: 14:69:4a:81:dd:21:cd:0c:30:66:9a:ef:03:b8:02:d2:8b:c4: 91:f0:e1:32:b5:fb:92:5e:13:62:b3:32:44:ee:8e:07:bd:1e: 06:b9:e8:a9:fe:3b:d2:52:76:ea:1a:9b:06:4f:b9:ac:76:c9: f2:de:13:e5:f5:00:bb:9f:ae:e5:3b:4e:f2:ba:89:13:70:50: f6:a8:7f:5d:ca:eb:25:20:60:32:20:ed:bc:73:c1:7b:7e:75: 5b:12:04:f3:69:a3:4a:cc:33:f3:78:28:a6:80:a0:70:22:95: e6:aa:8e:a9:81:14:59:7f:fc:46:25:38:49:38:fa:21:84:e9: 6a:ea:14:a0:86:19:4a:fc:62:76:b3:58:d3:bd:25:cb:9d:e3: 70:d7:15:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUwOTE2MjEzMDM1WhcNMjUwOTIzMjEzMDM1WjAYMRYwFAYD VQQDEw02OGM5ZDZmYi00NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaY7a3TG1W4O3gYvIiRQ+nz2WX0gQn9LGabFn2Udn7pMsJCMAD6zn2UCSadt gdO5GYcY7DKPC+drrCA+JhCbYM5gYypwxwbAFjfXUhfeIECXrOOfo/SjpjvnTlvb 3cgUgo+G4ZrUSASZOGRx8z0uvqUkNQQcTcs/0NAsaS/NOzgt9BpGUPo3FYxA6Ljs 6CGFoNkmbS6zblX+L4g0m7ML6/mzhgLULhSwM03NUlMilnh9l/kYu52L5RcerDZR cq0Oy/TxWOFQYAbFTqC4eApjRb/MwxVMHcplSM8q8nZWA2/tu+oQ5qZT7n4NbhTE A4gxHXAO+SsWjoE/1S0R9wIt7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhkyQGh fcswB9WqEvg2rGoPLd9HMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmj9mh/rcWnzVWmozHfofrzEeuU+VVuwm3GQpMLM8WX2V3Bvkvrff ydHxyj2426+hVisipXkBgApP58oH0xkJ4iUJeV4cOcCk+qCF38YxV99Lxt+XULZR uhHu2cVUf7xahEKOvxKGVzTDo1MUaUqB3SHNDDBmmu8DuALSi8SR8OEytfuSXhNi szJE7o4HvR4Gueip/jvSUnbqGpsGT7msdsny3hPl9QC7n67lO07yuokTcFD2qH9d yuslIGAyIO28c8F7fnVbEgTzaaNKzDPzeCimgKBwIpXmqo6pgRRZf/xGJThJOPoh hOlq6hSghhlK/GJ2s1jTvSXLneNw1xWx -----END CERTIFICATE-----Generated at Thu Sep 18 19:12:43 2025 by rpki-client