$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: zQcPxCGJDYHsXRD0jNG5BBrKyG7kjU/HhA1Qv++ZQ9Y= Subject key identifier: 5D:BC:58:A1:61:19:6F:71:52:85:73:9A:23:F2:D2:61:F4:78:E9:88 Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 022A Signing time: Sat 06 Sep 2025 22:35:00 +0000 Manifest this update: Sat 06 Sep 2025 22:34:59 +0000 Manifest next update: Sat 13 Sep 2025 22:34:59 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: 2i+m6/WEQseRjxZX4BzyRkfyqXdAW2SgYmRU7YgHajc=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Sep 6 22:34:59 2025 GMT Not After : Sep 13 22:34:59 2025 GMT Subject: CN=68bcb714-0bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:a3:54:7e:fd:cd:61:b4:fb:a6:ca:74:47: e0:f3:3f:dd:c3:41:22:0e:e3:a3:b5:3b:cb:16:88: 84:cf:6d:42:ea:6b:9d:0a:51:4a:9f:5c:e1:5a:fb: 2e:34:57:ce:42:bb:77:55:1c:67:ad:1d:37:1c:46: 86:a5:5c:1b:d5:3d:42:d0:aa:0b:0b:5d:cf:e4:dc: b3:c0:c5:51:0c:8a:78:3b:66:eb:ff:c7:eb:a4:bc: 72:85:b0:f4:bf:5c:98:f8:23:c8:d8:30:e7:35:ab: be:06:7e:80:0d:c4:d1:5b:00:c9:50:0d:44:98:e3: dc:08:a0:87:12:cd:11:81:6b:92:3f:14:ff:ac:1c: 86:fe:68:40:9b:e7:c3:1a:7a:0c:a8:21:82:d5:37: bf:ed:36:44:28:f2:33:93:5c:26:9a:0b:6a:3b:ee: 24:98:78:eb:4c:ae:52:b9:4a:d3:37:e6:43:bd:06: e8:8e:0d:b1:5b:f1:ce:b5:1a:cf:cc:2d:3e:cf:76: ce:26:5a:c6:03:cc:28:73:17:7c:4c:0d:06:c7:69: 7c:e6:98:3e:e3:b6:79:76:70:c8:b0:b4:a2:1c:88: 36:3d:2d:3f:25:fe:d5:e8:4b:ae:fd:ce:e1:8d:69: 1c:09:33:ca:40:4b:4a:58:f9:6f:1c:aa:50:37:b8: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:58:A1:61:19:6F:71:52:85:73:9A:23:F2:D2:61:F4:78:E9:88 X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:71:fd:71:3b:89:64:1f:62:72:28:18:72:da:ab:a9:f3:41: 83:ed:4a:ce:3a:50:86:88:df:98:94:88:05:32:96:bb:52:4b: 93:42:8a:fb:42:c7:a2:53:0b:22:ea:e5:7c:b2:0b:8d:57:87: 40:0b:c8:3f:79:9e:d0:17:9a:fa:1f:ca:00:39:4f:f3:0d:ba: 78:de:41:02:67:49:3b:d2:b8:55:8a:92:f6:55:0a:42:e0:ea: 9d:5a:0c:41:02:d7:44:c5:11:54:7d:7d:c1:60:d2:ad:d7:3b: 9e:d1:dd:f7:c4:a6:30:16:6c:74:f5:72:5a:ed:59:ef:a2:3e: 18:80:0e:4e:bf:2c:a3:3c:0b:b3:61:57:10:de:cf:8f:b8:65: 55:08:3d:6f:3f:e6:84:6a:8a:77:28:c7:7b:95:ee:37:a0:ea: 06:ac:7e:12:f0:5c:53:6e:a0:d1:43:c2:59:f8:9a:76:20:e3: 5c:d5:33:b7:1e:eb:82:24:f9:6b:af:c3:66:03:68:0f:b9:e0: f5:66:52:43:75:e4:f6:4a:15:f3:e9:ba:ad:04:f4:4d:45:e7: 76:b1:5f:e9:70:a3:30:ca:39:60:7b:47:fc:97:7b:df:67:f0: 34:ea:c8:0b:fc:ee:e8:0f:54:af:f8:3b:9e:b2:5c:8a:8a:3b: 6d:ef:86:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUwOTA2MjIzNDU5WhcNMjUwOTEzMjIzNDU5WjAYMRYwFAYD VQQDEw02OGJjYjcxNC0wYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ+jVH79zWG0+6bKdEfg8z/dw0EiDuOjtTvLFoiEz21C6mudClFKn1zhWvsu NFfOQrt3VRxnrR03HEaGpVwb1T1C0KoLC13P5NyzwMVRDIp4O2br/8frpLxyhbD0 v1yY+CPI2DDnNau+Bn6ADcTRWwDJUA1EmOPcCKCHEs0RgWuSPxT/rByG/mhAm+fD GnoMqCGC1Te/7TZEKPIzk1wmmgtqO+4kmHjrTK5SuUrTN+ZDvQbojg2xW/HOtRrP zC0+z3bOJlrGA8wocxd8TA0Gx2l85pg+47Z5dnDIsLSiHIg2PS0/Jf7V6Euu/c7h jWkcCTPKQEtKWPlvHKpQN7hrewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF28WKFh GW9xUoVzmiPy0mH0eOmIMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbcf1xO4lkH2JyKBhy2qup80GD7UrOOlCGiN+YlIgFMpa7UkuTQor7 QseiUwsi6uV8sguNV4dAC8g/eZ7QF5r6H8oAOU/zDbp43kECZ0k70rhVipL2VQpC 4OqdWgxBAtdExRFUfX3BYNKt1zue0d33xKYwFmx09XJa7Vnvoj4YgA5OvyyjPAuz YVcQ3s+PuGVVCD1vP+aEaop3KMd7le43oOoGrH4S8FxTbqDRQ8JZ+Jp2IONc1TO3 HuuCJPlrr8NmA2gPueD1ZlJDdeT2ShXz6bqtBPRNRed2sV/pcKMwyjlge0f8l3vf Z/A06sgL/O7oD1Sv+DueslyKijtt74Za -----END CERTIFICATE-----Generated at Mon Sep 8 10:50:41 2025 by rpki-client