$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: Qs+X3mbI24liWx3lum3RAC1hoauw5ZSfqNzNv9plTO8= Subject key identifier: 93:48:94:F2:9E:73:54:CA:54:42:62:A3:CD:41:38:6E:33:AC:59:C3 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 5A Signing time: Wed 17 Sep 2025 07:57:37 +0000 Manifest this update: Wed 17 Sep 2025 07:57:36 +0000 Manifest next update: Wed 24 Sep 2025 07:57:36 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: 9PYXiaowdZvJofoH3VwrHsfVr4zp4/mexA2PrXFLgMc=) 2: D423FF3255D411F0A743B457C4F9AE02.roa (hash: v1dnvMV2G1LRQxFOyJdmR+0lqbg+Qd+ZULe9l5QIfdw=) 3: 31C546AE55DB11F0A92F4D10C4F9AE02.roa (hash: /yKnVvqDpWECQg/svbyb0nTDVO6+tTtGiQ1ZiVTs69U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Sep 17 07:57:36 2025 GMT Not After : Sep 24 07:57:36 2025 GMT Subject: CN=68ca69f1-aace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:62:64:32:ad:8d:52:33:6f:3c:7b:77:68: 5a:24:84:52:4a:44:c8:dd:10:d4:36:f5:d2:0c:43: 07:63:6e:aa:ef:ab:d3:12:63:d9:5c:27:f2:cd:c7: ea:e6:f7:4c:0a:f0:dc:d0:4e:e9:71:20:dc:69:ae: db:8c:b6:5a:a6:09:bc:e6:87:bd:43:0f:af:83:53: 77:38:cd:e7:44:df:61:a8:fd:a3:d9:e1:c6:f7:04: 71:76:30:12:c3:2c:64:ca:62:b1:6c:db:51:ec:ae: e2:3c:ec:45:ba:6a:78:4a:b2:b7:e4:6a:7f:43:00: 51:a3:6d:73:43:a1:a8:d3:a2:4e:cb:bf:c6:ac:d8: 8b:f8:42:6f:c8:4f:92:ef:64:fb:a8:75:31:8c:49: 2f:87:38:32:8e:56:b4:04:f5:36:b0:55:b5:b2:7b: ce:a0:9d:8f:7a:0d:4e:da:aa:04:07:a1:bd:a1:f1: 24:2d:a7:75:14:87:89:75:22:16:7d:ad:c2:1c:d3: 23:04:96:e2:fa:35:ba:d5:b4:18:84:f2:28:74:46: ae:be:cf:ca:ad:8c:6b:91:d6:fc:ea:40:e5:b1:e0: 69:d6:77:de:95:a4:15:6b:7a:ae:dc:4a:59:4c:b7: 51:a6:52:d9:9a:c3:7d:a8:0c:d9:d8:e9:89:9a:a6: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:94:F2:9E:73:54:CA:54:42:62:A3:CD:41:38:6E:33:AC:59:C3 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:87:60:d6:f1:d9:22:8b:e1:46:7c:62:7b:b5:48:68:99:3a: c9:c0:43:0b:95:48:a1:98:c7:62:29:97:3b:48:6d:3a:47:f1: aa:26:31:45:8a:b2:eb:8c:07:3f:86:a0:2d:9e:69:a4:b9:34: a9:1a:c4:a3:e2:9e:df:13:08:6b:ba:55:38:d3:9f:2c:f3:2b: cc:89:d2:13:fb:aa:eb:a0:36:c3:17:7d:4a:da:26:9b:5e:9b: be:48:8a:96:ff:5d:5e:9c:5b:5d:86:bf:8b:ec:e5:a4:43:d2: d6:89:52:e9:0b:d6:9f:5b:9d:a3:fc:b8:dc:86:ce:0c:17:42: 13:ad:15:b5:cc:78:69:b0:88:cc:26:8f:b1:bf:74:db:48:de: 7f:0a:97:ec:49:d5:07:9a:31:fd:76:af:f2:85:0d:40:6f:5d: 42:2b:a3:b0:24:ec:e2:e4:3f:c9:11:b4:bb:bc:5e:f1:be:15: d2:fc:4b:10:c7:34:ab:98:59:0e:96:93:39:43:90:83:08:d4: 8c:57:9b:45:d4:91:f2:6f:9f:ee:5d:e5:ec:db:fe:83:46:e8: 6d:9a:c3:7d:ec:39:b8:66:d1:3c:50:fc:33:f2:16:52:d7:8e: f9:55:33:b8:a2:73:13:f1:20:35:39:81:1a:98:83:4f:93:4c: 87:83:52:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA5MTcwNzU3MzZaFw0yNTA5MjQwNzU3MzZaMBgxFjAUBgNV BAMTDTY4Y2E2OWYxLWFhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8xGJkMq2NUjNvPHt3aFokhFJKRMjdENQ29dIMQwdjbqrvq9MSY9lcJ/LNx+rm 90wK8NzQTulxINxprtuMtlqmCbzmh71DD6+DU3c4zedE32Go/aPZ4cb3BHF2MBLD LGTKYrFs21HsruI87EW6anhKsrfkan9DAFGjbXNDoajTok7Lv8as2Iv4Qm/IT5Lv ZPuodTGMSS+HODKOVrQE9TawVbWye86gnY96DU7aqgQHob2h8SQtp3UUh4l1IhZ9 rcIc0yMEluL6NbrVtBiE8ih0Rq6+z8qtjGuR1vzqQOWx4GnWd96VpBVreq7cSllM t1GmUtmaw32oDNnY6YmapuVzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk0iU8p5z VMpUQmKjzUE4bjOsWcMwHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaHYNbx2SKL4UZ8Ynu1SGiZOsnAQwuVSKGYx2IplztIbTpH8aomMUWK suuMBz+GoC2eaaS5NKkaxKPint8TCGu6VTjTnyzzK8yJ0hP7quugNsMXfUraJpte m75Iipb/XV6cW12Gv4vs5aRD0taJUukL1p9bnaP8uNyGzgwXQhOtFbXMeGmwiMwm j7G/dNtI3n8Kl+xJ1QeaMf12r/KFDUBvXUIro7Ak7OLkP8kRtLu8XvG+FdL8SxDH NKuYWQ6WkzlDkIMI1IxXm0XUkfJvn+5d5ezb/oNG6G2aw33sObhm0TxQ/DPyFlLX jvlVM7iicxPxIDU5gRqYg0+TTIeDUkU= -----END CERTIFICATE-----Generated at Fri Sep 19 00:47:42 2025 by rpki-client