$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: y08CIYDylan+GpnRZYzzhLwZzu/Xy5W8urBulKFJPQ4= Subject key identifier: 55:18:E0:E9:C9:D5:90:91:90:59:B7:A2:F5:7B:6A:FB:C7:EA:84:1D Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 0864 Signing time: Mon 08 Sep 2025 20:45:09 +0000 Manifest this update: Mon 08 Sep 2025 20:45:09 +0000 Manifest next update: Mon 15 Sep 2025 20:45:09 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: s9Yi4cBR1DdZ74MIleJ7CSeAxopp7715ysnyjwwWTwE=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: dKNk5pPJbrzAnkXqkxI0ZuHUsGDU8sX1yqD52DpKuAQ=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: 0ru7xYrLjnDIEAfDou0iidHCCux0ow/jB57Xp7tPDLw=) 4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: VWbla33K1wl9gTRgnLJYb5WMUbeDQqg2qZKrLOb3zTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Sep 8 20:45:09 2025 GMT Not After : Sep 15 20:45:09 2025 GMT Subject: CN=68bf4055-00e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:bd:ec:ac:46:82:88:f1:db:ed:e0:0b:dc: 91:4a:e6:1c:6a:ca:2d:d8:e7:c5:47:23:fb:1c:fa: f6:80:a3:43:a7:e3:d3:91:5a:3b:9e:37:14:d7:c2: e8:a9:17:e3:cb:00:ac:b9:60:99:7a:a3:c3:62:ad: d6:62:18:5f:07:0f:f4:d8:49:36:ec:82:c3:e6:48: 44:6e:d0:f2:f8:58:db:24:11:cb:28:7c:22:cb:28: b0:25:3f:16:ac:00:d5:29:85:9d:87:d0:a8:35:75: ff:38:ae:6b:b7:12:50:19:15:0a:42:18:82:e1:d9: 1b:90:cb:0a:84:d3:41:e3:84:33:ba:6a:6d:13:5b: 3c:14:4e:ff:63:a3:eb:56:7c:ec:98:a3:62:a8:77: c0:8f:15:06:f8:fa:76:5c:d8:db:3a:58:c3:73:4a: f0:71:42:e3:9a:c9:d4:1e:e2:2d:36:cd:df:37:e1: 22:ea:f9:db:6f:53:39:7d:e1:65:df:61:03:19:72: d5:12:e5:25:03:ae:12:39:b6:89:d6:dc:01:c1:11: 8e:d1:a5:26:11:ef:15:0f:a7:75:6a:0d:74:0e:07: b2:97:aa:cc:f2:c3:a3:52:0f:e0:8d:84:d1:fd:67: 99:95:eb:a7:33:65:b2:88:d6:d7:fd:83:2c:6f:dc: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:18:E0:E9:C9:D5:90:91:90:59:B7:A2:F5:7B:6A:FB:C7:EA:84:1D X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f9:74:4a:54:4b:36:76:aa:49:35:7c:d6:d4:bb:44:a6:a9: d1:52:6e:cb:37:20:bb:fe:14:32:dd:42:60:f7:58:84:22:9c: 05:97:3a:d9:e3:ff:58:54:7e:50:26:a1:84:c9:68:ce:10:ab: a7:48:2e:49:90:48:5a:71:0f:34:4d:2f:fb:da:66:8f:b5:e0: 93:85:09:b7:7b:86:5e:a6:0d:0b:38:36:43:09:e7:b8:fd:40: b4:6e:a9:04:55:44:0a:83:78:a0:63:ec:50:90:fc:78:13:47: 93:55:a7:e0:4b:0f:2f:d0:e5:9e:d9:b0:2c:45:3e:73:99:45: 2f:4c:0a:fb:80:4c:4d:ea:25:69:3c:66:27:7d:9e:f9:a5:07: 56:91:40:d0:bb:66:b1:58:a0:ec:4e:61:99:d2:22:ca:36:f7: 27:21:22:bd:ae:e0:ea:5a:cc:ec:45:ae:a1:fb:bb:45:96:af: be:51:55:51:25:70:73:0b:e2:e7:a8:82:4c:b5:98:31:21:4e: 85:4a:1a:15:9b:c8:11:28:98:73:1f:53:b1:2c:9a:8d:53:88: e3:51:de:3f:8c:bd:e0:75:52:5c:2a:20:76:13:bd:f3:07:1f: 43:5b:93:5c:9e:b7:78:46:b5:2c:ac:98:00:3e:c6:87:64:7d: 13:3e:e4:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUwOTA4MjA0NTA5WhcNMjUwOTE1MjA0NTA5WjAYMRYwFAYD VQQDEw02OGJmNDA1NS0wMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQu97KxGgojx2+3gC9yRSuYcasot2OfFRyP7HPr2gKNDp+PTkVo7njcU18Lo qRfjywCsuWCZeqPDYq3WYhhfBw/02Ek27ILD5khEbtDy+FjbJBHLKHwiyyiwJT8W rADVKYWdh9CoNXX/OK5rtxJQGRUKQhiC4dkbkMsKhNNB44QzumptE1s8FE7/Y6Pr VnzsmKNiqHfAjxUG+Pp2XNjbOljDc0rwcULjmsnUHuItNs3fN+Ei6vnbb1M5feFl 32EDGXLVEuUlA64SObaJ1twBwRGO0aUmEe8VD6d1ag10Dgeyl6rM8sOjUg/gjYTR /WeZleunM2WyiNbX/YMsb9wpLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUY4OnJ 1ZCRkFm3ovV7avvH6oQdMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0+XRKVEs2dqpJNXzW1LtEpqnRUm7LNyC7/hQy3UJg91iEIpwFlzrZ 4/9YVH5QJqGEyWjOEKunSC5JkEhacQ80TS/72maPteCThQm3e4Zepg0LODZDCee4 /UC0bqkEVUQKg3igY+xQkPx4E0eTVafgSw8v0OWe2bAsRT5zmUUvTAr7gExN6iVp PGYnfZ75pQdWkUDQu2axWKDsTmGZ0iLKNvcnISK9ruDqWszsRa6h+7tFlq++UVVR JXBzC+LnqIJMtZgxIU6FShoVm8gRKJhzH1OxLJqNU4jjUd4/jL3gdVJcKiB2E73z Bx9DW5Ncnrd4RrUsrJgAPsaHZH0TPuQe -----END CERTIFICATE-----Generated at Tue Sep 9 01:14:01 2025 by rpki-client