$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: S3jGCLR+Oj1DRQhFeQyFlT1WEM4NUbbtlgayTWSsiZY= Subject key identifier: 63:34:DD:BA:4E:3F:A1:D2:AC:43:65:AA:B9:DD:8E:D8:84:7D:48:47 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: E6 Signing time: Fri 05 Sep 2025 05:47:54 +0000 Manifest this update: Fri 05 Sep 2025 05:47:54 +0000 Manifest next update: Fri 12 Sep 2025 05:47:54 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: i55UJf8j3fIFPM8WP522akWWm6PpjgDlbOOeizOLx+g=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Sep 5 05:47:54 2025 GMT Not After : Sep 12 05:47:54 2025 GMT Subject: CN=68ba798a-0948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:31:0c:7c:4a:0e:4c:8e:b4:bc:e4:a4:f7: c0:4b:86:d8:3f:ac:1b:91:bf:ab:80:55:a8:43:bb: ef:59:c3:2a:74:c4:f5:b3:f3:2d:ed:66:49:39:08: 0a:83:71:75:fc:01:11:09:33:03:aa:9c:a0:59:80: c1:8e:6d:77:ab:e3:9a:e4:12:2d:a7:05:b5:0a:23: f2:69:e2:e0:ac:28:60:74:29:68:d8:15:61:d9:57: 0c:6b:d7:f1:84:95:b0:27:08:77:a6:de:88:ee:48: 00:ca:9d:cb:55:38:2a:20:54:63:4d:92:51:72:5c: 5a:97:7b:e6:34:57:ee:b6:0b:bd:ee:5f:13:fc:b3: 87:e5:49:49:fc:fa:09:3a:7d:71:96:06:35:86:c6: 96:e4:a0:f8:54:28:ea:1d:9a:b3:33:52:29:e5:b3: f6:f0:47:bd:8c:18:a7:d3:ae:b6:64:b5:7e:f1:4a: 28:e1:58:30:c3:69:62:35:ca:f3:99:38:b6:a9:72: ec:aa:28:bf:0f:29:5e:54:f5:b6:cb:eb:52:f8:62: 1d:f9:c2:7c:34:7f:26:ca:70:0a:72:65:26:a0:51: 98:06:50:31:16:bb:13:dd:59:44:59:4f:f0:13:98: 26:4d:18:6d:5a:9b:4a:1b:01:4d:6e:77:5a:79:b1: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:34:DD:BA:4E:3F:A1:D2:AC:43:65:AA:B9:DD:8E:D8:84:7D:48:47 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b9:f4:d2:66:88:bc:42:70:20:48:d0:ec:c0:77:38:26:83: b5:71:39:b0:ba:a8:36:b9:b3:38:29:7d:97:9f:90:63:42:bd: 45:58:b0:25:9f:3e:6f:9d:92:6b:20:31:3f:ed:b8:83:d8:05: 41:79:6c:6d:a5:75:9b:b6:e4:86:5a:c4:15:2b:09:19:ae:b8: 1d:d6:57:4a:50:6e:99:88:c2:3b:4b:a1:a4:eb:42:fc:27:fc: 67:23:a7:4a:ff:c9:7e:8f:35:3e:31:64:2e:be:eb:d4:24:fc: a9:9c:b6:09:c8:9a:d0:e5:25:ed:e2:b8:7e:a7:46:ee:4f:f7: 32:64:87:5c:d6:c6:75:77:2c:53:32:98:13:47:de:02:a5:48: 29:a7:db:5b:10:4a:ff:64:01:b8:9c:72:6f:a9:78:9b:03:c0: 5e:c3:d9:e6:65:b5:b6:ab:b9:d8:91:9f:2c:9f:f1:55:4b:73: 10:be:d1:00:27:36:69:bc:b0:41:2f:01:e7:98:29:45:c0:40: bc:67:ef:93:94:59:ff:6a:dd:b4:b5:e8:dc:e9:01:52:35:c5: 1a:8a:af:19:65:5a:ed:d0:ab:58:01:8a:d9:ff:44:be:ce:a8: 38:4d:66:13:14:25:7f:5d:76:c6:8b:f5:4e:c9:fb:e4:e5:a4: 3d:93:b5:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwOTA1MDU0NzU0WhcNMjUwOTEyMDU0NzU0WjAYMRYwFAYD VQQDEw02OGJhNzk4YS0wOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1QxDHxKDkyOtLzkpPfAS4bYP6wbkb+rgFWoQ7vvWcMqdMT1s/Mt7WZJOQgK g3F1/AERCTMDqpygWYDBjm13q+Oa5BItpwW1CiPyaeLgrChgdClo2BVh2VcMa9fx hJWwJwh3pt6I7kgAyp3LVTgqIFRjTZJRclxal3vmNFfutgu97l8T/LOH5UlJ/PoJ On1xlgY1hsaW5KD4VCjqHZqzM1Ip5bP28Ee9jBin0662ZLV+8Uoo4Vgww2liNcrz mTi2qXLsqii/DyleVPW2y+tS+GId+cJ8NH8mynAKcmUmoFGYBlAxFrsT3VlEWU/w E5gmTRhtWptKGwFNbndaebEArQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM03bpO P6HSrENlqrndjtiEfUhHMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeufTSZoi8QnAgSNDswHc4JoO1cTmwuqg2ubM4KX2Xn5BjQr1FWLAl nz5vnZJrIDE/7biD2AVBeWxtpXWbtuSGWsQVKwkZrrgd1ldKUG6ZiMI7S6Gk60L8 J/xnI6dK/8l+jzU+MWQuvuvUJPypnLYJyJrQ5SXt4rh+p0buT/cyZIdc1sZ1dyxT MpgTR94CpUgpp9tbEEr/ZAG4nHJvqXibA8Bew9nmZbW2q7nYkZ8sn/FVS3MQvtEA JzZpvLBBLwHnmClFwEC8Z++TlFn/at20tejc6QFSNcUaiq8ZZVrt0KtYAYrZ/0S+ zqg4TWYTFCV/XXbGi/VOyfvk5aQ9k7VO -----END CERTIFICATE-----Generated at Sat Sep 6 15:16:19 2025 by rpki-client