$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: Z+68F1rx9mPOQS7GHoghQJ/SnHpsB8IcJ8AYK7dyAVo= Subject key identifier: 12:08:34:2D:75:6E:70:6B:F8:D2:13:D2:55:70:D7:FD:23:F8:A2:62 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 35B5 Signing time: Thu 04 Sep 2025 14:28:13 +0000 Manifest this update: Thu 04 Sep 2025 14:28:12 +0000 Manifest next update: Thu 11 Sep 2025 14:28:12 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: SZ7mBU94YY7VTekxjFhXIycG++tXU7Y1mNwovQ+5RkI=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: uDX3snF5KOLhQFZJb9NS91kFKiMHEVAq6if3Xq1rgsY=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: +oczTLjRD/tYfsYBFtIa6eRmdxZaKTBLayvz3HoGlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13961 (0x3689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Sep 4 14:28:12 2025 GMT Not After : Sep 11 14:28:12 2025 GMT Subject: CN=68b9a1fd-1acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:6a:a2:ff:5e:27:a8:0f:d2:28:cf:96:49: 80:b3:09:db:8f:e8:d8:3e:e8:bf:5f:48:0c:23:a8: ec:0a:74:78:f6:84:6f:5f:f4:48:50:07:68:da:60: 9e:44:b2:d2:81:1f:a0:60:16:8b:4c:84:9e:d0:0d: 8b:fa:e0:dd:ae:0e:1d:34:b5:1c:e2:e3:86:40:ed: 3b:38:17:06:61:f7:e7:70:33:af:0c:c3:1e:66:b4: ee:76:9d:14:40:23:0e:9d:4d:11:09:25:8b:48:29: 40:8a:18:73:b4:10:4a:56:18:04:c0:b5:43:64:fb: 4d:61:48:26:96:f6:a2:d3:f7:9e:9f:fe:0d:32:b6: 55:6e:e8:65:c6:9a:d4:ae:5b:fe:ef:0c:de:1a:65: 75:54:77:66:db:69:5c:a7:1b:6e:1b:3a:d3:02:b7: 55:49:37:a1:d6:f7:ba:98:91:79:82:0c:b1:29:b0: d3:20:93:63:6b:ae:e6:da:bd:46:4b:8d:89:5f:32: 5e:58:fe:72:69:34:91:f8:18:3f:d8:39:27:5f:dc: 36:fb:f4:96:67:41:3f:bf:53:31:62:c0:00:96:ae: 64:a9:93:8f:6d:2d:9c:d2:fb:e8:bf:c0:b2:5a:0a: a5:03:85:02:f0:7b:3e:a1:ff:11:a6:31:90:e0:cc: 85:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:08:34:2D:75:6E:70:6B:F8:D2:13:D2:55:70:D7:FD:23:F8:A2:62 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:40:ee:48:9c:08:64:88:5d:c6:d4:eb:6a:10:8b:69:c2: 8e:9f:d7:52:4c:42:fa:96:b7:53:43:e4:46:42:7a:9f:a5:e4: 0f:6c:94:4d:a9:56:f3:f2:e1:0d:ad:d8:64:9b:49:b9:7f:76: c1:63:12:6a:61:53:26:a8:0d:9e:0f:1f:55:08:39:64:3f:c7: b7:3b:23:b4:7a:be:df:5f:bd:14:f5:c0:07:8a:5e:99:40:03: 9f:c6:54:24:98:77:fc:87:78:38:1c:08:af:31:e7:e1:4a:1a: 68:c7:f0:42:20:53:95:b0:20:2f:4f:12:1e:01:81:69:66:66: e2:2f:e7:cc:7b:5b:8d:a1:64:21:ed:be:f1:6a:bb:fa:f1:fd: 96:50:d5:8a:ca:3e:81:10:da:76:0c:6e:89:d9:99:f8:7a:8a: 6d:82:30:fa:5f:dc:1d:7f:e2:5f:2c:cc:02:50:cd:54:32:45: 9d:08:72:9a:20:da:8d:3f:3b:94:32:b0:9d:73:32:b3:2f:eb: d8:60:14:7b:00:18:53:1a:05:d7:ee:a6:28:c2:c2:75:f6:f2: e0:54:18:ea:c2:f1:29:1d:55:84:6a:43:69:bd:d2:b9:c5:23: 62:bf:3e:16:7d:92:63:11:e1:eb:fd:82:2d:99:6d:96:14:90: ed:f1:10:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwOTA0MTQyODEyWhcNMjUwOTExMTQyODEyWjAYMRYwFAYD VQQDEw02OGI5YTFmZC0xYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vlqov9eJ6gP0ijPlkmAswnbj+jYPui/X0gMI6jsCnR49oRvX/RIUAdo2mCe RLLSgR+gYBaLTISe0A2L+uDdrg4dNLUc4uOGQO07OBcGYffncDOvDMMeZrTudp0U QCMOnU0RCSWLSClAihhztBBKVhgEwLVDZPtNYUgmlvai0/een/4NMrZVbuhlxprU rlv+7wzeGmV1VHdm22lcpxtuGzrTArdVSTeh1ve6mJF5ggyxKbDTIJNja67m2r1G S42JXzJeWP5yaTSR+Bg/2DknX9w2+/SWZ0E/v1MxYsAAlq5kqZOPbS2c0vvov8Cy WgqlA4UC8Hs+of8RpjGQ4MyFMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIINC11 bnBr+NIT0lVw1/0j+KJiMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZpkDuSJwIZIhdxtTrahCLacKOn9dSTEL6lrdTQ+RGQnqfpeQPbJRN qVbz8uENrdhkm0m5f3bBYxJqYVMmqA2eDx9VCDlkP8e3OyO0er7fX70U9cAHil6Z QAOfxlQkmHf8h3g4HAivMefhShpox/BCIFOVsCAvTxIeAYFpZmbiL+fMe1uNoWQh 7b7xarv68f2WUNWKyj6BENp2DG6J2Zn4eoptgjD6X9wdf+JfLMwCUM1UMkWdCHKa INqNPzuUMrCdczKzL+vYYBR7ABhTGgXX7qYowsJ19vLgVBjqwvEpHVWEakNpvdK5 xSNivz4WfZJjEeHr/YItmW2WFJDt8RDp -----END CERTIFICATE-----Generated at Sat Sep 6 06:59:57 2025 by rpki-client