$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: CMfJp9VaaZsXpjRG8mdfiNojIs09L3kOvdyL2EeUJ/M= Subject key identifier: 7E:7D:2B:90:52:B2:24:B7:E8:90:E7:72:71:BF:5A:B7:50:38:B2:D8 Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 1765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 175C Signing time: Thu 04 Sep 2025 16:43:49 +0000 Manifest this update: Thu 04 Sep 2025 16:43:48 +0000 Manifest next update: Thu 11 Sep 2025 16:43:48 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: aKFuP02BjasGV4fIsRVN/AQYHp/1j16Bq2nvoHRHzGc=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5989 (0x1765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Sep 4 16:43:48 2025 GMT Not After : Sep 11 16:43:48 2025 GMT Subject: CN=68b9c1c5-0c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:7b:cd:0b:b7:04:9b:1d:75:01:0f:f6:e9: 43:04:cc:dc:47:2d:14:44:d4:ae:81:9b:a4:56:94: 92:e8:4f:4c:0c:31:4b:0a:3f:ed:14:e4:24:8d:40: d5:0d:03:b3:69:1c:fd:9d:ac:9f:83:1d:be:61:65: 53:e1:fd:5c:e5:09:c9:fb:a1:73:59:08:61:ea:08: fb:d1:cf:4f:2b:4f:7a:1f:f4:97:3d:77:5a:6d:f3: 0d:29:2f:8e:4c:e6:68:f9:df:51:2c:74:45:78:c4: e8:9d:57:03:40:3b:f1:1a:69:19:ed:3d:a0:b9:d7: 3d:8c:68:1c:0f:a0:3a:4b:93:8c:af:f1:06:4f:a6: db:12:81:84:86:6e:c6:c3:a6:a6:89:c9:50:03:b8: 9c:94:fd:db:5c:6b:8f:a5:46:8f:f3:bd:35:60:9f: 6f:b0:34:07:0c:89:f9:2d:11:00:a2:04:1e:fd:cd: 1e:06:ed:28:9c:07:8f:48:12:7a:16:63:23:53:e7: 56:2d:45:6c:4e:8f:b9:a4:99:7e:3c:f1:a4:f5:d1: 88:e7:ec:c9:47:57:53:48:81:18:78:51:47:a4:bd: a4:ea:ce:fa:bc:fb:0e:58:52:ba:37:5f:80:a8:7a: 85:48:59:e9:5e:ea:c3:50:7e:20:68:d6:40:e8:75: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7D:2B:90:52:B2:24:B7:E8:90:E7:72:71:BF:5A:B7:50:38:B2:D8 X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4a:be:05:a6:07:ba:5a:56:13:29:27:aa:93:f3:ae:d6:be: 05:f9:9b:c2:ad:4f:21:56:a1:29:3d:d3:62:dc:b7:0b:84:67: f0:00:22:b6:66:d9:e5:bc:e5:ab:f1:c5:02:7f:43:79:41:39: 44:ab:95:4a:5e:f4:49:10:4f:fd:8c:a2:72:39:d4:1e:ae:ec: b6:fc:c2:14:bf:91:c1:ff:02:43:54:96:77:39:4b:1b:c0:8c: aa:e3:09:5d:4d:e1:ff:f8:2c:7f:f6:d1:28:aa:33:88:41:87: e7:1d:cf:66:99:09:85:21:e9:c4:cb:e5:e6:d8:83:03:a2:0a: 4c:bf:90:74:1c:76:71:e5:1c:bd:17:85:29:9c:e4:5a:cf:fb: 0f:26:51:f2:7f:b6:b4:e6:65:c8:5a:cd:2e:5f:fe:7b:38:ef: 2e:99:b2:6f:af:86:b1:d1:13:a4:a2:27:36:34:49:ae:2f:9e: 84:f1:b9:e8:f5:6f:4c:63:b7:d2:45:9a:cc:ec:58:19:31:55: 08:97:c8:9b:d2:c0:ee:c0:49:82:36:5c:fa:3f:aa:d6:5d:a5: eb:6b:a3:94:d4:76:4c:9a:45:ec:a9:0e:17:8e:2b:30:d4:d2: 24:78:e0:e9:c0:69:6c:70:2a:b8:c9:64:29:9a:aa:f9:2a:71: 05:8f:05:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjUwOTA0MTY0MzQ4WhcNMjUwOTExMTY0MzQ4WjAYMRYwFAYD VQQDEw02OGI5YzFjNS0wYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4O57zQu3BJsddQEP9ulDBMzcRy0URNSugZukVpSS6E9MDDFLCj/tFOQkjUDV DQOzaRz9nayfgx2+YWVT4f1c5QnJ+6FzWQhh6gj70c9PK096H/SXPXdabfMNKS+O TOZo+d9RLHRFeMTonVcDQDvxGmkZ7T2gudc9jGgcD6A6S5OMr/EGT6bbEoGEhm7G w6amiclQA7iclP3bXGuPpUaP8701YJ9vsDQHDIn5LREAogQe/c0eBu0onAePSBJ6 FmMjU+dWLUVsTo+5pJl+PPGk9dGI5+zJR1dTSIEYeFFHpL2k6s76vPsOWFK6N1+A qHqFSFnpXurDUH4gaNZA6HWsRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH59K5BS siS36JDncnG/WrdQOLLYMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOSr4Fpge6WlYTKSeqk/Ou1r4F+ZvCrU8hVqEpPdNi3LcLhGfwACK2 ZtnlvOWr8cUCf0N5QTlEq5VKXvRJEE/9jKJyOdQeruy2/MIUv5HB/wJDVJZ3OUsb wIyq4wldTeH/+Cx/9tEoqjOIQYfnHc9mmQmFIenEy+Xm2IMDogpMv5B0HHZx5Ry9 F4UpnORaz/sPJlHyf7a05mXIWs0uX/57OO8umbJvr4ax0ROkoic2NEmuL56E8bno 9W9MY7fSRZrM7FgZMVUIl8ib0sDuwEmCNlz6P6rWXaXra6OU1HZMmkXsqQ4Xjisw 1NIkeODpwGlscCq4yWQpmqr5KnEFjwVH -----END CERTIFICATE-----Generated at Sat Sep 6 17:21:54 2025 by rpki-client