$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: 5UEs4VfwhIRxtipAWlWMQ0Shc6qLgXrNxJhE4SqFdsU= Subject key identifier: 83:44:DE:63:7B:11:B6:5C:C0:7B:AA:7F:5C:E4:90:A0:47:AC:A3:7C Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0C98 Signing time: Thu 18 Sep 2025 18:24:03 +0000 Manifest this update: Thu 18 Sep 2025 18:24:02 +0000 Manifest next update: Thu 25 Sep 2025 18:24:02 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: blyhnsicTQTA75mvqb57RaqCfIAKl4CiTXPWovyDbjE=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Sep 18 18:24:02 2025 GMT Not After : Sep 25 18:24:02 2025 GMT Subject: CN=68cc4e43-3fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:75:dc:a0:b5:b5:88:5c:5a:c9:2b:35:7c: 61:a0:91:82:2a:bb:d8:56:0f:d2:80:1e:45:e2:2f: 4a:b5:75:d8:ce:5a:53:25:05:d4:46:26:78:78:9a: a6:56:8a:81:40:25:0e:23:b1:86:14:75:14:88:ab: 77:67:e6:af:6f:0a:21:01:6d:5c:5d:ff:e0:0b:ed: b9:c8:02:cf:82:d4:62:bd:ef:95:59:ba:51:57:d2: 4b:bc:f2:28:62:5d:cc:e1:36:e2:c2:ad:03:f6:6f: bb:e1:3b:28:8f:17:e8:5b:f5:3f:79:ed:8b:42:a6: c0:23:4d:26:eb:57:c1:0d:8c:04:c9:1a:10:0f:6f: b5:48:2e:b9:d1:e0:bb:c5:2a:90:68:95:01:67:50: 95:0b:4d:2f:19:bd:33:0f:48:a4:70:10:58:03:3a: 12:aa:1e:0a:b4:1d:cb:b9:09:4c:20:a3:a3:10:49: c6:e1:9b:1e:6f:b4:cb:95:5e:66:1e:66:3c:83:bc: 2c:4f:de:45:55:37:92:86:b7:30:c9:5e:1c:6f:df: 61:ac:1b:b1:cc:95:ba:92:3b:cc:96:25:20:8e:62: 3d:a9:ac:a6:f7:20:f0:7b:55:89:f6:9d:3f:df:76: f2:b7:c6:d7:84:4b:99:61:ea:3a:5d:c8:82:8c:23: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:DE:63:7B:11:B6:5C:C0:7B:AA:7F:5C:E4:90:A0:47:AC:A3:7C X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:82:62:4e:8b:63:3c:4b:8d:ae:ec:1d:51:6a:4d:1b:f3: 91:79:b0:08:d6:69:24:34:0e:27:20:92:86:32:0d:df:4e:47: 06:75:f8:de:dd:3a:c0:04:e9:34:09:59:48:58:fb:ad:75:0a: 2a:c1:59:03:91:db:15:84:91:6d:26:38:82:89:04:47:8d:fd: 45:7e:a6:10:0b:d5:1b:68:40:3d:27:e2:b5:06:ba:25:26:4b: d5:07:e1:6b:4a:e1:97:e3:75:9c:3e:ab:09:c9:f0:00:13:0e: 8b:f3:42:5e:1d:eb:50:3d:f2:6b:c8:8c:c3:b6:4e:34:e8:df: 3c:3f:bc:a6:27:ba:37:a3:16:23:d3:d3:6a:78:ab:f5:e8:22: cb:31:5b:e2:fc:65:44:4c:d8:59:67:b1:a9:b3:fd:3e:50:4d: 5a:25:02:56:ed:3b:bd:d0:2d:6f:80:dc:9a:54:b4:42:f7:2e: 6b:31:48:c0:76:a5:52:96:ad:1c:a4:ff:3f:76:74:96:28:e7: 9a:bf:89:cf:95:a1:3e:c7:e6:1a:f2:74:ff:26:41:c0:07:d7: 94:75:3b:46:0f:aa:a7:b0:ef:18:4c:9b:be:53:e6:27:98:02: 5b:6b:b2:62:68:1f:eb:ba:5e:95:4f:c7:e2:b1:c4:14:35:7d: 4c:c1:6d:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUwOTE4MTgyNDAyWhcNMjUwOTI1MTgyNDAyWjAYMRYwFAYD VQQDEw02OGNjNGU0My0zZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fp13KC1tYhcWskrNXxhoJGCKrvYVg/SgB5F4i9KtXXYzlpTJQXURiZ4eJqm VoqBQCUOI7GGFHUUiKt3Z+avbwohAW1cXf/gC+25yALPgtRive+VWbpRV9JLvPIo Yl3M4Tbiwq0D9m+74TsojxfoW/U/ee2LQqbAI00m61fBDYwEyRoQD2+1SC650eC7 xSqQaJUBZ1CVC00vGb0zD0ikcBBYAzoSqh4KtB3LuQlMIKOjEEnG4Zseb7TLlV5m HmY8g7wsT95FVTeShrcwyV4cb99hrBuxzJW6kjvMliUgjmI9qaym9yDwe1WJ9p0/ 33byt8bXhEuZYeo6XciCjCPhqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINE3mN7 EbZcwHuqf1zkkKBHrKN8MB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuBYJiTotjPEuNruwdUWpNG/ORebAI1mkkNA4nIJKGMg3fTkcGdfje 3TrABOk0CVlIWPutdQoqwVkDkdsVhJFtJjiCiQRHjf1FfqYQC9UbaEA9J+K1Brol JkvVB+FrSuGX43WcPqsJyfAAEw6L80JeHetQPfJryIzDtk406N88P7ymJ7o3oxYj 09NqeKv16CLLMVvi/GVETNhZZ7Gps/0+UE1aJQJW7Tu90C1vgNyaVLRC9y5rMUjA dqVSlq0cpP8/dnSWKOeav4nPlaE+x+Ya8nT/JkHAB9eUdTtGD6qnsO8YTJu+U+Yn mAJba7JiaB/rul6VT8fiscQUNX1MwW2m -----END CERTIFICATE-----Generated at Fri Sep 19 06:57:39 2025 by rpki-client