$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft File: -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json) Hash identifier: qhcfec+I7tT26/XA2k4jn/HG3Uyv1uIrPlMzCL/9wVs= Subject key identifier: 9A:D8:81:8A:21:97:44:E1:4B:15:AD:9A:34:95:51:D1:F8:90:A6:22 Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft Manifest number: 06A6 Signing time: Thu 18 Sep 2025 22:28:30 +0000 Manifest this update: Thu 18 Sep 2025 22:28:30 +0000 Manifest next update: Thu 25 Sep 2025 22:28:30 +0000 Files and hashes: 1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: iOTEpdHh/GFqkAsIh5XXMgoJZ8Wu453kvU3cxR6dFX4=) 2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: ACBayas3sWm8LRkAgsG4BLCCWR0NJPgThMvDEl+trzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A Validity Not Before: Sep 18 22:28:30 2025 GMT Not After : Sep 25 22:28:30 2025 GMT Subject: CN=68cc878e-afe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:1e:1a:87:6d:7e:09:b9:2a:7e:8e:71:50: f9:db:65:ca:1f:58:4c:c5:f3:72:d2:63:a0:1f:a4: 24:9d:f3:a9:8f:18:7a:9c:3a:c0:c9:59:ab:8b:dd: e9:cf:f3:f4:e6:86:25:81:3a:65:d5:fd:be:39:01: f2:ab:99:76:a8:37:fd:0c:c0:dc:3c:f6:e2:e9:fd: db:59:37:87:35:5a:a6:e0:e0:60:d6:d5:69:12:1e: 92:43:d9:da:5c:99:28:8e:5e:e8:4c:89:5c:88:2d: 6e:1f:7c:8d:6e:51:cf:72:b6:06:bd:e5:96:2f:c9: 20:ba:bb:64:7c:e8:ad:cf:8b:4e:5d:70:6a:53:a4: 04:2d:db:9c:f4:b2:d2:48:9f:85:7d:1a:2a:8b:b7: ae:25:83:ca:5f:28:cd:db:e7:52:28:da:7e:79:92: 20:d2:d5:d3:3c:94:bf:14:ce:8e:b8:52:75:17:e8: af:20:d7:cf:f7:38:7c:02:f5:cf:25:36:ac:1e:ce: d1:9b:76:38:98:8a:a4:7a:7a:55:3b:a7:e6:04:7d: e2:72:18:32:4c:84:3f:dd:5f:d4:b7:60:17:55:75: 8c:32:24:80:87:a6:87:d7:98:78:7f:ed:e9:00:17: 29:2c:28:cd:e0:40:4f:71:19:e5:ea:31:38:50:d1: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:81:8A:21:97:44:E1:4B:15:AD:9A:34:95:51:D1:F8:90:A6:22 X509v3 Authority Key Identifier: keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0c:99:9e:3a:d7:65:81:1f:a1:16:4c:2f:02:2a:c7:b8:2a: d4:20:21:e8:b4:53:28:83:97:26:e7:2a:87:66:c2:de:c5:18: 69:3c:be:9b:78:13:a5:3d:0a:a1:e3:b0:e1:e4:68:db:43:86: 85:4a:5d:00:1e:97:f4:81:73:8d:58:52:d9:39:fa:ed:9b:f3: aa:f2:31:90:e7:f7:a7:7d:c4:79:e4:7c:e1:07:be:5b:30:bb: 9b:09:32:17:df:ee:cd:de:0a:55:76:60:fe:db:9d:3d:1d:79: d0:c8:f2:87:45:72:5e:e9:36:5e:05:18:61:f9:06:54:05:ca: 0f:9d:ba:c6:37:24:94:a9:dd:aa:b0:77:2b:4d:4e:96:99:a2: 25:4d:5d:c3:9f:d6:00:fa:54:82:bb:1c:24:4d:ae:e3:34:9b: 5e:b5:ff:2e:22:4a:56:60:e0:be:38:d5:22:65:0b:55:ef:51: c3:4a:51:4e:83:05:20:bb:1f:48:91:42:32:35:7a:22:cf:cf: b6:3f:62:1f:01:04:ca:1e:10:e9:96:9a:47:bb:28:83:01:30: ec:b6:59:73:f0:89:f0:62:7e:a0:7b:ce:8b:bd:7b:80:e4:01: 8e:b4:03:d2:a2:a0:81:99:23:2c:b1:f1:ac:95:7f:96:37:50: 59:33:98:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFOTcxMTAvBgNVBAUTKEY5MDZEOTdGN0FBODdDODZEQTk5MDM5RDIzNkVDREI1 MUQyMzFGN0EwHhcNMjUwOTE4MjIyODMwWhcNMjUwOTI1MjIyODMwWjAYMRYwFAYD VQQDEw02OGNjODc4ZS1hZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRYeGodtfgm5Kn6OcVD522XKH1hMxfNy0mOgH6QknfOpjxh6nDrAyVmri93p z/P05oYlgTpl1f2+OQHyq5l2qDf9DMDcPPbi6f3bWTeHNVqm4OBg1tVpEh6SQ9na XJkojl7oTIlciC1uH3yNblHPcrYGveWWL8kgurtkfOitz4tOXXBqU6QELduc9LLS SJ+FfRoqi7euJYPKXyjN2+dSKNp+eZIg0tXTPJS/FM6OuFJ1F+ivINfP9zh8AvXP JTasHs7Rm3Y4mIqkenpVO6fmBH3ichgyTIQ/3V/Ut2AXVXWMMiSAh6aH15h4f+3p ABcpLCjN4EBPcRnl6jE4UNEYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrYgYoh l0ThSxWtmjSVUdH4kKYiMB8GA1UdIwQYMBaAFPkG2X96qHyG2pkDnSNuzbUdIx96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkU5Ny9EMjE4MzAyRTdE NDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJYmFtUU9kSTI3TnRSMGpI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RYlpmM3FvZkliYW1RT2RJMjdOdFIwakgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkU5Ny9EMjE4MzAyRTdENDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJ YmFtUU9kSTI3TnRSMGpIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZDJmeOtdlgR+hFkwvAirHuCrUICHotFMog5cm5yqHZsLexRhpPL6b eBOlPQqh47Dh5GjbQ4aFSl0AHpf0gXONWFLZOfrtm/Oq8jGQ5/enfcR55HzhB75b MLubCTIX3+7N3gpVdmD+2509HXnQyPKHRXJe6TZeBRhh+QZUBcoPnbrGNySUqd2q sHcrTU6WmaIlTV3Dn9YA+lSCuxwkTa7jNJtetf8uIkpWYOC+ONUiZQtV71HDSlFO gwUgux9IkUIyNXoiz8+2P2IfAQTKHhDplppHuyiDATDstllz8InwYn6ge86LvXuA 5AGOtAPSoqCBmSMssfGslX+WN1BZM5jG -----END CERTIFICATE-----Generated at Fri Sep 19 12:23:05 2025 by rpki-client