$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json) Hash identifier: ocOMIMSaceAWNQAfonk68A2YG1L1g4WAZkXFNAhmvYc= Subject key identifier: D2:6B:36:AE:09:53:9E:10:54:2F:FE:70:43:45:EA:53:46:AE:B7:28 Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft Manifest number: 08 Signing time: Tue 09 Sep 2025 08:15:48 +0000 Manifest this update: Tue 09 Sep 2025 08:15:47 +0000 Manifest next update: Tue 16 Sep 2025 08:15:47 +0000 Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: Wo9oXhiCxoOop2PxjBeSKU6WW9uOO0301s22Ko774oA=) 2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: Crg6eEA+ImfPHspcxe55nFPiMJ47NKQMZB7ytChE440=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Validity Not Before: Sep 9 08:15:47 2025 GMT Not After : Sep 16 08:15:47 2025 GMT Subject: CN=68bfe234-d2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:ae:c0:97:2a:f5:9f:c3:04:d7:15:79:e6: 69:22:bf:38:29:6a:f5:9d:85:d3:50:4d:80:0f:2e: bc:9a:b9:75:b2:69:db:6d:5d:a8:6a:70:95:25:66: 9b:d6:ac:1a:f4:cd:fd:ab:7c:63:e3:89:2a:3d:c4: 1e:2c:4e:bb:c1:12:e7:01:84:42:60:ad:fb:9e:8c: 14:18:bf:ad:d7:56:8f:71:42:f1:46:a5:e9:d8:db: da:2e:a9:58:b3:6c:e9:97:a0:3f:76:71:a0:5a:41: 26:40:61:c8:c0:49:dc:19:a7:18:ae:7f:ed:cc:3d: 71:09:81:53:c1:76:ca:14:5d:72:5e:d4:d8:96:7a: 7f:69:e8:58:95:06:e1:f1:aa:71:63:62:2b:5b:26: ff:3e:83:80:3e:08:be:cf:56:48:69:ca:5d:b7:b6: de:38:ce:6c:5d:4d:34:5a:69:48:0a:42:31:ce:27: 9c:6a:35:b9:d6:a4:2d:33:9f:26:ae:95:f4:36:45: 36:ee:af:b8:f5:e0:66:3d:8e:a0:49:f9:92:b3:12: 4c:40:9c:42:4f:6a:22:90:dd:dc:d9:7e:0f:9e:11: b6:49:fa:41:38:7e:50:e8:91:8e:5a:0a:b8:2c:22: 58:4d:7d:f9:2d:c5:61:00:9e:9c:a0:00:60:f0:d6: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6B:36:AE:09:53:9E:10:54:2F:FE:70:43:45:EA:53:46:AE:B7:28 X509v3 Authority Key Identifier: keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:04:09:be:5c:2f:e3:cd:d5:6b:4b:c6:9e:47:5c:fe:82:68: 7e:66:d5:e9:82:23:5b:2f:24:cb:7f:7b:4b:7f:e3:91:ad:ba: 2c:cd:69:87:93:e6:fb:f0:a7:a6:44:0b:46:f3:19:49:83:51: ae:fb:ae:0a:bf:39:5c:68:27:25:a7:dd:7d:1a:5a:bd:57:35: c3:c3:39:f8:ac:5f:c7:f8:6c:ae:1f:8b:99:6d:19:78:c9:8b: d8:51:e0:1f:c3:7d:03:6c:87:83:99:0c:9c:20:b2:92:2e:4b: 27:ea:14:30:33:62:96:39:08:76:31:8e:3c:b9:3c:28:24:02: 69:8a:c1:72:c1:94:73:7f:56:cb:94:5b:9a:64:5f:2b:6f:03: a2:2c:f3:d2:e3:87:00:ad:0f:c2:d4:bf:64:18:91:54:1f:b1: ec:82:5a:89:80:d6:5a:94:b5:50:59:c2:7c:1e:08:45:3b:56: 04:ab:42:2f:62:90:1a:08:ae:49:54:b3:99:13:5e:01:c4:9a: 14:60:e5:bb:03:74:9a:6b:e8:b0:6c:8c:01:51:53:ca:7b:22: 9a:3b:a9:10:d0:97:f1:ba:dd:e2:9d:10:ad:d8:f6:30:d4:4d: a3:89:2a:b6:ea:5f:f6:d9:59:76:63:e5:c9:9f:26:ba:63:4a: a2:a8:9e:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTVCMzExMC8GA1UEBRMoNDNCQzAzQTk5NzMxNzlFN0VFMjM0NkIyOEU3NERFMTEz RjYzMzU2QzAeFw0yNTA5MDkwODE1NDdaFw0yNTA5MTYwODE1NDdaMBgxFjAUBgNV BAMTDTY4YmZlMjM0LWQyYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB+a7Alyr1n8ME1xV55mkivzgpavWdhdNQTYAPLryauXWyadttXahqcJUlZpvW rBr0zf2rfGPjiSo9xB4sTrvBEucBhEJgrfuejBQYv63XVo9xQvFGpenY29ouqViz bOmXoD92caBaQSZAYcjASdwZpxiuf+3MPXEJgVPBdsoUXXJe1NiWen9p6FiVBuHx qnFjYitbJv8+g4A+CL7PVkhpyl23tt44zmxdTTRaaUgKQjHOJ5xqNbnWpC0znyau lfQ2RTbur7j14GY9jqBJ+ZKzEkxAnEJPaiKQ3dzZfg+eEbZJ+kE4flDokY5aCrgs IlhNffktxWEAnpygAGDw1stDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0ms2rglT nhBUL/5wQ0XqU0autygwHwYDVR0jBBgwFoAUQ7wDqZcxeefuI0ayjnTeET9jNWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUIzL0Y3QjI0ODhFODRB RDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVmdUkwYXlqblRlRVQ5ak5X dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTd3RHFaY3hlZWZ1STBheWpuVGVFVDlqTld3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx NUIzL0Y3QjI0ODhFODRBRDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVm dUkwYXlqblRlRVQ5ak5Xdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMECb5cL+PN1WtLxp5HXP6CaH5m1emCI1svJMt/e0t/45GtuizNaYeT 5vvwp6ZEC0bzGUmDUa77rgq/OVxoJyWn3X0aWr1XNcPDOfisX8f4bK4fi5ltGXjJ i9hR4B/DfQNsh4OZDJwgspIuSyfqFDAzYpY5CHYxjjy5PCgkAmmKwXLBlHN/VsuU W5pkXytvA6Is89LjhwCtD8LUv2QYkVQfseyCWomA1lqUtVBZwnweCEU7VgSrQi9i kBoIrklUs5kTXgHEmhRg5bsDdJpr6LBsjAFRU8p7Ipo7qRDQl/G63eKdEK3Y9jDU TaOJKrbqX/bZWXZj5cmfJrpjSqKonrM= -----END CERTIFICATE-----Generated at Tue Sep 9 13:34:54 2025 by rpki-client