$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: vZax0oyuYxy2zbPK1zNIVM3ebqIUASlbXKfmwOlbUPE= Subject key identifier: 07:72:49:99:0E:BC:42:19:9B:18:9C:29:36:28:49:A4:C8:7D:EF:AB Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 6C Signing time: Fri 05 Sep 2025 07:24:56 +0000 Manifest this update: Fri 05 Sep 2025 07:24:56 +0000 Manifest next update: Fri 12 Sep 2025 07:24:56 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: v8CX9zDbpAg78W+deGZIl5k3LrVQz6iyTusCOwYjXdY=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Sep 5 07:24:56 2025 GMT Not After : Sep 12 07:24:56 2025 GMT Subject: CN=68ba9048-7e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:a1:75:df:0a:e1:a1:2c:83:20:69:c4:64: b2:6f:16:18:c6:b4:f5:9f:53:eb:02:80:e1:55:75: e4:4b:df:58:5b:75:40:e9:c5:f5:ee:12:7b:6b:cb: c3:71:36:31:76:01:f9:4c:53:a5:2c:6f:9d:63:80: 89:58:a8:98:75:22:1c:ad:83:e5:eb:86:1a:70:bc: 8a:4a:40:9f:f8:e1:5d:33:7a:25:1a:a8:4b:26:fc: cc:f5:e1:9d:6b:28:d6:d7:64:7e:bc:9c:fd:70:d3: f6:72:45:5c:f6:e6:f7:7c:a3:31:f3:c1:55:1c:c8: 55:56:82:30:fb:39:f6:2d:d3:03:b2:d9:15:31:2a: f0:b7:3d:a0:5c:fc:b9:66:05:da:9f:00:e8:27:d0: fe:92:98:fc:34:c7:e1:20:58:50:1b:2b:63:4f:ed: 41:bd:98:55:94:aa:d1:e8:c8:05:ec:85:58:26:fa: 74:ab:b5:d7:c6:c6:34:c0:47:64:2d:62:bf:30:56: e2:f6:03:b1:ea:a2:12:e9:94:f5:a9:d8:22:5c:0c: 6c:7a:51:9e:84:fb:7e:31:60:f9:d5:36:0c:0d:95: 16:1a:24:4d:01:0c:b7:7a:b7:11:a9:46:85:20:6a: 28:0f:cd:b7:7f:3e:25:97:55:0f:ba:07:a3:a3:83: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:72:49:99:0E:BC:42:19:9B:18:9C:29:36:28:49:A4:C8:7D:EF:AB X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:80:71:df:75:d8:33:24:1e:f1:0d:6c:84:7c:a8:2b:fd:b6: a5:ad:b2:b7:4c:45:56:6c:28:6e:a0:b7:72:30:9e:c4:33:d6: d4:9b:63:a6:5e:5b:08:40:43:7a:7c:25:af:dd:fa:56:bb:b2: 33:44:bc:37:8d:4a:6d:85:ae:1a:18:85:30:55:25:c8:43:f6: 4c:2e:ff:56:70:03:50:24:b5:a5:5b:a1:65:1d:cf:95:7c:70: 77:ec:b9:2a:28:b0:cb:47:84:32:3a:33:c5:63:e9:17:b3:ac: 94:9c:c0:70:17:54:e2:a1:64:c4:37:d5:8a:b7:a6:ed:c6:da: 1b:1c:ac:80:9f:ce:6a:b2:d6:36:6c:90:45:91:09:73:40:b5: 87:f3:af:fd:b9:19:8d:6c:c9:2d:dc:0b:e4:c7:a0:c6:45:95: 03:25:07:de:50:66:22:cb:05:d1:43:1b:5f:10:36:95:77:66: 51:5e:df:3e:e1:7e:46:ac:52:d9:3b:b2:0a:0c:aa:f6:1b:2e: 1d:7f:8a:ab:eb:7d:cb:92:90:29:fb:56:0b:59:ab:4d:85:a4: c0:1a:ce:af:52:2a:11:a3:9a:d9:13:2f:68:d9:b7:50:09:47: 71:c7:0a:b1:ae:47:74:e9:fc:ed:8c:bf:56:a0:74:9f:67:cc: bf:cb:87:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoMDkwNjc4ODJDREMwMjAzNDkxNjFFMDkzQkYzNDczMUIz RjgyMkJENzAeFw0yNTA5MDUwNzI0NTZaFw0yNTA5MTIwNzI0NTZaMBgxFjAUBgNV BAMTDTY4YmE5MDQ4LTdlMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnF6F13wrhoSyDIGnEZLJvFhjGtPWfU+sCgOFVdeRL31hbdUDpxfXuEntry8Nx NjF2AflMU6Usb51jgIlYqJh1Ihytg+XrhhpwvIpKQJ/44V0zeiUaqEsm/Mz14Z1r KNbXZH68nP1w0/ZyRVz25vd8ozHzwVUcyFVWgjD7OfYt0wOy2RUxKvC3PaBc/Llm BdqfAOgn0P6SmPw0x+EgWFAbK2NP7UG9mFWUqtHoyAXshVgm+nSrtdfGxjTAR2Qt Yr8wVuL2A7HqohLplPWp2CJcDGx6UZ6E+34xYPnVNgwNlRYaJE0BDLd6txGpRoUg aigPzbd/PiWXVQ+6B6Ojg7B1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB3JJmQ68 QhmbGJwpNihJpMh976swHwYDVR0jBBgwFoAUCQZ4gs3AIDSRYeCTvzRzGz+CK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0YzRDIyQzJDRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1FaNGdzM0FJRFNSWWVDVHZ6UnpHei1DSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0YzRDIyQzJDRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURT UlllQ1R2elJ6R3otQ0s5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSAcd912DMkHvENbIR8qCv9tqWtsrdMRVZsKG6gt3IwnsQz1tSbY6Ze WwhAQ3p8Ja/d+la7sjNEvDeNSm2FrhoYhTBVJchD9kwu/1ZwA1AktaVboWUdz5V8 cHfsuSoosMtHhDI6M8Vj6RezrJScwHAXVOKhZMQ31Yq3pu3G2hscrICfzmqy1jZs kEWRCXNAtYfzr/25GY1syS3cC+THoMZFlQMlB95QZiLLBdFDG18QNpV3ZlFe3z7h fkasUtk7sgoMqvYbLh1/iqvrfcuSkCn7VgtZq02FpMAazq9SKhGjmtkTL2jZt1AJ R3HHCrGuR3Tp/O2Mv1agdJ9nzL/LhzA= -----END CERTIFICATE-----Generated at Sat Sep 6 20:52:00 2025 by rpki-client