$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: ewByBdA5o/b4ZIpMJW35gyoQjaqNRhSiQ1vgf0TIBlE= Subject key identifier: 84:F5:A7:EA:48:4B:5B:CE:27:76:91:F8:73:78:1D:1A:BC:F1:F4:DA Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0256 Signing time: Tue 09 Sep 2025 01:53:18 +0000 Manifest this update: Tue 09 Sep 2025 01:53:18 +0000 Manifest next update: Tue 16 Sep 2025 01:53:18 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: 3GimsM2GwGCCqCKoy4aWTW1XaIRzA8X3RLotteb4LpI=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: MlSWr+baoX0iIeudBnt/7RnQIgEalzKtR7VxANOwdB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: Sep 9 01:53:18 2025 GMT Not After : Sep 16 01:53:18 2025 GMT Subject: CN=68bf888e-a184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:73:a8:e6:63:aa:80:11:dd:be:95:e9:6e:70: 30:ac:24:54:7e:c5:d9:9d:63:8b:8d:63:63:06:68: 50:b8:69:3d:e4:8c:0c:84:20:f9:46:ff:78:08:4c: b8:1b:9f:7b:20:81:ba:12:cf:72:da:05:3b:e6:d3: cf:af:ba:8f:6c:0d:21:fd:f3:4c:19:26:3e:14:c3: df:68:8e:94:13:85:a5:d2:bd:b6:7d:0f:7b:6b:a2: 13:94:84:5a:0e:4c:56:e6:87:23:2c:99:5c:0f:93: c1:ed:f2:90:a6:f9:78:c1:58:49:85:f2:d7:aa:03: d9:47:57:c7:92:6d:1b:ec:1c:f8:f4:d6:92:7e:52: 8b:b9:b1:80:79:76:d1:bb:7b:9f:0a:3b:94:73:3a: a0:03:7c:95:85:6d:ce:de:d3:83:e7:5b:00:ec:2e: 2f:d3:12:4f:8e:0a:59:18:60:ff:2b:c9:83:8b:f5: 55:98:15:b2:c8:3a:39:09:d0:29:3d:11:a4:88:19: 43:f7:d6:71:6e:61:fb:3d:55:1e:76:07:4b:ce:26: 1a:03:87:ee:40:37:b6:1f:6b:8e:8a:32:a6:db:c4: 39:0e:58:12:29:ea:8f:34:0a:0d:4a:19:9f:1b:d7: 1b:6c:6c:94:ff:35:18:b1:71:30:1a:be:1d:ea:94: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F5:A7:EA:48:4B:5B:CE:27:76:91:F8:73:78:1D:1A:BC:F1:F4:DA X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:aa:86:ec:bc:f3:43:9a:83:38:85:b9:65:e5:fb:df:e8: 5d:5c:bf:ae:86:94:0d:7b:2b:74:2a:aa:9f:92:0f:b6:f9:24: 04:12:ff:eb:d6:eb:3f:4a:ca:49:47:70:33:53:c7:c9:c6:81: 12:b2:2e:c8:aa:c1:e6:73:d5:cc:2e:f2:cf:c4:b3:6e:b8:b5: 0a:79:e4:6a:4c:e4:b6:72:5e:f0:34:91:01:31:03:3f:b8:ca: 61:81:2e:ed:18:a9:e8:20:02:c4:66:58:ec:b7:44:a3:78:f5: 04:17:cb:ed:81:cd:aa:e5:9b:f9:8d:e8:49:5e:09:81:49:93: f2:22:1d:d9:43:1e:ff:b5:91:40:c6:56:08:24:2a:63:55:8d: cd:d6:54:86:dc:69:21:3a:01:e6:5b:2b:30:8e:92:28:5f:69: 96:f3:4b:a0:65:b5:97:29:ce:05:e2:8c:54:a4:be:76:c6:f8: 5b:5e:e2:ba:cc:66:09:c4:cf:c5:59:70:84:af:74:85:37:14: 68:3b:82:a4:51:9e:28:a6:3e:2a:67:cb:7e:7a:3a:03:29:6f: 83:b1:01:3e:6e:03:13:5c:a3:8f:8b:98:8a:ec:a7:ad:45:71: eb:17:82:d2:e6:3e:cc:96:aa:8e:af:7e:a3:58:86:ba:67:ac: 5d:66:18:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUwOTA5MDE1MzE4WhcNMjUwOTE2MDE1MzE4WjAYMRYwFAYD VQQDEw02OGJmODg4ZS1hMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93Oo5mOqgBHdvpXpbnAwrCRUfsXZnWOLjWNjBmhQuGk95IwMhCD5Rv94CEy4 G597IIG6Es9y2gU75tPPr7qPbA0h/fNMGSY+FMPfaI6UE4Wl0r22fQ97a6ITlIRa DkxW5ocjLJlcD5PB7fKQpvl4wVhJhfLXqgPZR1fHkm0b7Bz49NaSflKLubGAeXbR u3ufCjuUczqgA3yVhW3O3tOD51sA7C4v0xJPjgpZGGD/K8mDi/VVmBWyyDo5CdAp PRGkiBlD99ZxbmH7PVUedgdLziYaA4fuQDe2H2uOijKm28Q5DlgSKeqPNAoNShmf G9cbbGyU/zUYsXEwGr4d6pSZfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT1p+pI S1vOJ3aR+HN4HRq88fTaMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBya6qG7LzzQ5qDOIW5ZeX73+hdXL+uhpQNeyt0Kqqfkg+2+SQEEv/r 1us/SspJR3AzU8fJxoESsi7IqsHmc9XMLvLPxLNuuLUKeeRqTOS2cl7wNJEBMQM/ uMphgS7tGKnoIALEZljst0SjePUEF8vtgc2q5Zv5jehJXgmBSZPyIh3ZQx7/tZFA xlYIJCpjVY3N1lSG3GkhOgHmWyswjpIoX2mW80ugZbWXKc4F4oxUpL52xvhbXuK6 zGYJxM/FWXCEr3SFNxRoO4KkUZ4opj4qZ8t+ejoDKW+DsQE+bgMTXKOPi5iK7Ket RXHrF4LS5j7MlqqOr36jWIa6Z6xdZhjW -----END CERTIFICATE-----Generated at Wed Sep 10 07:10:07 2025 by rpki-client