$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json) Hash identifier: tAyynMAXfcAOpiKp03T2QuzALSGz64Lj1BZuSGN26G4= Subject key identifier: 0F:7E:1A:74:5E:3A:81:47:9C:C9:34:25:74:81:C0:E1:32:04:C4:86 Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft Manifest number: CC Signing time: Wed 17 Sep 2025 06:30:07 +0000 Manifest this update: Wed 17 Sep 2025 06:30:06 +0000 Manifest next update: Wed 24 Sep 2025 06:30:06 +0000 Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: jj+rRIttteKiElMEoBCZxVsJ+tK2wOPLwvcKLNEY1uQ=) 2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Sep 17 06:30:06 2025 GMT Not After : Sep 24 06:30:06 2025 GMT Subject: CN=68ca556e-4ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:4d:35:2e:43:7c:68:f0:db:af:8c:ef:57: 99:68:8b:d0:f5:51:be:eb:44:cd:01:6e:0a:6e:42: 9e:5a:00:6f:e6:e1:89:a1:60:34:a4:fe:31:73:be: 81:d6:bd:5c:14:66:ee:7f:9f:dd:99:f2:e6:e2:cd: f3:94:d3:bb:f2:eb:8a:7f:c6:32:3a:d8:1e:4b:98: f5:06:d8:e2:48:e2:6e:d3:4b:b2:be:ba:3e:13:44: 4f:ba:ce:ce:10:8c:91:04:83:c8:89:0f:32:76:19: 95:49:d3:30:86:22:3d:19:f8:33:50:70:b7:10:e9: ee:0b:26:78:90:d1:33:cd:f2:43:bf:ed:6f:e8:6d: 02:eb:d7:c5:8e:60:ff:cd:97:9b:b7:cd:95:3a:b9: 9d:54:0e:49:15:66:30:50:bd:53:1d:32:fe:3f:b1: e4:4a:8a:f8:f8:a5:b0:21:90:a6:0b:10:a7:08:a4: 48:e6:5a:ae:6b:22:cb:75:fd:77:5b:54:2b:4f:e0: e7:2b:5b:59:8e:97:39:11:eb:3e:c4:3e:b1:ea:24: 1f:4f:36:9c:89:32:ff:5c:57:63:49:2a:d2:c6:2e: 51:e9:57:f9:9c:64:89:22:c5:ea:09:70:0c:e2:8c: a8:78:bb:8a:af:2d:84:1b:33:93:1c:bd:96:9d:18: f7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:1A:74:5E:3A:81:47:9C:C9:34:25:74:81:C0:E1:32:04:C4:86 X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:02:30:7f:16:59:e6:ef:10:5c:d3:6a:9d:68:8a:07:b7:b2: 24:38:32:ac:6f:4c:75:29:21:df:3d:8c:50:4d:69:c0:b0:e0: 45:e2:19:3d:1d:19:bd:eb:e7:0c:81:dc:0c:cc:61:8f:b8:76: f4:67:9c:c1:e1:c1:7c:06:a7:dc:58:42:4b:1c:94:66:e9:5f: 68:92:31:3b:e0:31:fa:f5:5d:0f:fc:f2:80:ac:39:03:51:60: 17:f3:4d:de:45:4c:ce:8b:c6:0c:f6:d0:61:07:3c:0f:ca:49: 6c:7f:bf:d3:a1:f7:99:b4:4f:e1:0a:46:0c:69:ad:e2:9b:0b: f1:db:85:f2:35:ee:64:ab:6f:fd:4c:d5:bf:34:ef:56:3c:7f: 12:49:a1:aa:f1:02:b1:06:8d:05:9c:78:7b:2c:18:e5:47:a4: a8:74:4d:f0:f1:f8:bc:f3:64:90:df:3d:e7:10:c4:94:ab:46: 58:f7:e9:c9:0a:a2:b5:9d:01:c4:20:ca:8f:20:93:cf:0d:d9: df:f3:d1:92:cb:e6:63:76:8f:df:be:d9:79:72:78:07:47:94: e8:d7:da:f9:6a:90:6a:70:4f:aa:33:8e:b4:0b:6e:1a:b3:77: 10:ed:a9:f5:3a:62:7c:75:f6:dd:4b:35:5d:fd:50:48:ad:7a: 88:7d:62:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5 NDI5NTY0QzAwHhcNMjUwOTE3MDYzMDA2WhcNMjUwOTI0MDYzMDA2WjAYMRYwFAYD VQQDEw02OGNhNTU2ZS00ZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oNNNS5DfGjw26+M71eZaIvQ9VG+60TNAW4KbkKeWgBv5uGJoWA0pP4xc76B 1r1cFGbuf5/dmfLm4s3zlNO78uuKf8YyOtgeS5j1BtjiSOJu00uyvro+E0RPus7O EIyRBIPIiQ8ydhmVSdMwhiI9GfgzUHC3EOnuCyZ4kNEzzfJDv+1v6G0C69fFjmD/ zZebt82VOrmdVA5JFWYwUL1THTL+P7HkSor4+KWwIZCmCxCnCKRI5lquayLLdf13 W1QrT+DnK1tZjpc5Ees+xD6x6iQfTzaciTL/XFdjSSrSxi5R6Vf5nGSJIsXqCXAM 4oyoeLuKry2EGzOTHL2WnRj3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9+GnRe OoFHnMk0JXSBwOEyBMSGMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXAjB/Flnm7xBc02qdaIoHt7IkODKsb0x1KSHfPYxQTWnAsOBF4hk9 HRm96+cMgdwMzGGPuHb0Z5zB4cF8BqfcWEJLHJRm6V9okjE74DH69V0P/PKArDkD UWAX803eRUzOi8YM9tBhBzwPyklsf7/TofeZtE/hCkYMaa3imwvx24XyNe5kq2/9 TNW/NO9WPH8SSaGq8QKxBo0FnHh7LBjlR6SodE3w8fi882SQ3z3nEMSUq0ZY9+nJ CqK1nQHEIMqPIJPPDdnf89GSy+Zjdo/fvtl5cngHR5To19r5apBqcE+qM460C24a s3cQ7an1OmJ8dfbdSzVd/VBIrXqIfWIg -----END CERTIFICATE-----Generated at Fri Sep 19 00:58:07 2025 by rpki-client