$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: FlRV7YSBg3d51yyH2N3TE1jAzwsqWrEdreQ0wrDURJ4= Subject key identifier: 02:C0:F2:30:7D:DE:AE:CB:97:8B:3B:10:89:57:F4:55:F3:3B:DF:38 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1A25 Signing time: Thu 18 Sep 2025 16:29:08 +0000 Manifest this update: Thu 18 Sep 2025 16:29:08 +0000 Manifest next update: Thu 25 Sep 2025 16:29:08 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: LoYtmd3Rh+9XsHY6Z2R0ta+5RH00tBZ27XFue1Nm4ig=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6700 (0x1a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Sep 18 16:29:08 2025 GMT Not After : Sep 25 16:29:08 2025 GMT Subject: CN=68cc3354-6991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:e2:06:25:b3:40:2d:ac:05:51:0d:56:fc: 39:4a:16:f7:4d:52:4d:f4:e6:46:44:39:56:63:92: 4d:5e:f1:8e:c7:28:a4:09:93:b5:59:0c:1a:6f:21: f2:12:8d:d3:c4:61:0c:f3:04:c5:aa:65:84:cc:df: 4c:cb:f1:85:39:53:84:48:50:6a:e7:3d:f7:2b:04: 6c:cc:dd:14:56:3f:f7:46:a3:02:a9:43:8d:b0:18: 26:55:b2:06:2f:8f:de:a0:a8:bd:22:b6:d4:7b:a3: 0d:b5:36:39:9a:b1:1c:9b:1a:c5:5b:f3:4e:c0:36: 2a:96:4a:00:ed:f0:cc:0c:17:f3:11:54:a9:50:31: b0:61:97:4e:70:57:c4:96:8e:96:73:09:a0:4b:bb: 13:1b:9c:bc:9e:cc:1d:4f:33:b5:d4:83:05:79:7d: e6:1a:5f:bd:e7:14:c5:a7:20:81:8e:2f:03:9d:1d: 8b:e8:56:d0:f1:51:6c:b7:35:52:7c:04:ae:c9:56: fc:f1:9d:7b:76:a5:b4:cb:c5:62:7c:cd:78:79:19: 37:f2:82:a8:21:c5:74:24:86:06:9e:b9:45:45:65: 4b:75:d3:77:d5:79:f8:9a:8c:27:d0:b1:73:d8:70: 3b:4b:73:11:00:72:c9:07:ed:cf:30:b1:67:67:bb: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:F2:30:7D:DE:AE:CB:97:8B:3B:10:89:57:F4:55:F3:3B:DF:38 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e9:11:cb:c0:99:a3:8b:30:4b:89:02:73:6c:9f:1f:7d:d1: 76:b6:b1:09:77:b8:80:f7:dd:64:b0:5c:a6:99:71:c8:60:ca: 6f:88:9a:53:35:cd:f8:d2:50:a2:5f:d7:09:fa:b1:56:a2:d6: 1c:ae:e0:5c:4a:3e:12:29:17:b8:0b:43:96:1b:60:0e:c2:83: 52:74:20:4c:1b:74:c2:09:17:c7:23:c9:f3:a8:03:a7:10:53: 5f:ae:e0:eb:a1:92:bb:23:3a:68:e2:c3:bf:93:f5:31:fb:13: 3a:dd:f4:1c:72:90:5c:f6:9b:83:c1:29:0e:f1:01:78:0b:6c: fe:ff:75:04:1d:d3:20:21:38:1c:ae:a7:23:81:13:3c:73:a4: 24:48:db:2d:8b:d4:e1:9e:41:2a:e9:cf:85:df:d8:77:84:64: 8c:a3:96:87:c7:ab:c8:ea:43:7a:9e:41:55:22:d2:8b:21:f1: ca:aa:a5:b0:2c:4f:bb:e0:02:e2:d8:ed:4a:65:aa:bb:cf:73: a0:a0:3c:ff:f5:4d:cf:46:bf:0c:a5:56:ac:7d:88:7c:ab:2e: ea:a7:49:7a:9c:bf:7b:67:ed:67:dd:a1:b4:96:1e:14:08:be: 62:aa:57:46:0b:56:35:dc:47:72:bf:c3:d1:9a:e9:a8:18:de: 59:c7:51:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwOTE4MTYyOTA4WhcNMjUwOTI1MTYyOTA4WjAYMRYwFAYD VQQDEw02OGNjMzM1NC02OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JbiBiWzQC2sBVENVvw5Shb3TVJN9OZGRDlWY5JNXvGOxyikCZO1WQwabyHy Eo3TxGEM8wTFqmWEzN9My/GFOVOESFBq5z33KwRszN0UVj/3RqMCqUONsBgmVbIG L4/eoKi9IrbUe6MNtTY5mrEcmxrFW/NOwDYqlkoA7fDMDBfzEVSpUDGwYZdOcFfE lo6WcwmgS7sTG5y8nswdTzO11IMFeX3mGl+95xTFpyCBji8DnR2L6FbQ8VFstzVS fASuyVb88Z17dqW0y8VifM14eRk38oKoIcV0JIYGnrlFRWVLddN31Xn4mown0LFz 2HA7S3MRAHLJB+3PMLFnZ7uP9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALA8jB9 3q7Ll4s7EIlX9FXzO984MB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp6RHLwJmjizBLiQJzbJ8ffdF2trEJd7iA991ksFymmXHIYMpviJpT Nc340lCiX9cJ+rFWotYcruBcSj4SKRe4C0OWG2AOwoNSdCBMG3TCCRfHI8nzqAOn EFNfruDroZK7Izpo4sO/k/Ux+xM63fQccpBc9puDwSkO8QF4C2z+/3UEHdMgITgc rqcjgRM8c6QkSNsti9ThnkEq6c+F39h3hGSMo5aHx6vI6kN6nkFVItKLIfHKqqWw LE+74ALi2O1KZaq7z3OgoDz/9U3PRr8MpVasfYh8qy7qp0l6nL97Z+1n3aG0lh4U CL5iqldGC1Y13Edyv8PRmumoGN5Zx1HA -----END CERTIFICATE-----Generated at Thu Sep 18 22:14:23 2025 by rpki-client