$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: UOVH0JUlzwg3J6zE9UU9AkxPcub1OSim0QorL18Y3Yc= Subject key identifier: 5C:31:D1:3A:75:1F:25:03:6E:B0:89:7A:89:38:9B:C9:C0:88:74:CF Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C7D Signing time: Wed 10 Sep 2025 18:29:00 +0000 Manifest this update: Wed 10 Sep 2025 18:28:59 +0000 Manifest next update: Wed 17 Sep 2025 18:28:59 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: uyg61dyxXTjKugHrRbr1BsSUsz75EViYCJ1tx0MExSs=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Sep 10 18:28:59 2025 GMT Not After : Sep 17 18:28:59 2025 GMT Subject: CN=68c1c36c-dc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:bb:e6:b0:06:d7:31:c6:a1:b2:bc:2e:da: 11:2c:30:20:51:66:d0:9d:4b:56:a0:03:ad:59:ae: 62:f8:d9:5f:e8:39:46:a2:67:aa:53:74:a0:eb:82: 28:54:aa:68:27:7a:6f:b9:7f:3e:45:7f:9a:1f:be: 5e:a4:49:dd:a8:8c:73:c2:06:cf:04:ab:0a:8b:ec: a1:b8:4a:86:97:87:a3:a0:1d:1b:cd:44:77:5f:c4: c8:42:8d:87:ce:14:d9:cf:45:78:75:f6:d1:66:d8: 15:aa:46:63:d9:96:27:5f:85:48:54:16:9a:68:63: 55:f2:01:b2:4e:91:68:a6:02:d1:23:ff:27:79:79: 22:d2:36:17:3d:7f:9a:29:90:c6:1e:e6:ac:6c:a8: 45:54:c5:92:8e:85:8f:a2:4c:5d:5d:2b:43:80:0f: 63:bb:07:22:a1:29:8a:40:6e:56:87:92:b3:4a:f5: e0:66:43:d6:85:c5:eb:bd:4b:9a:18:a0:79:fe:a9: a5:6b:bb:fc:8d:ac:f8:60:db:cb:c6:2d:68:8e:f1: c5:dc:1f:5e:59:69:24:9a:35:29:70:1b:c3:fc:97: 09:b0:a1:4c:75:fd:53:bb:41:69:84:07:1c:e5:f0: 52:86:a5:76:74:93:39:6d:eb:ae:b7:b1:db:85:d2: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:D1:3A:75:1F:25:03:6E:B0:89:7A:89:38:9B:C9:C0:88:74:CF X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:44:62:34:78:31:05:6f:86:6a:5a:ea:ec:8b:45:fa:3e:91: 6c:82:3a:a4:80:74:88:00:97:dc:ce:b2:56:6c:7f:60:30:95: 44:5e:9e:b1:9e:fb:82:2e:fd:f5:2b:04:a2:16:54:3e:05:7b: 8d:9f:2e:4f:05:63:e3:b4:29:ff:99:f9:2b:3e:12:61:02:2e: 9f:94:4d:ed:eb:f8:c3:43:61:b9:0e:9b:f1:89:29:60:6e:80: 17:73:12:4c:8f:fe:b5:9d:be:81:b2:de:4a:04:75:95:6e:87: 49:32:b6:97:1f:d0:43:e1:df:6f:4f:4a:57:80:26:0c:58:01: 6d:9d:e9:69:cd:ba:77:d4:86:e9:fe:b3:7e:60:3f:7f:8f:15: a4:ec:04:b0:93:2c:cf:37:72:35:52:b4:94:e3:4d:72:52:14: 72:c5:03:e2:0e:a6:14:95:f2:55:b3:67:84:71:27:72:21:77: 73:23:ec:fb:c4:3d:24:24:f2:62:3c:e9:c3:13:c4:51:04:c6: 94:35:cd:5a:e2:11:7c:f7:7a:dd:e4:69:0e:8c:70:50:90:40: 96:86:8f:72:47:01:fb:f9:4a:e3:15:fa:af:d1:97:ec:8c:f1: da:45:65:8a:4a:8b:cf:f6:a5:99:b3:f3:eb:9a:0d:03:38:2e: ea:42:05:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUwOTEwMTgyODU5WhcNMjUwOTE3MTgyODU5WjAYMRYwFAYD VQQDEw02OGMxYzM2Yy1kYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVO75rAG1zHGobK8LtoRLDAgUWbQnUtWoAOtWa5i+Nlf6DlGomeqU3Sg64Io VKpoJ3pvuX8+RX+aH75epEndqIxzwgbPBKsKi+yhuEqGl4ejoB0bzUR3X8TIQo2H zhTZz0V4dfbRZtgVqkZj2ZYnX4VIVBaaaGNV8gGyTpFopgLRI/8neXki0jYXPX+a KZDGHuasbKhFVMWSjoWPokxdXStDgA9juwcioSmKQG5Wh5KzSvXgZkPWhcXrvUua GKB5/qmla7v8jaz4YNvLxi1ojvHF3B9eWWkkmjUpcBvD/JcJsKFMdf1Tu0FphAcc 5fBShqV2dJM5beuut7HbhdIFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwx0Tp1 HyUDbrCJeok4m8nAiHTPMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkRGI0eDEFb4ZqWursi0X6PpFsgjqkgHSIAJfczrJWbH9gMJVEXp6x nvuCLv31KwSiFlQ+BXuNny5PBWPjtCn/mfkrPhJhAi6flE3t6/jDQ2G5DpvxiSlg boAXcxJMj/61nb6Bst5KBHWVbodJMraXH9BD4d9vT0pXgCYMWAFtnelpzbp31Ibp /rN+YD9/jxWk7ASwkyzPN3I1UrSU401yUhRyxQPiDqYUlfJVs2eEcSdyIXdzI+z7 xD0kJPJiPOnDE8RRBMaUNc1a4hF893rd5GkOjHBQkECWho9yRwH7+UrjFfqv0Zfs jPHaRWWKSovP9qWZs/Prmg0DOC7qQgWf -----END CERTIFICATE-----Generated at Thu Sep 11 02:37:55 2025 by rpki-client