$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: s0+X35zIgLu/l7t80KRJrVdpxRNS9ZZM9jFwjsmANPg= Subject key identifier: 09:1E:9F:90:6E:F5:FF:35:67:2C:18:68:04:33:01:47:9D:B7:45:AE Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 045F Signing time: Tue 09 Sep 2025 00:18:51 +0000 Manifest this update: Tue 09 Sep 2025 00:18:51 +0000 Manifest next update: Tue 16 Sep 2025 00:18:51 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: nthowWEzcPkyrdfxpqOf3M3b0Ow04dbM9nXLG/jXdxs=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Sep 9 00:18:51 2025 GMT Not After : Sep 16 00:18:51 2025 GMT Subject: CN=68bf726b-6307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:57:e2:33:e4:99:e3:0f:98:ea:d5:8d:c3: c3:95:7d:f5:54:fb:be:f9:d5:53:fd:8b:73:d3:76: 11:56:d5:2d:6b:c3:da:5f:b3:de:d8:d3:1d:01:39: ca:e2:e5:f1:71:89:d7:52:dd:86:fe:2f:e6:01:6c: c5:27:6f:07:f5:b2:98:b5:d1:66:9c:9b:91:cb:66: d9:20:d6:b7:47:a3:df:ea:61:8c:88:17:83:13:79: 38:03:a5:07:56:d5:58:56:73:d5:0a:bc:ec:02:c1: 24:b9:22:e1:96:f7:3d:8b:c5:f2:6d:55:ba:96:d2: 14:ea:ff:e1:ea:42:e4:4f:31:85:f7:55:1b:2c:10: 12:09:84:d1:7d:25:c5:ec:73:b0:84:00:8b:b3:93: a3:a1:61:8a:80:16:92:ec:6d:e5:ac:25:7f:b3:75: b6:83:23:88:89:8c:ff:54:95:1b:96:dc:3b:f2:0c: f6:7a:f4:33:9c:3a:1f:64:78:d0:e2:11:a3:5b:72: 3e:4f:e3:f1:1c:47:dd:71:da:2f:5d:17:39:1e:60: c7:59:90:c2:bf:7e:95:63:d8:45:4f:3b:85:8a:a8: 51:7f:0e:32:99:38:61:49:d1:f2:e5:68:bd:2d:a4: 58:05:84:56:64:fe:6c:95:b9:81:24:d8:35:13:2a: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1E:9F:90:6E:F5:FF:35:67:2C:18:68:04:33:01:47:9D:B7:45:AE X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:23:70:5a:c4:bc:d9:f8:16:00:e6:41:d7:d7:59:4d:e8: 94:e4:51:07:cf:c3:dc:fd:e7:90:05:29:50:50:46:ef:10:21: 43:cd:d2:0c:cb:98:01:e2:ea:47:42:7c:1a:fd:e0:12:33:35: 50:0e:f6:4e:86:03:9e:39:ae:6f:ca:43:7b:7a:9b:65:33:83: 2d:c6:40:29:1e:2e:b5:69:26:78:f8:2c:8f:ae:e9:fd:a4:d3: fc:c3:3d:d3:b6:79:c8:45:7a:39:ed:bd:34:47:44:4c:c4:9c: 5b:35:6a:c6:52:3d:a4:50:a1:fe:8a:36:2d:cc:e3:9f:5e:bc: 65:09:84:cf:fc:5b:9a:1d:e1:61:a6:1a:77:b1:9b:ed:db:9c: a4:f3:0d:57:4e:01:68:6b:94:09:7d:8c:37:12:1e:0c:71:46: 98:32:8e:ec:53:f7:0b:f1:e1:03:0c:53:bd:ae:07:2b:c5:c2: 18:fa:d1:16:3b:5a:2d:8b:17:8f:d1:80:d6:42:23:68:aa:68: 34:0d:04:c6:fa:98:38:15:19:9d:02:d6:20:34:2c:0d:56:81: 14:15:0a:70:bc:c0:51:79:5e:c0:9b:6f:18:61:ea:04:0a:8e: 3b:02:b3:48:29:bd:9f:24:44:72:fb:93:98:75:b7:95:20:e0: ba:64:52:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwOTA5MDAxODUxWhcNMjUwOTE2MDAxODUxWjAYMRYwFAYD VQQDEw02OGJmNzI2Yi02MzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OVX4jPkmeMPmOrVjcPDlX31VPu++dVT/Ytz03YRVtUta8PaX7Pe2NMdATnK 4uXxcYnXUt2G/i/mAWzFJ28H9bKYtdFmnJuRy2bZINa3R6Pf6mGMiBeDE3k4A6UH VtVYVnPVCrzsAsEkuSLhlvc9i8XybVW6ltIU6v/h6kLkTzGF91UbLBASCYTRfSXF 7HOwhACLs5OjoWGKgBaS7G3lrCV/s3W2gyOIiYz/VJUbltw78gz2evQznDofZHjQ 4hGjW3I+T+PxHEfdcdovXRc5HmDHWZDCv36VY9hFTzuFiqhRfw4ymThhSdHy5Wi9 LaRYBYRWZP5slbmBJNg1Eyo4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAken5Bu 9f81ZywYaAQzAUedt0WuMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQIiNwWsS82fgWAOZB19dZTeiU5FEHz8Pc/eeQBSlQUEbvECFDzdIM y5gB4upHQnwa/eASMzVQDvZOhgOeOa5vykN7eptlM4MtxkApHi61aSZ4+CyPrun9 pNP8wz3TtnnIRXo57b00R0RMxJxbNWrGUj2kUKH+ijYtzOOfXrxlCYTP/FuaHeFh php3sZvt25yk8w1XTgFoa5QJfYw3Eh4McUaYMo7sU/cL8eEDDFO9rgcrxcIY+tEW O1otixeP0YDWQiNoqmg0DQTG+pg4FRmdAtYgNCwNVoEUFQpwvMBReV7Am28YYeoE Co47ArNIKb2fJERy+5OYdbeVIOC6ZFJi -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:33 2025 by rpki-client