$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json) Hash identifier: asPi6xGsGGf3KHUqS6VtZ8vOhquNY+P4eITd9gvsNeU= Subject key identifier: B9:7B:42:56:BA:F8:F1:5E:8B:D9:B6:3C:1D:93:87:7E:BB:C0:C6:CE Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft Manifest number: 35 Signing time: Fri 05 Sep 2025 08:06:45 +0000 Manifest this update: Fri 05 Sep 2025 08:06:44 +0000 Manifest next update: Fri 12 Sep 2025 08:06:44 +0000 Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: W1MlteEpzkbsShEQKC9aVGUq1bBEm64j5aT0Q2n6xbc=) 2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: jPnHx/VwrEHzMcIk6hG/2vteGtB6XZZVA832ptEHOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Validity Not Before: Sep 5 08:06:44 2025 GMT Not After : Sep 12 08:06:44 2025 GMT Subject: CN=68ba9a14-4992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:db:e1:d2:a5:ba:4b:57:ba:6b:e0:4d:70: ff:01:be:f5:6c:7a:10:11:6f:cb:a5:23:1e:d6:5f: 09:4f:0b:50:ce:77:be:45:54:dc:be:9e:31:26:3f: c6:23:b1:fd:2e:4e:0c:a6:0c:c0:c8:64:6a:4e:0e: e7:95:df:6c:28:9c:09:b0:b5:36:ab:7a:b2:14:3d: d0:3b:53:9c:16:35:9f:b5:b5:9d:c3:8e:fa:70:9f: e7:b5:bf:1f:9d:8e:3d:79:f2:a8:c3:ec:b8:1b:60: 44:6a:d0:a1:7f:ac:f7:22:50:43:55:28:61:a1:7d: 25:24:ad:06:7d:9d:0f:65:da:28:ac:d1:8c:51:3c: 77:9c:c1:ea:f3:67:7c:21:6b:0f:49:ec:12:23:cb: 81:1b:8c:c7:05:78:ee:bc:ba:7f:6b:59:0f:20:e8: 10:18:a0:13:a1:e4:b5:75:17:9c:0b:25:89:a1:90: 09:a4:75:c2:bf:7a:6e:b5:aa:cf:8e:26:ac:2f:d9: 73:cd:7e:56:a5:1e:1f:4b:05:37:72:9e:04:57:99: b9:5a:c7:ff:4f:2c:16:a1:e6:97:9d:22:4c:e2:2c: ce:c5:94:a0:d0:74:d4:3e:53:98:15:b6:7c:17:0f: c8:f0:2d:d0:e8:be:a4:af:5c:e3:67:13:07:5e:6b: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:42:56:BA:F8:F1:5E:8B:D9:B6:3C:1D:93:87:7E:BB:C0:C6:CE X509v3 Authority Key Identifier: keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:5d:24:85:ca:57:f4:b9:da:2d:b2:a2:58:3b:ed:95:0c:05: 7d:eb:0b:a6:5a:89:e6:65:9d:c4:8b:a2:9d:7b:0f:63:fd:db: c3:d6:3f:85:b2:66:b3:39:9d:67:9d:e1:da:d4:3f:f7:d5:75: cb:af:1c:f6:09:93:f1:92:6f:9b:e4:24:40:19:68:80:92:f0: 35:78:dd:5f:92:18:40:28:1d:f0:92:69:b1:da:56:01:ed:f3: 02:09:46:b6:c3:ca:88:ca:40:f0:b7:62:73:4a:33:de:d0:20: 54:47:54:68:5c:c4:f1:70:7e:5a:44:16:60:c1:08:5e:93:74: 21:a7:89:fc:be:46:36:fc:76:be:09:49:0d:1e:0e:10:78:b3: 42:9f:f5:de:18:e1:e2:78:bc:fe:20:b8:76:98:2c:d1:62:2d: cf:be:f3:03:db:ef:7a:36:d6:33:23:fe:3e:de:a9:8a:b7:af: 95:08:17:7a:d8:a4:b5:64:6b:f1:7d:b9:8f:29:af:03:f5:08: 2f:c2:4f:eb:43:3f:50:31:80:10:f0:da:70:84:bf:5c:08:d6: a9:06:4f:ab:5d:c5:73:2d:e0:22:46:6e:a8:b6:a4:27:fe:92: 6f:0f:81:b0:eb:85:68:4e:ce:a6:54:7f:2f:dc:a9:18:3d:db: 32:b1:07:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTdGNDE5MjUxQTc5NjFERjI3NEQzOUI1MzRBMjJGM0VD REIzMTAyRjAeFw0yNTA5MDUwODA2NDRaFw0yNTA5MTIwODA2NDRaMBgxFjAUBgNV BAMTDTY4YmE5YTE0LTQ5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA99vh0qW6S1e6a+BNcP8BvvVsehARb8ulIx7WXwlPC1DOd75FVNy+njEmP8Yj sf0uTgymDMDIZGpODueV32wonAmwtTarerIUPdA7U5wWNZ+1tZ3Djvpwn+e1vx+d jj158qjD7LgbYERq0KF/rPciUENVKGGhfSUkrQZ9nQ9l2iis0YxRPHecwerzZ3wh aw9J7BIjy4EbjMcFeO68un9rWQ8g6BAYoBOh5LV1F5wLJYmhkAmkdcK/em61qs+O Jqwv2XPNflalHh9LBTdyngRXmblax/9PLBah5pedIkziLM7FlKDQdNQ+U5gVtnwX D8jwLdDovqSvXONnEwdea5/VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuXtCVrr4 8V6L2bY8HZOHfrvAxs4wHwYDVR0jBBgwFoAU5/QZJRp5Yd8nTTm1NKIvPs2zEC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzRGNDBCRTZDM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNV9RWkpScDVZZDhuVFRtMU5LSXZQczJ6RUM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzRGNDBCRTZDM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4 blRUbTFOS0l2UHMyekVDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMpdJIXKV/S52i2yolg77ZUMBX3rC6ZaieZlncSLop17D2P928PWP4Wy ZrM5nWed4drUP/fVdcuvHPYJk/GSb5vkJEAZaICS8DV43V+SGEAoHfCSabHaVgHt 8wIJRrbDyojKQPC3YnNKM97QIFRHVGhcxPFwflpEFmDBCF6TdCGnify+Rjb8dr4J SQ0eDhB4s0Kf9d4Y4eJ4vP4guHaYLNFiLc++8wPb73o21jMj/j7eqYq3r5UIF3rY pLVka/F9uY8prwP1CC/CT+tDP1AxgBDw2nCEv1wI1qkGT6tdxXMt4CJGbqi2pCf+ km8PgbDrhWhOzqZUfy/cqRg92zKxB2Y= -----END CERTIFICATE-----Generated at Sat Sep 6 15:22:47 2025 by rpki-client