$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json) Hash identifier: 5v/gjR1ZnLe/ARO2sDk6AZjwJO5Cs+w3HAwkyzd2TyM= Subject key identifier: D1:22:4A:FC:1E:41:C4:58:B6:FB:83:4B:E6:B0:30:53:78:0F:F5:58 Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft Manifest number: 0629 Signing time: Thu 18 Sep 2025 23:03:12 +0000 Manifest this update: Thu 18 Sep 2025 23:03:11 +0000 Manifest next update: Thu 25 Sep 2025 23:03:11 +0000 Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: jknDO7o9eP1STTtWc14CoV4HghJI3YVmKmGo5oD/FVE=) 2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: gGaPSZTXBZeyhBvTnRDrA4x3lhLiqzg2ne+ktqQeFQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Validity Not Before: Sep 18 23:03:11 2025 GMT Not After : Sep 25 23:03:11 2025 GMT Subject: CN=68cc8fb0-1b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:bc:34:7e:cf:d9:80:06:28:22:3e:1a:41: b7:1b:0c:6d:ce:a6:f6:0f:bf:26:b6:b2:a6:b7:df: 3f:dd:a1:a3:98:12:a1:37:ac:db:4f:bc:99:66:43: c4:2b:14:29:40:4a:c6:98:d3:55:56:e9:a6:4f:f8: 32:98:f3:c3:14:31:fb:b8:af:71:af:d4:a2:41:52: 35:4e:e2:a4:94:8a:64:61:00:0e:25:51:b9:f1:2d: 58:96:cc:d6:22:49:58:a4:e9:d7:71:fb:67:e2:99: d9:79:b3:77:06:56:8b:93:bc:09:35:cc:18:ae:2f: 8a:c0:9c:9f:03:8f:52:a0:52:b9:22:22:91:8c:dc: ff:9c:05:1d:e9:63:2c:cc:b1:94:c7:6c:aa:fb:43: 51:70:0e:4f:97:66:09:83:2e:ef:a2:5c:20:7c:9d: c5:73:74:43:c0:03:fc:3d:0d:fb:1d:bf:be:f8:07: 56:f8:fe:13:c4:e0:42:59:c3:00:a4:16:66:3a:cf: ae:6d:98:e9:65:c6:36:7e:a6:3f:51:7d:34:db:84: bb:52:ac:f3:38:ff:1f:d3:d4:a6:88:c9:f7:af:3d: 4d:02:f0:ea:83:74:34:8f:5d:25:65:72:e3:e3:6d: 3b:c6:18:29:a3:e8:dd:ff:b9:fe:d0:d4:50:4d:d8: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:4A:FC:1E:41:C4:58:B6:FB:83:4B:E6:B0:30:53:78:0F:F5:58 X509v3 Authority Key Identifier: keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cb:9e:31:60:e6:40:d4:0a:c5:e4:c9:cd:a7:7a:a5:45:b3: ce:47:71:6c:cc:dc:eb:2a:e8:c9:4c:62:c0:29:a3:75:93:68: 9c:0c:a3:91:fe:2b:b4:0a:48:5f:1b:57:bf:1d:46:2b:17:a9: eb:f2:5c:e4:21:b2:66:16:9d:af:d1:10:4f:5b:49:b4:4f:2c: da:29:84:6a:12:68:db:03:4f:ee:e9:fd:ab:99:43:ac:f4:50: 5a:08:87:95:2a:07:11:e2:61:55:ef:ca:b4:3c:45:c9:10:3c: 71:06:18:c4:7d:fe:c4:0f:47:c5:52:50:1f:15:07:6f:7f:88: ae:18:9e:7e:74:08:0d:b8:76:26:01:28:24:4a:9b:85:1a:6f: a1:45:df:0b:91:b3:74:ac:e0:41:e5:95:15:78:08:3b:8e:59: f2:ea:e8:e2:dc:32:9c:62:4d:11:07:05:74:bd:5a:e1:90:c6: 1f:e0:9d:27:cb:55:8b:53:d5:ff:48:06:ad:f0:03:aa:59:b0: c6:8a:94:63:de:54:62:11:5f:10:04:3e:a2:f3:24:89:0c:fc: f0:f2:5a:73:36:85:3d:5b:54:c0:3e:0a:1c:b0:42:f8:bf:b3: dd:7b:f1:f1:56:dd:f0:06:8d:22:9f:ee:3f:c0:d9:34:9a:8a: 88:ca:27:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCRTExMTAvBgNVBAUTKEFBMjFCNjkwQzFENjNDQkY0NDFBQTNCRDExN0VEOEI3 ODY4ODIyMjkwHhcNMjUwOTE4MjMwMzExWhcNMjUwOTI1MjMwMzExWjAYMRYwFAYD VQQDEw02OGNjOGZiMC0xYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQS8NH7P2YAGKCI+GkG3Gwxtzqb2D78mtrKmt98/3aGjmBKhN6zbT7yZZkPE KxQpQErGmNNVVummT/gymPPDFDH7uK9xr9SiQVI1TuKklIpkYQAOJVG58S1YlszW IklYpOnXcftn4pnZebN3BlaLk7wJNcwYri+KwJyfA49SoFK5IiKRjNz/nAUd6WMs zLGUx2yq+0NRcA5Pl2YJgy7volwgfJ3Fc3RDwAP8PQ37Hb+++AdW+P4TxOBCWcMA pBZmOs+ubZjpZcY2fqY/UX0024S7UqzzOP8f09SmiMn3rz1NAvDqg3Q0j10lZXLj 4207xhgpo+jd/7n+0NRQTdhQtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEiSvwe QcRYtvuDS+awMFN4D/VYMB8GA1UdIwQYMBaAFKohtpDB1jy/RBqjvRF+2LeGiCIp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJFMS9FNDZGRjQ5MEFF MkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BMOUVHcU85RVg3WXQ0YUlJ aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FpRzJrTUhXUEw5RUdxTzlFWDdZdDRhSUlpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJFMS9FNDZGRjQ5MEFFMkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BM OUVHcU85RVg3WXQ0YUlJaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBly54xYOZA1ArF5MnNp3qlRbPOR3FszNzrKujJTGLAKaN1k2icDKOR /iu0CkhfG1e/HUYrF6nr8lzkIbJmFp2v0RBPW0m0TyzaKYRqEmjbA0/u6f2rmUOs 9FBaCIeVKgcR4mFV78q0PEXJEDxxBhjEff7ED0fFUlAfFQdvf4iuGJ5+dAgNuHYm ASgkSpuFGm+hRd8LkbN0rOBB5ZUVeAg7jlny6uji3DKcYk0RBwV0vVrhkMYf4J0n y1WLU9X/SAat8AOqWbDGipRj3lRiEV8QBD6i8ySJDPzw8lpzNoU9W1TAPgocsEL4 v7Pde/HxVt3wBo0in+4/wNk0moqIyicK -----END CERTIFICATE-----Generated at Fri Sep 19 14:28:12 2025 by rpki-client