$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: DJ1SfSXq7Lrwbs/halZKNT/M+LcdSECEHhr2NN1v+Bg= Subject key identifier: F5:6F:D3:48:AA:2D:33:B1:1B:15:79:39:EE:12:B1:28:3B:17:1B:A9 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: F4 Signing time: Tue 09 Sep 2025 05:21:17 +0000 Manifest this update: Tue 09 Sep 2025 05:21:17 +0000 Manifest next update: Tue 16 Sep 2025 05:21:17 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: 1tzHjXdxvej5zmLw7hJ7QPGF8J+dPoAY+Xjk7n+uxek=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Sep 9 05:21:17 2025 GMT Not After : Sep 16 05:21:17 2025 GMT Subject: CN=68bfb94d-d0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:a8:88:10:fd:b4:b7:25:a9:ba:9e:a5:77: 91:34:d7:64:6a:c1:fd:c9:60:c7:41:de:bc:7c:53: 88:d0:14:75:d8:52:7f:6d:20:90:52:1d:c2:6f:09: 49:b4:eb:07:02:ba:4a:23:24:ef:3a:f6:63:4b:74: e0:1c:a8:1d:2a:5d:22:4f:ea:bf:af:5b:26:1c:f7: 12:e7:d2:5d:31:18:92:c7:22:5d:d6:d8:77:c0:49: cf:1a:3c:54:f6:b3:fd:05:00:0a:aa:1c:66:13:37: b8:36:63:b2:e6:66:20:71:84:5b:99:04:2f:5c:32: a3:14:bc:4c:20:86:df:9a:c9:76:69:52:40:f5:0d: 1c:82:67:c3:3d:27:3e:7e:b2:da:90:5d:96:3b:7a: 96:c9:9f:ef:5b:d8:db:c5:dd:4f:d7:e7:5e:7a:a5: 65:db:6b:62:3c:4e:d7:80:e6:66:ec:e7:70:27:24: 16:f6:33:cf:f8:aa:c8:d0:38:be:d5:a6:f4:91:51: e5:8c:09:98:8f:05:85:42:7a:41:29:ed:02:c1:62: 1b:0f:76:10:e9:8e:15:01:6c:66:20:f5:43:8a:35: 7e:a9:5a:96:74:a0:a7:bb:fb:d5:e8:be:9b:eb:00: e0:07:ba:9f:53:34:a1:a0:41:dd:89:50:4e:60:d1: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6F:D3:48:AA:2D:33:B1:1B:15:79:39:EE:12:B1:28:3B:17:1B:A9 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:9d:8a:3e:d4:1f:6d:88:4f:59:b5:46:f4:de:b7:97:d6: d1:a2:22:9b:f1:85:43:08:89:e8:59:82:b3:1d:fb:54:de:c4: 86:5f:54:f6:b9:75:eb:02:27:4b:dc:81:c6:48:83:10:67:ed: bd:d7:ce:a8:20:b8:25:fe:d0:89:95:6c:a2:fa:ae:e1:02:88: 47:0a:30:a9:82:fe:44:f3:a8:ba:09:aa:bb:d5:68:f0:5b:1f: dd:55:44:0c:7a:c2:87:6a:d1:ef:ac:b0:77:b8:8b:fd:70:33: bb:8e:9e:67:da:cc:cf:ed:3c:e9:7f:3f:44:15:5e:62:f5:c0: 5a:14:ac:3f:ef:06:54:a2:ee:aa:58:0f:e5:ad:9a:e2:ff:66: ac:6c:14:85:3d:d8:08:e6:fe:a9:2b:f8:87:5c:b5:e0:3c:00: 00:68:53:7b:08:df:ed:54:ca:28:8b:ad:31:23:24:22:92:e0: 07:50:8d:2f:82:00:c7:de:d5:92:d3:8f:69:ef:5d:3e:52:93: 95:77:82:f0:1b:f6:c0:e8:a7:64:b8:82:b7:c6:38:9e:3f:21: b0:1f:0f:6e:1c:0c:e7:ee:3b:a1:21:68:fa:16:f6:54:73:32: 44:92:36:1e:df:47:a6:84:04:3e:6d:77:b3:8e:69:df:68:48: 37:25:18:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwOTA5MDUyMTE3WhcNMjUwOTE2MDUyMTE3WjAYMRYwFAYD VQQDEw02OGJmYjk0ZC1kMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPeoiBD9tLclqbqepXeRNNdkasH9yWDHQd68fFOI0BR12FJ/bSCQUh3CbwlJ tOsHArpKIyTvOvZjS3TgHKgdKl0iT+q/r1smHPcS59JdMRiSxyJd1th3wEnPGjxU 9rP9BQAKqhxmEze4NmOy5mYgcYRbmQQvXDKjFLxMIIbfmsl2aVJA9Q0cgmfDPSc+ frLakF2WO3qWyZ/vW9jbxd1P1+deeqVl22tiPE7XgOZm7OdwJyQW9jPP+KrI0Di+ 1ab0kVHljAmYjwWFQnpBKe0CwWIbD3YQ6Y4VAWxmIPVDijV+qVqWdKCnu/vV6L6b 6wDgB7qfUzShoEHdiVBOYNFvKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVv00iq LTOxGxV5Oe4SsSg7FxupMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhJ2KPtQfbYhPWbVG9N63l9bRoiKb8YVDCInoWYKzHftU3sSGX1T2 uXXrAidL3IHGSIMQZ+29186oILgl/tCJlWyi+q7hAohHCjCpgv5E86i6Caq71Wjw Wx/dVUQMesKHatHvrLB3uIv9cDO7jp5n2szP7Tzpfz9EFV5i9cBaFKw/7wZUou6q WA/lrZri/2asbBSFPdgI5v6pK/iHXLXgPAAAaFN7CN/tVMooi60xIyQikuAHUI0v ggDH3tWS049p710+UpOVd4LwG/bA6KdkuIK3xjiePyGwHw9uHAzn7juhIWj6FvZU czJEkjYe30emhAQ+bXezjmnfaEg3JRhT -----END CERTIFICATE-----Generated at Tue Sep 9 14:29:06 2025 by rpki-client