$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json) Hash identifier: ynhmTx7iq7wukVjB/L+lITvLYcBNER8dbihOM+27gSg= Subject key identifier: FB:BB:D8:DF:34:45:37:5D:B2:69:EF:9B:96:E0:46:BD:E3:0D:8D:C1 Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft Manifest number: 0906 Signing time: Thu 18 Sep 2025 20:33:07 +0000 Manifest this update: Thu 18 Sep 2025 20:33:07 +0000 Manifest next update: Thu 25 Sep 2025 20:33:07 +0000 Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: m9A9/libAVUtwtxSaoefx4LKX37okZnT5a5P3ignBO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Validity Not Before: Sep 18 20:33:07 2025 GMT Not After : Sep 25 20:33:07 2025 GMT Subject: CN=68cc6c83-cfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:e2:0a:04:6b:4c:7f:aa:fa:8e:b5:a2:f0: 06:37:68:9c:49:f8:76:f6:e9:90:80:74:f3:17:0b: cb:36:89:f2:85:1a:17:57:8e:3e:ee:e0:e0:2d:19: ff:98:69:6a:1b:fd:bc:27:a5:bf:2d:14:68:65:42: 57:22:ec:e7:e1:d4:24:d9:8b:75:b3:cc:89:64:5f: 17:1c:2f:70:ad:0a:31:06:84:38:3c:ca:7e:d1:86: bf:c1:a0:64:42:6a:aa:8c:ba:fd:17:d6:6f:6f:5a: 4b:1f:66:df:0e:56:00:f0:78:76:07:82:0e:4c:d3: a3:51:d9:a2:d3:1f:1a:c5:cd:51:8f:22:64:1b:3d: de:85:b9:0d:83:e3:5c:37:d2:64:e8:24:4e:97:cc: 83:39:0a:c8:af:38:84:26:a5:f2:10:c5:d4:82:44: b4:d7:9a:8d:cf:f7:67:33:6a:40:23:43:3b:d0:01: 11:0c:49:04:a0:9c:2c:dd:3c:18:01:04:68:b1:f6: 38:e8:e8:1d:46:1c:0d:d8:6d:55:99:f5:c5:c6:92: bb:1d:93:5c:24:84:1b:00:ed:0d:ec:bd:9c:25:61: a5:d1:de:7a:bb:f2:96:2b:13:7f:ff:a3:8d:e0:a2: 81:bf:df:ed:d5:d9:3a:92:2c:9a:20:95:e8:08:00: 89:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BB:D8:DF:34:45:37:5D:B2:69:EF:9B:96:E0:46:BD:E3:0D:8D:C1 X509v3 Authority Key Identifier: keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e4:38:e2:ad:8f:0d:0f:ce:4b:f1:fb:43:ee:39:0b:de:dd: 35:52:0e:6c:9d:3d:be:cc:eb:65:6a:b1:a4:2a:7f:b3:d1:22: 95:8b:05:df:33:14:6c:e5:04:c1:8a:1e:fb:b8:f2:4e:ef:fe: 65:f5:fa:7e:21:56:50:e1:6b:c2:2c:92:33:f8:34:21:28:49: de:bf:3f:a8:db:c3:54:ac:95:6e:9b:8f:de:1f:f9:b9:21:7b: 3f:6f:45:cc:73:ec:b4:aa:ab:7b:d3:45:cd:92:05:d5:50:5a: 78:0d:49:0c:8a:48:95:d9:e9:30:cf:8f:c3:83:a6:cf:90:47: e7:97:f4:5d:a5:a9:5d:6c:44:1f:06:14:f8:c3:da:3b:84:6e: 07:76:a2:53:70:37:b2:15:59:c4:cf:b7:dc:a9:d9:25:7e:ae: 79:92:1c:0d:9b:3e:12:fb:85:b2:e2:74:cf:a0:9e:17:f9:7d: cc:51:e9:0d:1a:2e:02:83:e4:5d:98:bc:a3:b2:c3:2f:70:24: 98:e2:d4:84:00:64:eb:3f:13:01:67:53:19:51:f2:07:bc:38: d9:f1:08:48:05:ba:20:78:3a:99:5d:ac:e6:4c:6f:f6:c2:7a: c4:0b:f8:13:38:3e:2e:64:32:ca:5a:ba:b9:21:57:c7:4e:e4: 02:59:95:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND NjBEQURBNzcwHhcNMjUwOTE4MjAzMzA3WhcNMjUwOTI1MjAzMzA3WjAYMRYwFAYD VQQDEw02OGNjNmM4My1jZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV/iCgRrTH+q+o61ovAGN2icSfh29umQgHTzFwvLNonyhRoXV44+7uDgLRn/ mGlqG/28J6W/LRRoZUJXIuzn4dQk2Yt1s8yJZF8XHC9wrQoxBoQ4PMp+0Ya/waBk QmqqjLr9F9Zvb1pLH2bfDlYA8Hh2B4IOTNOjUdmi0x8axc1RjyJkGz3ehbkNg+Nc N9Jk6CROl8yDOQrIrziEJqXyEMXUgkS015qNz/dnM2pAI0M70AERDEkEoJws3TwY AQRosfY46OgdRhwN2G1VmfXFxpK7HZNcJIQbAO0N7L2cJWGl0d56u/KWKxN//6ON 4KKBv9/t1dk6kiyaIJXoCACJiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu72N80 RTddsmnvm5bgRr3jDY3BMB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3 czJDdWxXTGFXSlBHRGEybmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo5DjirY8ND85L8ftD7jkL3t01Ug5snT2+zOtlarGkKn+z0SKViwXf MxRs5QTBih77uPJO7/5l9fp+IVZQ4WvCLJIz+DQhKEnevz+o28NUrJVum4/eH/m5 IXs/b0XMc+y0qqt700XNkgXVUFp4DUkMikiV2ekwz4/Dg6bPkEfnl/RdpaldbEQf BhT4w9o7hG4HdqJTcDeyFVnEz7fcqdklfq55khwNmz4S+4Wy4nTPoJ4X+X3MUekN Gi4Cg+RdmLyjssMvcCSY4tSEAGTrPxMBZ1MZUfIHvDjZ8QhIBbogeDqZXazmTG/2 wnrEC/gTOD4uZDLKWrq5IVfHTuQCWZXw -----END CERTIFICATE-----Generated at Fri Sep 19 06:52:28 2025 by rpki-client