$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: 2S4/JxpklVYfvfqRJU4yLj0BmXQI26P929QRxIYQCgs= Subject key identifier: C1:4C:4B:16:FF:A3:DF:20:1F:CE:0A:0E:02:B1:08:4E:F6:B9:32:91 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 93 Signing time: Fri 05 Sep 2025 06:55:00 +0000 Manifest this update: Fri 05 Sep 2025 06:55:00 +0000 Manifest next update: Fri 12 Sep 2025 06:55:00 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: jUL9jaEMvfv5hA6NMbtLabJxkjjuhfR93KNxB1db/Dc=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Sep 5 06:55:00 2025 GMT Not After : Sep 12 06:55:00 2025 GMT Subject: CN=68ba8944-ab0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:f9:07:ee:d4:f2:a2:ee:69:e5:84:78:f8: 1d:e1:7c:0a:19:b3:b3:ef:2c:fe:57:dd:ef:80:4b: e9:d7:f3:06:e8:5c:ad:5b:d1:ba:6c:f9:60:15:e8: c4:dd:b2:6d:e6:6c:10:4f:69:ef:4f:1d:f1:ab:7a: 48:ca:41:74:ef:33:c2:1c:ae:07:90:7f:a1:71:8c: fd:29:8a:ea:15:ac:8f:85:ae:e9:bd:2e:a7:7a:2a: bf:0f:f0:0a:99:ec:e8:f4:08:d2:5a:cd:fa:bd:b4: d5:41:2f:ba:66:a7:71:3c:5f:26:62:53:21:a6:2e: b6:17:b9:d8:cf:bd:98:88:2e:d9:8e:a2:0b:4c:45: 41:93:7f:89:6d:68:67:81:09:02:1d:2c:9e:9f:19: 08:78:06:cb:6f:4e:e4:e5:4d:f5:50:e0:c3:26:ba: dd:37:8b:28:f4:7b:ea:08:69:2a:43:a9:39:a7:fe: 8e:ad:e6:e0:4d:1c:e6:05:56:ea:fc:87:f6:cf:5d: 1c:e6:2d:3f:21:71:af:a7:ab:fd:69:a3:48:09:ee: 95:69:9f:74:28:63:23:34:64:fd:66:f5:9b:fc:d8: e2:44:b4:98:e9:10:7e:72:55:dd:cd:03:0c:93:77: c0:da:1e:81:0c:b8:eb:d8:1c:71:f3:3d:ec:bf:d8: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4C:4B:16:FF:A3:DF:20:1F:CE:0A:0E:02:B1:08:4E:F6:B9:32:91 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fa:c7:b2:a2:90:ec:84:48:f6:04:03:b5:0a:93:c3:f2:24: f0:3c:c8:61:67:aa:77:32:a5:08:91:af:a4:d2:6a:ed:3a:7a: 6b:41:ef:b3:00:61:b3:54:bb:d8:c7:64:43:5c:7d:52:e3:b3: b8:13:90:c6:b5:33:e5:89:dd:c7:02:af:96:6f:a5:90:00:81: 48:81:d8:f4:d2:26:0c:8f:d2:68:80:e4:7c:f5:62:01:2f:e3: 23:c2:e5:bb:48:1c:c5:78:78:e2:6e:b4:be:29:7d:c2:fe:57: f7:bc:10:20:03:da:18:f0:b4:c5:93:b0:b4:11:0b:c5:98:68: e9:01:39:4f:29:3f:2d:90:4b:03:44:48:41:9b:f0:b0:a9:ac: bb:38:c0:95:71:3e:ae:61:df:22:12:25:9f:8e:0a:6d:88:46: 3b:5d:49:70:b1:94:7c:b4:2d:e8:93:f3:92:30:83:6b:ab:ce: 77:56:1c:a8:2c:33:04:8e:d8:87:3f:af:17:b1:19:fe:74:09: e3:1c:95:c7:8a:bc:80:27:69:b7:ab:7f:4b:60:85:c0:35:79: 6c:03:ef:ef:a8:43:97:bb:d8:c6:d9:ee:c4:79:e3:c9:62:25: c0:d0:ef:1a:c4:13:2b:85:a7:c2:f4:14:85:3a:48:9a:75:49: 42:51:6b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjUwOTA1MDY1NTAwWhcNMjUwOTEyMDY1NTAwWjAYMRYwFAYD VQQDEw02OGJhODk0NC1hYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyf5B+7U8qLuaeWEePgd4XwKGbOz7yz+V93vgEvp1/MG6FytW9G6bPlgFejE 3bJt5mwQT2nvTx3xq3pIykF07zPCHK4HkH+hcYz9KYrqFayPha7pvS6neiq/D/AK mezo9AjSWs36vbTVQS+6ZqdxPF8mYlMhpi62F7nYz72YiC7ZjqILTEVBk3+JbWhn gQkCHSyenxkIeAbLb07k5U31UODDJrrdN4so9HvqCGkqQ6k5p/6OrebgTRzmBVbq /If2z10c5i0/IXGvp6v9aaNICe6VaZ90KGMjNGT9ZvWb/NjiRLSY6RB+clXdzQMM k3fA2h6BDLjr2Bxx8z3sv9iiMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFMSxb/ o98gH84KDgKxCE72uTKRMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX+seyopDshEj2BAO1CpPD8iTwPMhhZ6p3MqUIka+k0mrtOnprQe+z AGGzVLvYx2RDXH1S47O4E5DGtTPlid3HAq+Wb6WQAIFIgdj00iYMj9JogOR89WIB L+MjwuW7SBzFeHjibrS+KX3C/lf3vBAgA9oY8LTFk7C0EQvFmGjpATlPKT8tkEsD REhBm/Cwqay7OMCVcT6uYd8iEiWfjgptiEY7XUlwsZR8tC3ok/OSMINrq853Vhyo LDMEjtiHP68XsRn+dAnjHJXHiryAJ2m3q39LYIXANXlsA+/vqEOXu9jG2e7EeePJ YiXA0O8axBMrhafC9BSFOkiadUlCUWs1 -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:08 2025 by rpki-client