$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: aLOeMihYsFFH/RRJbFq1b/E2D9EciSJl7nwAs2bnrQs= Subject key identifier: A6:60:4F:78:04:E6:91:63:90:F9:E9:E9:56:9A:74:33:34:1E:4A:81 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: DA Signing time: Wed 17 Sep 2025 06:11:40 +0000 Manifest this update: Wed 17 Sep 2025 06:11:40 +0000 Manifest next update: Wed 24 Sep 2025 06:11:40 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: o/Jn3A5NoNsyVRHzqBocF96wvZMPTEJHabShM0pFAcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Sep 17 06:11:40 2025 GMT Not After : Sep 24 06:11:40 2025 GMT Subject: CN=68ca511c-db78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:b1:0f:82:29:30:99:1e:47:a0:2d:5e:e2: 8f:ab:2c:41:d8:01:c5:f6:be:79:44:38:57:84:ea: 41:da:aa:3e:a0:71:00:c3:eb:49:dc:63:d8:19:82: b1:88:f8:0b:19:57:9e:f4:41:41:b3:05:3f:b7:2b: cf:42:d8:05:55:db:b7:1f:96:66:44:b9:f9:87:82: 3a:7a:78:bc:24:30:0b:5e:6a:2c:d9:d5:86:b4:fc: 99:95:fd:27:a0:74:b9:99:28:42:e6:87:e8:62:85: 2d:7e:ed:e4:23:02:ce:f2:68:41:8d:9b:4e:f9:6e: c3:02:ce:1c:23:3e:9d:c1:4e:29:8c:31:05:1f:fb: d5:9e:47:af:b2:df:b9:29:70:d2:d7:a3:dc:84:19: c9:d8:37:21:64:01:ff:12:f2:f6:f6:69:8d:7a:0e: 0e:56:e2:84:f0:21:0e:96:d7:ef:b2:62:75:e3:6e: 30:84:48:9b:36:c1:b3:af:52:df:b9:c6:c0:da:b2: b4:4f:b8:ea:8a:58:f4:e3:99:91:93:bc:41:95:7e: cc:be:dc:0c:da:c7:60:7e:cf:92:60:20:cf:64:a5: bd:fe:ca:41:32:e4:dc:18:67:eb:47:41:60:ad:ca: fd:11:b0:71:01:d8:e3:0d:a9:90:b9:11:3f:44:84: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:4F:78:04:E6:91:63:90:F9:E9:E9:56:9A:74:33:34:1E:4A:81 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:70:6a:84:af:ca:22:78:62:1a:28:d9:76:8b:9c:20:12:39: 44:e2:4a:d2:34:7c:df:9e:d6:56:0f:e0:b4:d0:11:56:cc:38: ac:5d:ec:2b:df:45:59:b2:76:2d:30:c0:5f:f1:ce:ef:15:9a: 4b:95:2d:49:99:22:e9:dc:33:82:ef:2b:88:9b:af:c0:f5:13: 63:a2:c1:a9:6b:3a:a5:11:11:6e:b9:3d:88:a4:b9:cf:cf:29: 51:cf:28:46:e7:a2:8c:4f:ee:fd:60:44:75:30:ed:81:21:60: 2b:cf:68:dc:51:2d:c9:5e:8a:e3:9f:bd:15:af:8b:a7:8d:10: e4:2d:83:6b:3c:25:af:23:50:49:47:e8:6f:6f:e1:90:a7:cd: 98:c4:f8:d5:30:79:59:84:02:44:c2:4c:4f:4a:15:02:50:19: 47:b2:9a:a5:17:d7:02:7f:33:4e:2d:64:24:4c:a9:e1:a1:3a: 0b:89:10:83:ad:2a:f4:92:3d:b6:4c:73:10:15:bb:d8:d4:2e: ce:c0:d3:ed:1f:25:df:a6:f3:a3:13:b3:df:3a:89:5b:ae:09: 19:c4:d2:44:4b:ab:91:7c:2b:82:f4:72:f3:47:2b:6e:c1:6a: 74:cf:ce:fb:72:c6:aa:20:48:3b:49:b9:dd:c5:b5:92:65:0a: 00:85:2a:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwOTE3MDYxMTQwWhcNMjUwOTI0MDYxMTQwWjAYMRYwFAYD VQQDEw02OGNhNTExYy1kYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnGxD4IpMJkeR6AtXuKPqyxB2AHF9r55RDhXhOpB2qo+oHEAw+tJ3GPYGYKx iPgLGVee9EFBswU/tyvPQtgFVdu3H5ZmRLn5h4I6eni8JDALXmos2dWGtPyZlf0n oHS5mShC5ofoYoUtfu3kIwLO8mhBjZtO+W7DAs4cIz6dwU4pjDEFH/vVnkevst+5 KXDS16PchBnJ2DchZAH/EvL29mmNeg4OVuKE8CEOltfvsmJ1424whEibNsGzr1Lf ucbA2rK0T7jqilj045mRk7xBlX7MvtwM2sdgfs+SYCDPZKW9/spBMuTcGGfrR0Fg rcr9EbBxAdjjDamQuRE/RIRDHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZgT3gE 5pFjkPnp6VaadDM0HkqBMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCscGqEr8oieGIaKNl2i5wgEjlE4krSNHzfntZWD+C00BFWzDisXewr 30VZsnYtMMBf8c7vFZpLlS1JmSLp3DOC7yuIm6/A9RNjosGpazqlERFuuT2IpLnP zylRzyhG56KMT+79YER1MO2BIWArz2jcUS3JXorjn70Vr4unjRDkLYNrPCWvI1BJ R+hvb+GQp82YxPjVMHlZhAJEwkxPShUCUBlHspqlF9cCfzNOLWQkTKnhoToLiRCD rSr0kj22THMQFbvY1C7OwNPtHyXfpvOjE7PfOolbrgkZxNJES6uRfCuC9HLzRytu wWp0z877csaqIEg7SbndxbWSZQoAhSp3 -----END CERTIFICATE-----Generated at Thu Sep 18 19:10:27 2025 by rpki-client