$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: PjcXgKqrEYlBDK4tKXH8hbYpA2ZsNMhDo3uSK2zyqsY= Subject key identifier: C7:CC:5B:C3:65:DD:13:DC:47:2E:84:72:44:39:CD:34:84:88:05:84 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 056D Signing time: Thu 18 Sep 2025 23:39:21 +0000 Manifest this update: Thu 18 Sep 2025 23:39:20 +0000 Manifest next update: Thu 25 Sep 2025 23:39:20 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: joN354zIn4I9ylFCPtpNMF2F4thuv2xqRPXaX02WJ78=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: /ckEG51NBhBYEZtZSbLBPmavN3UuTjHbEpYTSHsiIm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: Sep 18 23:39:20 2025 GMT Not After : Sep 25 23:39:20 2025 GMT Subject: CN=68cc9829-cf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:d7:17:ca:a7:82:17:db:60:17:08:a8:55: b8:48:59:fd:61:e3:ad:bb:c7:2f:12:98:ca:b9:9c: db:d0:ed:07:ab:21:e0:91:58:4b:b9:08:9d:c6:5f: 00:a3:4a:17:9c:63:8d:a9:ad:7d:80:53:e3:8f:2e: 82:9c:ca:6d:9e:ad:40:f6:b5:08:39:cb:ed:e3:00: 8d:a1:b1:97:9c:43:fb:39:03:f4:3d:39:4d:47:c8: 78:c1:aa:92:78:98:ae:5d:f5:aa:a4:7a:95:c5:b4: a1:0f:ea:2c:2c:c3:78:be:5d:36:95:64:fb:01:32: d2:d2:88:e0:ab:0e:ef:b8:46:83:fd:ab:5e:c9:fc: 90:79:5b:e9:b4:40:95:bf:f4:9f:11:24:5d:c1:5c: 86:4b:aa:51:87:57:49:b1:29:8d:64:b0:ab:3f:27: 5a:0d:fa:7b:a3:63:be:28:ce:ff:4a:60:03:03:02: 11:11:66:ee:32:41:c3:89:62:ba:80:08:9f:3f:67: 40:e3:4d:a9:2b:3b:28:32:6f:0f:66:0e:5c:86:eb: 65:0f:ff:8c:6b:92:73:2b:c8:e0:fe:d5:17:fc:ab: d7:db:21:27:af:8d:0c:f5:23:97:6c:66:c2:0e:5f: 1c:f7:b2:93:06:8c:ce:75:ef:04:96:0f:5b:47:01: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CC:5B:C3:65:DD:13:DC:47:2E:84:72:44:39:CD:34:84:88:05:84 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:16:5e:de:52:dd:7c:fb:7b:83:7a:d4:be:4d:ed:a5:a9:15: a3:c1:f6:55:90:e7:5c:fe:d0:3c:5a:2e:b0:5a:59:ad:00:2d: c3:a3:b0:9c:2f:1b:81:ef:90:26:75:cd:ca:ca:3f:6c:d5:f0: 8c:7c:87:6d:bc:a7:5e:d2:98:67:06:6f:d9:7b:9c:f8:82:17: 98:b2:85:82:22:04:f1:99:be:3e:df:ae:74:af:a6:69:d0:b2: 44:cf:d6:f4:86:ad:c4:04:95:8d:b2:02:71:ad:7c:33:a3:43: ed:be:95:4f:0f:7b:0b:eb:05:f6:ba:73:e2:a5:53:16:77:10: cc:ce:c4:fe:54:ae:8c:d9:d5:4d:49:d6:f1:b8:8f:a4:38:dd: 5b:d0:07:af:e5:3c:64:03:9f:d0:51:cc:da:51:fd:af:45:8b: 02:3c:ce:e9:04:60:0b:e5:c9:d5:9c:32:fb:34:37:c1:be:2b: 67:88:15:04:33:13:52:bf:36:35:a9:cd:df:52:69:c5:70:2b: 15:f8:ee:aa:04:25:c7:de:fe:31:be:f8:3b:a8:19:c2:9a:a4: f2:65:35:b8:18:f2:85:fa:cd:24:b9:2b:bd:bf:e3:bf:b8:44: fe:16:11:7d:d3:74:af:89:4e:71:e1:d2:ee:ef:07:a5:f6:39: e9:fe:6c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjUwOTE4MjMzOTIwWhcNMjUwOTI1MjMzOTIwWjAYMRYwFAYD VQQDEw02OGNjOTgyOS1jZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvc7XF8qnghfbYBcIqFW4SFn9YeOtu8cvEpjKuZzb0O0HqyHgkVhLuQidxl8A o0oXnGONqa19gFPjjy6CnMptnq1A9rUIOcvt4wCNobGXnEP7OQP0PTlNR8h4waqS eJiuXfWqpHqVxbShD+osLMN4vl02lWT7ATLS0ojgqw7vuEaD/ateyfyQeVvptECV v/SfESRdwVyGS6pRh1dJsSmNZLCrPydaDfp7o2O+KM7/SmADAwIREWbuMkHDiWK6 gAifP2dA402pKzsoMm8PZg5chutlD/+Ma5JzK8jg/tUX/KvX2yEnr40M9SOXbGbC Dl8c97KTBozOde8Elg9bRwFPmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfMW8Nl 3RPcRy6EckQ5zTSEiAWEMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKFl7eUt18+3uDetS+Te2lqRWjwfZVkOdc/tA8Wi6wWlmtAC3Do7Cc LxuB75Amdc3Kyj9s1fCMfIdtvKde0phnBm/Ze5z4gheYsoWCIgTxmb4+3650r6Zp 0LJEz9b0hq3EBJWNsgJxrXwzo0PtvpVPD3sL6wX2unPipVMWdxDMzsT+VK6M2dVN SdbxuI+kON1b0Aev5TxkA5/QUczaUf2vRYsCPM7pBGAL5cnVnDL7NDfBvitniBUE MxNSvzY1qc3fUmnFcCsV+O6qBCXH3v4xvvg7qBnCmqTyZTW4GPKF+s0kuSu9v+O/ uET+FhF903SviU5x4dLu7wel9jnp/mwm -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:08 2025 by rpki-client