$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: G8MOw8v89fJgXQ4y4hLHpv927qQtWkYWS6qBfbLxHmc= Subject key identifier: 3C:55:91:10:9A:20:A9:BD:6D:88:CB:A7:D4:4B:86:E9:79:A9:46:25 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 089A Signing time: Thu 04 Sep 2025 20:51:25 +0000 Manifest this update: Thu 04 Sep 2025 20:51:25 +0000 Manifest next update: Thu 11 Sep 2025 20:51:25 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: exX0qtekeKXH8s7hYCvR/Sa7sMPPJ4KeIHfZKYAJGLI=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Sep 4 20:51:25 2025 GMT Not After : Sep 11 20:51:25 2025 GMT Subject: CN=68b9fbcd-a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:2b:ba:51:a6:45:bf:9e:8f:78:a3:a8:25: bb:5f:fd:1a:55:4a:07:5f:43:8e:be:f7:ea:cd:de: c7:7b:fd:f7:29:78:4d:68:22:95:91:d8:cb:bd:60: 5f:97:46:19:0e:93:f4:15:f4:1b:e5:32:d2:ba:58: f9:20:b6:da:0b:c8:3f:c0:e0:95:e1:2a:d2:00:d5: 2d:53:a9:60:59:77:d5:d4:5c:90:3a:4b:ef:a4:27: dd:79:7f:f7:01:1f:95:c9:97:e9:fa:c0:b8:61:1f: 7f:b3:f3:a1:0f:2c:ba:51:ed:a7:05:af:b4:3c:c9: 69:2b:af:ca:cb:0c:d9:0d:4e:01:65:0a:16:3c:4b: bf:ab:0f:44:ae:d3:fb:16:e9:11:d2:d2:71:5c:b8: 05:0c:df:17:99:21:7a:cf:4c:3a:c7:77:16:39:2a: 86:e8:70:e5:26:79:93:bf:db:13:91:d8:02:7f:68: 39:df:cf:af:54:d6:b4:5a:52:1d:63:0c:eb:f4:45: 55:3d:9e:02:fa:c0:fb:cb:ea:3a:c6:af:15:8e:d5: bf:7f:cd:59:82:bf:38:cc:38:10:7d:43:29:2f:cc: 35:09:42:05:bc:54:6e:67:91:6b:5f:1c:a1:5d:1d: cc:52:f4:05:bd:4d:bd:a2:f6:9a:47:32:35:40:d4: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:55:91:10:9A:20:A9:BD:6D:88:CB:A7:D4:4B:86:E9:79:A9:46:25 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:69:27:fd:4e:6c:6e:6f:25:55:bd:21:52:11:27:37:ae:90: 59:aa:3c:5a:14:e4:ce:e4:45:b8:de:64:4b:84:0c:60:6b:05: cb:21:9a:4c:14:85:af:cf:db:f7:22:4f:7f:8d:e5:68:d9:e0: 20:56:c3:9a:69:29:64:60:7a:1b:5a:00:8a:68:63:2a:fb:7a: 30:97:91:6b:46:d6:dc:49:5b:9c:66:5c:a6:b9:3c:c2:b7:37: cf:9a:89:7c:05:76:6a:79:56:22:eb:6e:28:40:b1:5a:a0:29: 59:81:eb:5e:52:33:8c:28:0d:ea:ea:69:28:4b:89:bb:1a:e3: 07:5c:a3:0b:82:74:cb:28:db:2d:d8:1a:90:04:d2:2e:9f:89: b2:8d:c3:ff:70:82:50:f8:ea:2e:9b:c6:f9:7a:1a:a4:50:50: 14:75:7f:f5:d5:ca:1b:86:7f:35:36:57:0d:06:ca:b8:15:01: e7:8a:96:28:50:1c:a1:b9:a7:32:b4:3a:8c:23:f5:5a:f5:ff: 05:14:7f:f6:bf:a2:43:f5:c0:c8:29:e3:2e:a1:56:79:cd:3c: dd:b6:d3:99:7c:f2:8f:1d:b7:f7:49:e8:2a:9d:73:d7:ee:44: de:48:93:8f:e9:b5:c6:91:a1:ed:bb:ef:f5:39:b8:47:78:ad: 0e:32:9f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUwOTA0MjA1MTI1WhcNMjUwOTExMjA1MTI1WjAYMRYwFAYD VQQDEw02OGI5ZmJjZC1hNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M0rulGmRb+ej3ijqCW7X/0aVUoHX0OOvvfqzd7He/33KXhNaCKVkdjLvWBf l0YZDpP0FfQb5TLSulj5ILbaC8g/wOCV4SrSANUtU6lgWXfV1FyQOkvvpCfdeX/3 AR+VyZfp+sC4YR9/s/OhDyy6Ue2nBa+0PMlpK6/KywzZDU4BZQoWPEu/qw9ErtP7 FukR0tJxXLgFDN8XmSF6z0w6x3cWOSqG6HDlJnmTv9sTkdgCf2g538+vVNa0WlId Ywzr9EVVPZ4C+sD7y+o6xq8VjtW/f81Zgr84zDgQfUMpL8w1CUIFvFRuZ5FrXxyh XR3MUvQFvU29ovaaRzI1QNSxlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxVkRCa IKm9bYjLp9RLhul5qUYlMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHaSf9TmxubyVVvSFSESc3rpBZqjxaFOTO5EW43mRLhAxgawXLIZpM FIWvz9v3Ik9/jeVo2eAgVsOaaSlkYHobWgCKaGMq+3owl5FrRtbcSVucZlymuTzC tzfPmol8BXZqeVYi624oQLFaoClZgeteUjOMKA3q6mkoS4m7GuMHXKMLgnTLKNst 2BqQBNIun4myjcP/cIJQ+Ooum8b5ehqkUFAUdX/11cobhn81NlcNBsq4FQHnipYo UByhuacytDqMI/Va9f8FFH/2v6JD9cDIKeMuoVZ5zTzdttOZfPKPHbf3SegqnXPX 7kTeSJOP6bXGkaHtu+/1ObhHeK0OMp/u -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:48 2025 by rpki-client