$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json) Hash identifier: j/lwLXah0aI9qoZO5H/Mi+j9lrgtsJWZ3KHal5RQh7w= Subject key identifier: 13:B8:79:F2:D8:28:74:92:75:FB:93:E9:A1:27:AB:50:DE:63:6D:AE Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft Manifest number: 018E Signing time: Wed 17 Sep 2025 04:01:57 +0000 Manifest this update: Wed 17 Sep 2025 04:01:57 +0000 Manifest next update: Wed 24 Sep 2025 04:01:57 +0000 Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: Wzqt57yPy/bT0Ncf4NGbWsKLsCYYVUmmG+F8LiFystk=) 2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: e+rpsrJfE3yU94kVnBShl6jDwyCOKp3rugpFTdwj4Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: Sep 17 04:01:57 2025 GMT Not After : Sep 24 04:01:57 2025 GMT Subject: CN=68ca32b5-7fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:6c:93:c1:68:f0:2c:7c:b5:65:90:ba:54: 7c:2e:9c:7e:91:4a:4c:8f:a9:5f:f3:cd:8b:c5:7f: bb:3d:45:d0:9f:7b:dd:46:ad:c9:3a:ef:6d:b7:1a: 9d:8b:eb:84:e4:2d:eb:74:1f:e9:94:1c:01:c3:e5: 79:63:ad:bb:b3:d7:c8:8e:5e:8e:0f:73:5b:41:b3: 7a:e6:71:b5:99:20:91:60:f6:35:cb:b7:b2:03:90: 15:7f:67:8b:cd:54:12:ae:d7:ab:0b:7a:2e:00:8e: ed:6f:75:a5:fb:2f:a2:cf:5a:ac:99:09:a0:fa:b9: 96:16:aa:6f:40:d7:92:7b:31:5b:0b:78:0e:ee:5d: fc:37:45:14:8d:a4:14:e9:93:00:e5:d7:81:83:f1: 96:ee:83:90:a5:63:27:a7:b7:cc:25:7c:eb:81:b3: d0:57:c6:c1:7a:9f:b7:36:20:2c:63:0d:f8:ba:3b: db:d7:2b:ca:4f:a8:6d:36:14:67:e7:b0:85:6f:82: e5:42:c7:54:c5:8c:bb:b9:bf:73:11:f3:66:d0:27: c2:a0:68:c8:30:11:a5:e1:06:37:7e:be:99:6f:49: 56:5e:66:7c:38:78:d4:c7:ce:ae:54:5a:28:d8:f7: 9b:15:f3:41:22:b0:65:82:08:43:db:85:81:f7:cc: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B8:79:F2:D8:28:74:92:75:FB:93:E9:A1:27:AB:50:DE:63:6D:AE X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d5:30:ca:a9:56:6a:08:f4:29:26:5c:c8:6c:d0:36:81:23: 84:ad:0f:6f:68:7c:12:54:46:cf:91:93:b2:c3:a5:d3:3c:dc: 42:6b:b8:d2:bd:47:db:e3:38:48:09:9b:7b:92:cc:51:23:f4: c2:08:d8:ee:9e:7e:db:f9:e4:64:cf:ab:dc:9d:5d:9f:d5:6d: a0:37:d5:2d:5d:a3:0b:5c:a5:c6:f8:f7:85:7b:0b:2b:9f:5c: 0a:60:47:e5:45:2b:3f:af:3d:8a:59:e8:a9:43:07:31:2e:e2: c5:70:7d:2e:14:4e:f2:a8:5c:99:88:ad:0c:b7:79:a3:54:67: 04:5d:e9:92:9f:c7:25:90:43:fd:59:65:c2:d2:91:62:87:dc: 1b:e3:ef:4f:89:2d:56:47:d0:5a:e7:f7:7b:85:c5:b1:c9:1d: 3c:e0:d6:69:86:cd:a0:2c:e8:c0:5c:05:d8:7b:4c:49:a6:88: 22:b9:51:85:1b:2c:ff:ef:10:54:ef:a6:c7:a9:dd:37:ef:84: 85:a3:e7:9a:ad:3c:18:4e:39:c1:bf:40:c3:ef:ca:e4:36:a1: 80:3c:f1:90:77:d7:02:3e:45:22:88:6b:05:28:2a:b9:c6:cb: 1c:be:03:ad:42:f3:a9:98:15:e7:e6:5f:16:3b:7f:a3:70:67: c5:0d:5d:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUwOTE3MDQwMTU3WhcNMjUwOTI0MDQwMTU3WjAYMRYwFAYD VQQDEw02OGNhMzJiNS03ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JNsk8Fo8Cx8tWWQulR8Lpx+kUpMj6lf882LxX+7PUXQn3vdRq3JOu9ttxqd i+uE5C3rdB/plBwBw+V5Y627s9fIjl6OD3NbQbN65nG1mSCRYPY1y7eyA5AVf2eL zVQSrterC3ouAI7tb3Wl+y+iz1qsmQmg+rmWFqpvQNeSezFbC3gO7l38N0UUjaQU 6ZMA5deBg/GW7oOQpWMnp7fMJXzrgbPQV8bBep+3NiAsYw34ujvb1yvKT6htNhRn 57CFb4LlQsdUxYy7ub9zEfNm0CfCoGjIMBGl4QY3fr6Zb0lWXmZ8OHjUx86uVFoo 2PebFfNBIrBlgghD24WB98zHFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBO4efLY KHSSdfuT6aEnq1DeY22uMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX1TDKqVZqCPQpJlzIbNA2gSOErQ9vaHwSVEbPkZOyw6XTPNxCa7jS vUfb4zhICZt7ksxRI/TCCNjunn7b+eRkz6vcnV2f1W2gN9UtXaMLXKXG+PeFewsr n1wKYEflRSs/rz2KWeipQwcxLuLFcH0uFE7yqFyZiK0Mt3mjVGcEXemSn8clkEP9 WWXC0pFih9wb4+9PiS1WR9Ba5/d7hcWxyR084NZphs2gLOjAXAXYe0xJpogiuVGF Gyz/7xBU76bHqd0374SFo+earTwYTjnBv0DD78rkNqGAPPGQd9cCPkUiiGsFKCq5 xsscvgOtQvOpmBXn5l8WO3+jcGfFDV1y -----END CERTIFICATE-----Generated at Fri Sep 19 03:39:26 2025 by rpki-client