$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: 89OJc+OhT62oCDC98XsxM1C2BxmXEajfeD0rnJKeJoY= Subject key identifier: 30:5F:70:05:7E:0D:B2:4C:61:91:6E:B9:B6:CB:BE:97:70:C7:DC:94 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 0186 Signing time: Fri 19 Sep 2025 04:04:46 +0000 Manifest this update: Fri 19 Sep 2025 04:04:45 +0000 Manifest next update: Fri 26 Sep 2025 04:04:45 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: ewiOhZQFjPyLwXs5ZzObvz7YQNLjdBjBkvLZMq7nz04=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Sep 19 04:04:45 2025 GMT Not After : Sep 26 04:04:45 2025 GMT Subject: CN=68ccd65e-9d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:29:09:d2:37:35:eb:1e:69:dd:ec:50:16: 5f:2c:d8:4f:23:a9:36:66:d9:0f:a2:ee:9f:0a:15: 4a:86:4c:d4:2d:f2:82:1e:5d:bc:e3:a5:fd:0a:e5: a4:4b:0a:23:95:70:64:33:13:74:0f:e8:39:f1:40: 43:a7:75:b3:80:3f:1f:33:13:c9:c6:bf:eb:ba:26: d1:01:b6:72:c3:ba:d0:a6:16:dc:bd:a6:f1:c3:bb: 8d:dd:cc:a8:b3:72:b9:58:ae:a3:10:2f:c7:47:68: 23:dc:e5:30:ac:82:3d:99:21:f7:b6:f8:3e:68:1a: 58:5e:95:2b:f5:c6:6d:ed:59:c9:90:c3:ab:2c:91: 10:c3:78:9e:22:d2:1b:65:f3:38:44:0b:5a:22:72: b7:5a:71:ba:f6:86:3d:f9:a9:6b:82:e0:7c:d4:2b: 2f:21:ff:ca:c8:c7:94:58:45:9d:1c:67:80:3a:a8: 17:6b:a4:c4:4f:b5:66:4a:16:99:b6:0a:8d:b9:f7: 92:55:f4:fc:50:9a:55:b6:a8:f2:59:c8:67:32:59: 61:68:0f:17:7f:42:62:10:cb:ba:12:68:25:2c:f0: e2:1c:b9:ab:0c:4f:fe:74:5c:7d:3d:1e:ca:71:cc: de:2d:6e:15:e2:6f:0c:5e:e0:4b:cf:51:4a:04:35: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5F:70:05:7E:0D:B2:4C:61:91:6E:B9:B6:CB:BE:97:70:C7:DC:94 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e2:ff:aa:80:da:19:6b:20:9b:37:57:23:6f:0c:e8:eb:79: e7:14:f8:91:39:4c:67:e9:f9:ae:d8:81:e7:67:ff:e4:01:26: c5:a0:fb:af:93:fa:aa:3f:d6:3e:f8:b0:82:ba:f0:a4:ae:6b: 36:be:3f:43:28:94:11:b7:06:79:5a:34:d1:8d:8c:ce:51:1c: 91:46:1d:4f:a5:ad:47:fa:e0:d1:02:8c:59:7e:27:4e:07:63: a7:68:8a:bf:e7:4a:80:53:12:30:07:89:b2:17:bc:99:b5:58: 66:f2:85:45:2d:95:b7:1d:39:ec:ba:a0:3a:e9:8f:c6:35:3a: 4f:19:59:10:ac:63:55:0f:85:66:a8:dd:9c:bb:dc:33:c1:6f: 27:85:01:27:be:09:91:0f:b4:c8:da:e2:c8:68:72:b9:61:9c: bf:1d:90:e9:78:93:23:5a:8b:84:d3:c2:45:2c:e7:1d:2c:cf: d0:4c:c9:82:1a:10:51:0b:de:0f:bb:e8:7e:c9:4a:26:20:84: 4b:6c:00:ec:13:ae:ad:aa:bd:0b:de:f6:25:55:69:c8:71:1d: fc:d1:57:a3:d3:e0:e3:ab:ff:78:e1:10:81:a3:3d:11:76:c6: ac:0f:41:01:99:54:12:73:ec:03:7b:15:ef:ea:e5:b4:50:07: 3c:73:75:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUwOTE5MDQwNDQ1WhcNMjUwOTI2MDQwNDQ1WjAYMRYwFAYD VQQDEw02OGNjZDY1ZS05ZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8YpCdI3Nesead3sUBZfLNhPI6k2ZtkPou6fChVKhkzULfKCHl2846X9CuWk SwojlXBkMxN0D+g58UBDp3WzgD8fMxPJxr/ruibRAbZyw7rQphbcvabxw7uN3cyo s3K5WK6jEC/HR2gj3OUwrII9mSH3tvg+aBpYXpUr9cZt7VnJkMOrLJEQw3ieItIb ZfM4RAtaInK3WnG69oY9+alrguB81CsvIf/KyMeUWEWdHGeAOqgXa6TET7VmShaZ tgqNufeSVfT8UJpVtqjyWchnMllhaA8Xf0JiEMu6EmglLPDiHLmrDE/+dFx9PR7K cczeLW4V4m8MXuBLz1FKBDUJSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBfcAV+ DbJMYZFuubbLvpdwx9yUMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq4v+qgNoZayCbN1cjbwzo63nnFPiROUxn6fmu2IHnZ//kASbFoPuv k/qqP9Y++LCCuvCkrms2vj9DKJQRtwZ5WjTRjYzOURyRRh1Ppa1H+uDRAoxZfidO B2OnaIq/50qAUxIwB4myF7yZtVhm8oVFLZW3HTnsuqA66Y/GNTpPGVkQrGNVD4Vm qN2cu9wzwW8nhQEnvgmRD7TI2uLIaHK5YZy/HZDpeJMjWouE08JFLOcdLM/QTMmC GhBRC94Pu+h+yUomIIRLbADsE66tqr0L3vYlVWnIcR380Vej0+Djq/944RCBoz0R dsasD0EBmVQSc+wDexXv6uW0UAc8c3X4 -----END CERTIFICATE-----Generated at Fri Sep 19 09:08:48 2025 by rpki-client