$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: jjNMO5+QjwCDwnV7lFW4/4EIkBfHCWCrnJ5K3UEX9v4= Subject key identifier: FF:51:C7:7A:28:DA:0C:B6:4F:C6:BB:0C:C0:92:06:15:2F:48:53:5C Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 06FE Signing time: Thu 18 Sep 2025 22:11:37 +0000 Manifest this update: Thu 18 Sep 2025 22:11:37 +0000 Manifest next update: Thu 25 Sep 2025 22:11:37 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: kU08DicGOKl5gXNe82K022kV5XR5NIHXG2I/X9wxKVA=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: FRIMYZ0ymb4xNk4HDg1e5QrcA1pECIMjsb8IPP33VK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: Sep 18 22:11:37 2025 GMT Not After : Sep 25 22:11:37 2025 GMT Subject: CN=68cc8399-897e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:35:50:80:ea:41:d2:03:f7:bb:10:5b:60: 89:a8:aa:e1:62:bf:a8:d1:bb:27:8d:9c:08:f9:99: b7:cb:1f:0e:82:d8:a9:58:de:5e:16:80:f3:2d:5c: 62:84:ce:79:f0:4a:40:7e:ee:46:10:c0:f3:e7:07: 5e:37:f2:f1:b7:c6:f4:fd:c9:74:7f:33:d3:7b:1c: b4:ec:ef:e4:ec:e0:5d:34:81:aa:df:a8:55:96:f9: 97:3a:80:66:d9:c5:5c:d3:0a:37:4d:87:83:cf:c9: b4:8e:4f:62:0e:d2:29:06:a0:f5:35:6f:02:23:91: be:b3:cb:9e:d4:5c:5d:44:39:c5:11:2c:0a:54:75: 9f:b7:ff:f0:11:4c:66:24:92:d0:f3:b6:0b:95:1a: 75:01:b4:99:31:91:c8:a5:7f:5d:fa:49:a4:8e:86: 32:98:1e:6a:db:eb:05:b8:16:e6:0b:44:61:4f:c8: 5f:82:17:21:a7:3c:b0:a1:4a:4e:d3:c7:64:12:24: 1f:3a:e1:ba:95:11:13:19:46:d3:7b:fa:b0:5c:7d: 4f:06:f4:37:50:18:04:e6:b1:8e:54:6e:d2:6d:37: 23:8a:f9:ec:c1:9b:ad:ba:da:68:88:42:2c:75:0f: b0:9e:86:e2:7d:6a:fe:c0:82:b1:8e:0d:20:28:e9: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:51:C7:7A:28:DA:0C:B6:4F:C6:BB:0C:C0:92:06:15:2F:48:53:5C X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cd:fa:4d:c1:63:5d:59:16:a5:9d:2b:75:8d:c3:c6:ff:bc: 2d:0a:f6:df:1d:ab:a2:8c:38:48:db:b5:03:dd:72:4a:a9:72: aa:25:fa:e1:1b:f4:d0:f5:4a:3f:b5:ea:d4:62:38:45:66:b7: 5e:13:4e:ba:06:50:02:f1:27:7e:6b:ca:08:3a:f8:04:95:9b: 46:16:7f:21:25:ea:0c:a3:a8:35:14:99:7e:b5:d6:51:18:a5: a5:99:38:1a:a3:8b:f1:fd:d8:bd:1a:2c:8f:ef:40:29:f3:0f: ed:4b:e5:23:b6:2d:d5:6e:53:6f:86:dd:71:76:ba:f9:70:8e: b7:d1:99:c8:7c:08:eb:eb:7a:2f:0f:66:f2:b0:2f:46:4f:27: 60:0c:ef:7b:dc:c4:3c:f6:22:dd:54:c0:3f:b7:7f:9e:39:68: 66:be:12:90:18:6f:75:15:09:3d:6c:e0:a8:a9:aa:e7:19:ea: 8b:d0:5a:49:cf:f2:c6:63:b8:c3:7c:cd:8c:05:39:28:5f:c6: 58:1b:23:f0:16:42:96:15:b7:72:7b:55:82:81:8e:20:57:82: 8b:72:3a:df:e4:3d:a1:80:25:4f:8e:88:b7:8b:cb:7a:a7:8e: 66:ac:93:1d:d5:67:58:37:92:82:5d:21:68:d7:26:ac:78:c0: 46:6b:0a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjUwOTE4MjIxMTM3WhcNMjUwOTI1MjIxMTM3WjAYMRYwFAYD VQQDEw02OGNjODM5OS04OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEo1UIDqQdID97sQW2CJqKrhYr+o0bsnjZwI+Zm3yx8OgtipWN5eFoDzLVxi hM558EpAfu5GEMDz5wdeN/Lxt8b0/cl0fzPTexy07O/k7OBdNIGq36hVlvmXOoBm 2cVc0wo3TYeDz8m0jk9iDtIpBqD1NW8CI5G+s8ue1FxdRDnFESwKVHWft//wEUxm JJLQ87YLlRp1AbSZMZHIpX9d+kmkjoYymB5q2+sFuBbmC0RhT8hfghchpzywoUpO 08dkEiQfOuG6lRETGUbTe/qwXH1PBvQ3UBgE5rGOVG7SbTcjivnswZututpoiEIs dQ+wnobifWr+wIKxjg0gKOmlLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9Rx3oo 2gy2T8a7DMCSBhUvSFNcMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAzfpNwWNdWRalnSt1jcPG/7wtCvbfHauijDhI27UD3XJKqXKqJfrh G/TQ9Uo/terUYjhFZrdeE066BlAC8Sd+a8oIOvgElZtGFn8hJeoMo6g1FJl+tdZR GKWlmTgao4vx/di9GiyP70Ap8w/tS+Ujti3VblNvht1xdrr5cI630ZnIfAjr63ov D2bysC9GTydgDO973MQ89iLdVMA/t3+eOWhmvhKQGG91FQk9bOCoqarnGeqL0FpJ z/LGY7jDfM2MBTkoX8ZYGyPwFkKWFbdye1WCgY4gV4KLcjrf5D2hgCVPjoi3i8t6 p45mrJMd1WdYN5KCXSFo1yaseMBGawri -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:09 2025 by rpki-client