$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft File: qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json) Hash identifier: uRqNUwtPPzZNeANkm+HbM7PNidL9nY2vfKWlU3elCKw= Subject key identifier: AE:C7:E5:7E:1F:64:B5:75:49:25:E5:1A:B5:F7:74:8D:77:A0:CB:0E Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B Certificate issuer: /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft Manifest number: 067F Signing time: Thu 18 Sep 2025 22:42:07 +0000 Manifest this update: Thu 18 Sep 2025 22:42:07 +0000 Manifest next update: Thu 25 Sep 2025 22:42:07 +0000 Files and hashes: 1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: g8rgZPYefty/V3p8u7/miI4TGqe0/z1ZewKOn9qspvA=) 2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: Tp6yV6aNCHUMLxFxEsezUBZI5iOsrCF8OtHjSK1vpw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Validity Not Before: Sep 18 22:42:07 2025 GMT Not After : Sep 25 22:42:07 2025 GMT Subject: CN=68cc8abf-0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:25:d1:5f:d1:8f:21:dd:e6:d5:c1:64:0e: cc:6b:94:0c:6d:eb:b2:ee:92:3b:55:10:38:ff:5f: d6:55:a1:e3:f2:ac:64:00:3b:d3:c3:4f:8e:d5:a6: 8a:df:5d:87:27:a7:a6:2f:1a:9b:79:c6:6f:46:ef: cd:6f:66:57:cd:cf:78:b6:f4:05:97:26:9b:04:04: 72:c2:cf:8d:5e:df:9d:f6:e2:2c:51:dd:ce:7e:c8: 1e:1d:79:3d:bd:e1:25:2d:6a:30:e9:ca:44:a0:f7: 90:81:c1:27:ee:fd:42:b7:97:79:3c:8b:e2:72:92: 4b:70:c4:c0:0a:1c:b1:a3:d5:d0:bb:08:31:9e:f1: de:de:9b:85:93:05:40:d4:08:39:cd:e1:26:ad:12: 7e:45:9e:02:d3:a0:53:c4:56:80:80:58:fd:3e:b5: ba:f5:d8:b9:f9:a0:69:ae:7b:b2:46:a7:7a:d1:8a: 79:eb:11:a2:ef:6e:3f:7a:0f:c4:02:99:47:34:fa: a7:0e:28:ae:be:01:ea:0e:66:c0:80:8e:5b:de:e8: 57:ec:15:9a:80:f1:9f:76:ab:41:3e:fe:1c:1e:fc: 46:da:65:d3:ba:fe:1a:ba:a8:34:9b:cf:a3:1d:78: 07:b8:58:90:69:6d:73:01:f0:51:7c:2c:de:e2:1e: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:E5:7E:1F:64:B5:75:49:25:E5:1A:B5:F7:74:8D:77:A0:CB:0E X509v3 Authority Key Identifier: keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5f:34:e1:a0:90:46:4b:88:ec:fc:f2:fa:d1:17:47:7f:9f: 0f:c9:ae:0a:a5:0b:9d:1a:21:bf:a9:c1:13:20:a8:2a:b5:d7: 35:65:7f:71:58:46:d1:be:72:b2:ee:63:90:fe:08:1e:59:5d: 7a:28:27:cd:f1:17:67:2d:ed:ee:f9:1a:93:b4:49:5b:e2:44: 96:91:cf:b9:71:03:2f:83:35:a2:8b:92:b2:4a:9c:f6:ef:c0: da:1a:72:24:27:49:b8:c7:aa:83:e8:9f:ff:fd:f2:32:89:4b: fe:96:d4:00:ac:3e:d7:d6:5c:2b:61:b2:34:5f:21:64:db:12: 54:f3:c2:25:4d:10:21:a8:67:71:03:6f:88:63:4d:b0:34:b8: 7d:cb:0d:04:f1:5e:7a:0f:87:4c:d3:2b:35:86:4c:84:e9:70: 1b:58:3a:f1:c2:d6:f4:fc:eb:2f:3d:13:4a:4e:76:b0:39:00: 6a:f2:15:cc:04:b7:25:11:cc:98:33:4b:32:04:d3:d7:a5:32: 0c:f3:c9:4b:ed:37:36:1c:fe:e6:b9:75:26:e5:a2:3e:d8:a3: fa:4b:43:02:70:ff:b3:bd:78:eb:7b:e8:6e:87:80:71:6d:90: 29:0b:64:c5:b1:d4:a0:15:7d:17:bf:1d:85:e9:0d:19:00:e0: 6f:1b:bb:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2NTkzQjkxQjQ0 MjBCQUE3MEIwHhcNMjUwOTE4MjI0MjA3WhcNMjUwOTI1MjI0MjA3WjAYMRYwFAYD VQQDEw02OGNjOGFiZi0wMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1gl0V/RjyHd5tXBZA7Ma5QMbeuy7pI7VRA4/1/WVaHj8qxkADvTw0+O1aaK 312HJ6emLxqbecZvRu/Nb2ZXzc94tvQFlyabBARyws+NXt+d9uIsUd3OfsgeHXk9 veElLWow6cpEoPeQgcEn7v1Ct5d5PIvicpJLcMTAChyxo9XQuwgxnvHe3puFkwVA 1Ag5zeEmrRJ+RZ4C06BTxFaAgFj9PrW69di5+aBprnuyRqd60Yp56xGi724/eg/E AplHNPqnDiiuvgHqDmbAgI5b3uhX7BWagPGfdqtBPv4cHvxG2mXTuv4auqg0m8+j HXgHuFiQaW1zAfBRfCze4h4VrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7H5X4f ZLV1SSXlGrX3dI13oMsOMB8GA1UdIwQYMBaAFKmnVVXtcGcvcdUvZZO5G0QguqcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDUxOS8wNDI2NDkxRThD QUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5OXgxUzlsazdrYlJDQzZw d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZFZWZTF3Wnk5eDFTOWxrN2tiUkNDNnB3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDUxOS8wNDI2NDkxRThDQUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5 OXgxUzlsazdrYlJDQzZwd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBXzThoJBGS4js/PL60RdHf58Pya4KpQudGiG/qcETIKgqtdc1ZX9x WEbRvnKy7mOQ/ggeWV16KCfN8RdnLe3u+RqTtElb4kSWkc+5cQMvgzWii5KySpz2 78DaGnIkJ0m4x6qD6J///fIyiUv+ltQArD7X1lwrYbI0XyFk2xJU88IlTRAhqGdx A2+IY02wNLh9yw0E8V56D4dM0ys1hkyE6XAbWDrxwtb0/OsvPRNKTnawOQBq8hXM BLclEcyYM0syBNPXpTIM88lL7Tc2HP7muXUm5aI+2KP6S0MCcP+zvXjre+huh4Bx bZApC2TFsdSgFX0Xvx2F6Q0ZAOBvG7vx -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:20 2025 by rpki-client