$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: irU0VLDioOdPVZ/6A3NN8GZg7HJqVtNI8pvbLBRvf/g= Subject key identifier: 5E:A4:9A:5B:44:37:BD:08:30:B4:33:6B:6D:84:86:39:96:19:35:FD Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B4B Signing time: Sat 06 Sep 2025 16:20:38 +0000 Manifest this update: Sat 06 Sep 2025 16:20:37 +0000 Manifest next update: Sat 13 Sep 2025 16:20:37 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: 9xJoDCqqPFIWA+z7UT6GRt5lzhZLVocGZ4cCrsd3tgE=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6998 (0x1b56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Sep 6 16:20:37 2025 GMT Not After : Sep 13 16:20:37 2025 GMT Subject: CN=68bc5f56-c1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:f2:ba:d4:7c:d7:d0:e5:69:98:96:11:49: 41:a7:69:97:a4:9f:8f:36:d2:ec:3b:e6:95:3a:15: 92:9e:26:91:e5:a5:4f:f0:05:60:9f:53:34:0c:39: 5f:8b:cc:ea:a5:19:bf:d3:14:31:e6:83:65:6b:91: 40:b9:92:66:45:88:4c:61:ea:34:6b:f4:09:ac:2b: b2:b8:4b:6c:ec:15:63:f2:bb:16:b8:48:d9:a8:3f: 33:15:09:cc:9c:74:9c:65:45:dd:a5:4e:25:b2:dc: 61:7d:19:99:7f:0d:8c:72:76:6b:83:57:98:12:0a: a9:25:d5:b9:a9:68:f7:8e:b6:ec:51:8a:68:27:5f: fb:94:82:3a:5c:3c:a6:e9:17:c9:98:af:60:9c:f1: b2:c2:6c:6f:83:09:25:a0:7d:71:34:20:49:44:8a: 80:83:67:b9:e5:59:17:99:34:31:32:9f:ad:8b:ed: 5d:5e:6e:b0:9f:7f:e7:a0:bf:2e:6c:95:f8:7d:e8: 24:8e:9f:55:82:72:20:74:9b:b0:cc:6d:c5:e4:f3: fb:ff:fe:5d:0c:b1:29:a7:93:ba:22:a3:6d:fd:d1: 33:23:6d:d2:84:30:bd:1b:f1:59:07:7b:00:f2:83: 35:1d:b3:be:79:83:64:42:fe:e8:5b:55:03:cc:94: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:9A:5B:44:37:BD:08:30:B4:33:6B:6D:84:86:39:96:19:35:FD X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:65:73:41:a5:2f:44:67:1b:d5:6c:ef:29:0e:0d:ea:92:39: 93:b8:53:4d:3a:34:4e:02:33:fe:28:ac:e2:a0:4e:89:bd:8c: de:a6:69:e5:30:83:ab:41:cf:32:f8:cb:ac:85:d4:79:67:ef: 71:54:8b:2e:74:7c:7a:47:db:2e:f7:e1:e5:90:15:dc:38:97: cf:ad:37:ed:b9:5c:17:1b:14:e0:73:f5:83:fb:e3:ee:f6:41: b0:93:7f:3a:74:ea:91:0d:07:0f:b8:1e:8b:77:a1:44:9c:25: ab:6e:fb:f0:57:05:bd:09:0a:58:53:35:3b:8e:9a:b7:48:b4: 4e:ba:25:10:fa:aa:c6:97:0c:8d:a6:c5:00:0c:c4:b3:96:98: cd:ca:c2:d3:ee:a1:37:b2:3c:59:00:2b:1b:fa:c7:59:f9:60: 4e:c0:4f:5a:15:a7:89:28:68:6b:44:ce:2e:3d:8b:67:e2:1b: c2:e6:d3:58:4b:e1:f4:81:d0:e9:3f:e1:79:46:96:4a:25:9d: a4:79:dd:31:c6:ad:5a:5f:7f:1f:62:0f:ad:b5:97:2d:88:9f: c6:0e:cf:95:93:06:2e:74:3e:9d:a4:9d:ea:1b:1b:8a:ad:d8: 26:f9:83:72:0e:10:8d:7a:4b:96:22:4d:5d:64:60:25:20:4d: 07:a4:57:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwOTA2MTYyMDM3WhcNMjUwOTEzMTYyMDM3WjAYMRYwFAYD VQQDEw02OGJjNWY1Ni1jMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHbyutR819DlaZiWEUlBp2mXpJ+PNtLsO+aVOhWSniaR5aVP8AVgn1M0DDlf i8zqpRm/0xQx5oNla5FAuZJmRYhMYeo0a/QJrCuyuEts7BVj8rsWuEjZqD8zFQnM nHScZUXdpU4lstxhfRmZfw2McnZrg1eYEgqpJdW5qWj3jrbsUYpoJ1/7lII6XDym 6RfJmK9gnPGywmxvgwkloH1xNCBJRIqAg2e55VkXmTQxMp+ti+1dXm6wn3/noL8u bJX4fegkjp9VgnIgdJuwzG3F5PP7//5dDLEpp5O6IqNt/dEzI23ShDC9G/FZB3sA 8oM1HbO+eYNkQv7oW1UDzJQkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6kmltE N70IMLQza22EhjmWGTX9MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ZXNBpS9EZxvVbO8pDg3qkjmTuFNNOjROAjP+KKzioE6JvYzepmnl MIOrQc8y+MushdR5Z+9xVIsudHx6R9su9+HlkBXcOJfPrTftuVwXGxTgc/WD++Pu 9kGwk386dOqRDQcPuB6Ld6FEnCWrbvvwVwW9CQpYUzU7jpq3SLROuiUQ+qrGlwyN psUADMSzlpjNysLT7qE3sjxZACsb+sdZ+WBOwE9aFaeJKGhrRM4uPYtn4hvC5tNY S+H0gdDpP+F5RpZKJZ2ked0xxq1aX38fYg+ttZctiJ/GDs+VkwYudD6dpJ3qGxuK rdgm+YNyDhCNekuWIk1dZGAlIE0HpFdJ -----END CERTIFICATE-----Generated at Mon Sep 8 00:11:20 2025 by rpki-client