$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: pjk3lBiDUF5y5/zO7hjtRY3AvSHl+OXy6jQjdb7CeJM= Subject key identifier: 44:D1:36:73:F7:30:DF:B2:B3:ED:2A:B4:99:89:33:C8:BE:5F:2B:6D Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02EC Signing time: Tue 09 Sep 2025 01:22:41 +0000 Manifest this update: Tue 09 Sep 2025 01:22:41 +0000 Manifest next update: Tue 16 Sep 2025 01:22:41 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: 2w30RqtHuNNvSe2mA4/0Xj0HkRNPEMd1os1uGKN+cPk=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: wBj04byRChV0petmdr4Ke9cr8WzCiaxcwGuAnk1TvDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Sep 9 01:22:41 2025 GMT Not After : Sep 16 01:22:41 2025 GMT Subject: CN=68bf8161-7a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:3d:12:99:4c:4b:a8:36:3a:93:ef:5c:95: db:02:04:e4:03:e5:8c:25:bc:00:8c:50:b2:ab:3e: 6e:5b:74:f3:96:09:df:06:96:0b:ee:20:7f:75:63: 52:46:38:21:ba:3a:2a:33:f9:8e:7d:5c:24:c7:5c: 13:ed:e5:25:48:4f:97:e0:54:75:85:ea:eb:7b:c8: ae:e0:fa:ff:ef:b4:01:35:65:92:bc:9c:72:99:73: aa:5e:19:b7:75:76:70:2e:2a:31:aa:fd:73:de:f6: c9:88:04:42:30:10:1a:86:78:9e:85:cc:3a:05:9b: 95:10:14:77:b8:d7:68:35:c4:b0:0b:dd:7b:49:9b: ce:e3:95:8e:d1:41:08:e8:3e:8d:df:a0:b6:cd:e0: 3e:37:2b:59:0d:a7:bb:ca:d6:c7:a8:06:16:d2:38: 62:07:9e:93:47:d0:e1:8c:ab:00:7c:64:5a:1e:10: 11:31:29:16:37:de:5b:f7:70:2e:60:fa:02:94:be: a1:56:a5:f8:b1:4e:80:87:75:db:61:b0:89:f4:d1: d9:a7:a7:5a:aa:46:da:20:84:f6:05:d6:4d:5a:1c: c2:ca:04:e7:4d:2c:44:cb:58:e1:6a:5c:93:89:fd: 80:dc:72:fd:e2:f0:01:6e:dd:75:02:b4:59:0f:f2: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:36:73:F7:30:DF:B2:B3:ED:2A:B4:99:89:33:C8:BE:5F:2B:6D X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c4:31:36:49:16:69:ec:7f:3c:fa:f2:73:47:ce:79:9d:ad: 81:bc:36:eb:ab:f8:09:df:3e:09:2e:6f:17:52:be:5f:43:6c: 5d:8c:ec:b0:2f:58:76:a7:c3:36:47:09:bd:23:88:13:7d:88: 26:04:ac:41:f5:d9:a9:f7:55:f4:b9:a2:02:9a:73:43:1b:a8: 69:4c:3a:4e:42:28:e7:e1:b5:ac:82:6e:95:df:8e:65:58:aa: f0:77:98:1e:fb:b0:45:60:df:4f:95:b9:87:c2:6d:20:05:c1: 90:de:11:3a:0e:24:99:0c:1e:b9:00:36:14:b5:36:bb:02:47: d0:11:40:60:94:2c:2f:ce:93:dd:54:d4:97:be:da:bb:13:ba: 83:06:40:d0:e5:5e:50:df:77:2c:c0:a0:b5:f5:95:c6:72:a4: 20:8d:50:8d:e9:64:44:ca:e4:ec:b0:16:12:21:65:a3:85:45: 10:e3:d3:90:98:2d:c7:d7:92:a5:38:c4:59:1f:5e:c3:ed:e3: 34:8f:2c:0a:bf:bf:0b:b5:11:48:48:8e:eb:31:0e:50:2e:6a: 41:e8:e6:65:59:64:5d:52:61:de:ac:15:2c:86:4a:dc:d6:ef: 97:74:8b:13:4d:4f:56:a2:6d:03:9d:c4:61:53:75:3d:dc:aa: 39:61:14:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwOTA5MDEyMjQxWhcNMjUwOTE2MDEyMjQxWjAYMRYwFAYD VQQDEw02OGJmODE2MS03YTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM09EplMS6g2OpPvXJXbAgTkA+WMJbwAjFCyqz5uW3TzlgnfBpYL7iB/dWNS RjghujoqM/mOfVwkx1wT7eUlSE+X4FR1herre8iu4Pr/77QBNWWSvJxymXOqXhm3 dXZwLioxqv1z3vbJiARCMBAahniehcw6BZuVEBR3uNdoNcSwC917SZvO45WO0UEI 6D6N36C2zeA+NytZDae7ytbHqAYW0jhiB56TR9DhjKsAfGRaHhARMSkWN95b93Au YPoClL6hVqX4sU6Ah3XbYbCJ9NHZp6daqkbaIIT2BdZNWhzCygTnTSxEy1jhalyT if2A3HL94vABbt11ArRZD/Le8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETRNnP3 MN+ys+0qtJmJM8i+XyttMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtxDE2SRZp7H88+vJzR855na2BvDbrq/gJ3z4JLm8XUr5fQ2xdjOyw L1h2p8M2Rwm9I4gTfYgmBKxB9dmp91X0uaICmnNDG6hpTDpOQijn4bWsgm6V345l WKrwd5ge+7BFYN9PlbmHwm0gBcGQ3hE6DiSZDB65ADYUtTa7AkfQEUBglCwvzpPd VNSXvtq7E7qDBkDQ5V5Q33cswKC19ZXGcqQgjVCN6WREyuTssBYSIWWjhUUQ49OQ mC3H15KlOMRZH17D7eM0jywKv78LtRFISI7rMQ5QLmpB6OZlWWRdUmHerBUshkrc 1u+XdIsTTU9Wom0DncRhU3U93Ko5YRR9 -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:05 2025 by rpki-client