$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft File: qJeuj_IUHLM06qS4gcw8VlbUdDY.mft (raw, json) Hash identifier: yqQftZWTYXZ2u/Nxw5lpqoEoMwnCWExupI04iWang5w= Subject key identifier: E3:0F:57:CD:D8:7A:ED:B2:E5:DA:04:DE:CE:02:BD:62:A8:75:95:3B Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 Certificate issuer: /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft Manifest number: 2D Signing time: Fri 05 Sep 2025 02:09:35 +0000 Manifest this update: Fri 05 Sep 2025 02:09:34 +0000 Manifest next update: Fri 12 Sep 2025 02:09:34 +0000 Files and hashes: 1: qJeuj_IUHLM06qS4gcw8VlbUdDY.crl (hash: 0pqw64YVIaqVkvJf9uRcK0On2FKMkcGzlNDFvc1JCeU=) 2: 87FB8F3E614711F0AA20F35DC4F9AE02.roa (hash: yD4zj/FSGq2GLKWAdwcvJN5hsc4yiyL8iUPyrpIYCCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Validity Not Before: Sep 5 02:09:34 2025 GMT Not After : Sep 12 02:09:34 2025 GMT Subject: CN=68ba465f-74a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:01:4f:66:0e:b4:38:6b:f8:05:db:cf:86: fe:e0:3d:8a:2c:78:4b:38:bf:8c:a3:4e:3f:2a:21: be:4f:8d:b3:9f:e3:9e:a8:ac:5d:8d:87:ec:63:c3: 6a:d8:6b:6e:48:8b:22:7c:3d:6e:e1:54:5b:de:08: 10:ac:7d:45:6b:04:93:6f:10:7a:4d:32:ba:36:61: 02:9c:90:2c:65:96:ab:80:e0:96:6b:86:19:e3:5e: 13:01:d5:ec:73:d8:68:bd:9f:97:b9:c1:cc:53:f9: d6:85:59:bd:3e:2b:44:aa:32:a1:33:b1:8c:01:57: 75:d5:b1:23:3e:2a:18:2c:be:44:79:62:51:b2:c7: 94:6b:91:89:12:cc:69:0d:6c:bd:1d:d8:8a:e5:cb: 3c:ba:65:8e:f6:79:4d:aa:c8:a3:7c:c0:36:19:54: cf:0a:56:61:62:87:87:0d:ff:e4:f3:ed:b6:25:fb: c4:32:7b:d1:09:87:0e:25:0a:a0:eb:03:4e:83:88: ff:23:f3:cf:c0:e4:d3:9a:e7:66:45:b3:e4:a2:39: 88:e0:97:67:7d:9c:77:dc:70:54:24:be:9e:3d:40: 68:dc:aa:9d:d1:f1:d6:37:85:bc:72:31:7d:a0:53: 93:9b:7b:6c:13:fd:3f:e2:61:8d:98:1f:ea:65:e8: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0F:57:CD:D8:7A:ED:B2:E5:DA:04:DE:CE:02:BD:62:A8:75:95:3B X509v3 Authority Key Identifier: keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c5:f6:0f:db:13:9c:d1:19:7d:eb:e4:43:ac:61:22:f0:76: 76:f1:14:a6:7c:5c:69:da:9c:07:24:2b:ca:63:4a:81:7b:3e: d6:1e:49:ac:ed:5f:20:da:60:12:27:2d:fd:3a:bc:fc:50:d0: bf:44:d7:83:19:a4:1b:93:83:e4:2f:f9:5b:58:19:19:4b:d0: ef:a9:5b:46:81:28:69:eb:d8:ec:61:9e:f4:1c:5f:97:1a:ad: 92:85:43:5f:fd:42:67:71:0f:f2:cf:bb:e5:20:dc:53:43:8f: 42:ce:57:22:36:2b:9f:4b:59:01:4b:37:b1:85:b6:97:cf:4e: 7b:08:26:5d:0d:f4:e8:3e:10:d1:74:45:e2:69:c1:d3:5e:66: 49:92:91:ff:89:fb:58:43:87:74:61:ae:1d:f1:4e:22:0c:45: 62:63:b0:b2:8a:a8:bb:ab:9c:71:a6:d7:b8:dc:66:1b:ca:af: 54:90:07:d3:c4:a2:71:ed:ae:a3:90:d9:fe:39:41:b2:e6:66: 13:3e:c3:c9:77:22:b0:ab:51:8c:1c:2f:96:2e:3f:2c:18:4e: 2f:8b:8f:2d:10:14:5e:b2:48:92:4d:d7:65:dc:21:ed:cd:67: 79:b9:f8:15:68:bb:1d:e4:e2:f8:5d:74:3d:ca:fd:b0:11:29: 1b:0e:7b:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjJCODExMC8GA1UEBRMoQTg5N0FFOEZGMjE0MUNCMzM0RUFBNEI4ODFDQzNDNTY1 NkQ0NzQzNjAeFw0yNTA5MDUwMjA5MzRaFw0yNTA5MTIwMjA5MzRaMBgxFjAUBgNV BAMTDTY4YmE0NjVmLTc0YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3fAFPZg60OGv4BdvPhv7gPYoseEs4v4yjTj8qIb5PjbOf456orF2Nh+xjw2rY a25IiyJ8PW7hVFveCBCsfUVrBJNvEHpNMro2YQKckCxllquA4JZrhhnjXhMB1exz 2Gi9n5e5wcxT+daFWb0+K0SqMqEzsYwBV3XVsSM+KhgsvkR5YlGyx5RrkYkSzGkN bL0d2Irlyzy6ZY72eU2qyKN8wDYZVM8KVmFih4cN/+Tz7bYl+8Qye9EJhw4lCqDr A06DiP8j88/A5NOa52ZFs+SiOYjgl2d9nHfccFQkvp49QGjcqp3R8dY3hbxyMX2g U5Obe2wT/T/iYY2YH+pl6IBfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4w9Xzdh6 7bLl2gTezgK9Yqh1lTswHwYDVR0jBBgwFoAUqJeuj/IUHLM06qS4gcw8VlbUdDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCMkI4LzM1ODNFNTg2NTE2 NTExRjBCQzFDQUY3NUM0RjlBRTAyL3FKZXVqX0lVSExNMDZxUzRnY3c4VmxiVWRE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUpldWpfSVVITE0wNnFTNGdjdzhWbGJVZERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC MkI4LzM1ODNFNTg2NTE2NTExRjBCQzFDQUY3NUM0RjlBRTAyL3FKZXVqX0lVSExN MDZxUzRnY3c4VmxiVWREWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALPF9g/bE5zRGX3r5EOsYSLwdnbxFKZ8XGnanAckK8pjSoF7PtYeSazt XyDaYBInLf06vPxQ0L9E14MZpBuTg+Qv+VtYGRlL0O+pW0aBKGnr2OxhnvQcX5ca rZKFQ1/9QmdxD/LPu+Ug3FNDj0LOVyI2K59LWQFLN7GFtpfPTnsIJl0N9Og+ENF0 ReJpwdNeZkmSkf+J+1hDh3Rhrh3xTiIMRWJjsLKKqLurnHGm17jcZhvKr1SQB9PE onHtrqOQ2f45QbLmZhM+w8l3IrCrUYwcL5YuPywYTi+Ljy0QFF6ySJJN12XcIe3N Z3m5+BVoux3k4vhddD3K/bARKRsOe4Q= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:09 2025 by rpki-client