$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: POCAqJHND5OoOzLDRlpWkqB7ievGbzVqSGYvI0F2qE8= Subject key identifier: 1A:6D:D0:EF:1E:05:66:5A:8D:A4:2E:A7:DA:BF:43:07:F7:DF:AB:8B Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 0474 Signing time: Fri 05 Sep 2025 00:24:33 +0000 Manifest this update: Fri 05 Sep 2025 00:24:33 +0000 Manifest next update: Fri 12 Sep 2025 00:24:33 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: f/xMoIfj1GchSfnYFmMoj0Pdkcy34Da2AQWOQe6Gbbg=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: aXuFAPx3sTT3XGxZkToSNXJ/vwo2rNiJs7Ikunvy7v4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Sep 5 00:24:33 2025 GMT Not After : Sep 12 00:24:33 2025 GMT Subject: CN=68ba2dc1-f825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ba:c9:a2:94:80:5e:d8:cb:62:be:2b:47:3e: c4:3d:3d:42:42:a7:3a:cf:54:04:f7:84:c6:dc:0d: 01:c4:50:fc:2c:fc:b8:17:39:92:98:ef:bd:e5:fd: 91:24:6c:54:61:e5:40:33:49:cc:17:f7:70:50:a3: 09:0e:e7:8d:4a:b6:4f:2c:11:96:22:5e:d3:f2:44: 98:d5:8b:82:36:fc:1b:45:0c:64:30:fe:e6:b0:21: f2:75:de:2e:db:18:81:b6:6f:82:f4:bf:9d:f6:88: dc:7e:ae:8b:7b:10:c6:8d:cb:c8:d0:34:03:aa:38: 69:26:4e:01:ca:f0:a2:8c:ae:b3:3e:12:77:c6:8b: 7a:59:bf:e8:a8:e9:7d:5a:f0:74:56:06:24:6b:9c: ba:e0:46:06:c0:88:7d:e1:92:67:4e:90:e6:55:a5: 49:03:ed:55:31:68:75:bc:a5:7e:f1:74:bd:e2:fa: a6:32:8d:f4:db:ff:63:1a:b9:a8:c6:ec:c0:ac:1a: 10:96:b2:a4:13:23:2e:e1:59:e0:d6:2f:8c:3b:08: c6:57:89:3c:af:dd:d5:01:3a:9b:09:fb:45:24:d2: 01:3f:6f:d8:16:12:8e:02:fa:1a:8c:8b:57:fd:ad: 38:d7:65:cc:7e:64:35:b8:37:dc:68:3e:25:f9:26: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6D:D0:EF:1E:05:66:5A:8D:A4:2E:A7:DA:BF:43:07:F7:DF:AB:8B X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:42:57:c6:95:c7:f3:0a:e8:76:f7:63:5f:dd:28:b1:15:11: 3b:b3:f9:e5:ad:4c:59:ad:79:c4:47:0f:65:25:ac:8f:e0:da: ef:53:cd:39:1a:42:4a:ee:ca:9f:c9:92:2a:66:bc:b0:75:58: 95:75:fc:bd:b7:45:bb:8e:a7:a4:a1:15:46:9a:74:82:5c:51: cb:bf:3f:36:37:1e:53:ce:d4:e8:4e:54:f6:c8:c6:63:d1:02: 6c:69:50:3c:a7:46:bc:e9:09:5c:d0:7c:fe:87:28:33:d0:02: f3:d8:fe:e1:8d:62:22:26:5d:f9:7b:bc:df:19:fe:6b:54:5d: 5d:59:08:19:06:dd:77:e4:9f:3d:0e:9f:07:e7:76:11:d8:e4: 01:9a:6f:f0:47:af:ea:23:bd:45:e5:bf:fe:e0:05:0f:99:1e: 42:23:10:60:1a:c5:48:b8:44:14:8e:da:a6:1c:93:4d:a8:03: 9d:a7:3d:d5:10:34:5a:ad:74:3f:f8:4c:83:65:3a:24:d1:24: 7d:c1:84:b0:3a:8f:c0:23:b4:b6:28:f1:9d:72:cb:90:08:81: 8a:15:c1:21:d2:5d:7e:f7:70:47:6a:a5:18:00:0a:a8:97:3a: c9:c3:d1:17:51:8d:c4:c0:bf:26:e8:3c:b4:9e:e6:cd:56:df: ab:86:93:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjUwOTA1MDAyNDMzWhcNMjUwOTEyMDAyNDMzWjAYMRYwFAYD VQQDEw02OGJhMmRjMS1mODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LrJopSAXtjLYr4rRz7EPT1CQqc6z1QE94TG3A0BxFD8LPy4FzmSmO+95f2R JGxUYeVAM0nMF/dwUKMJDueNSrZPLBGWIl7T8kSY1YuCNvwbRQxkMP7msCHydd4u 2xiBtm+C9L+d9ojcfq6LexDGjcvI0DQDqjhpJk4ByvCijK6zPhJ3xot6Wb/oqOl9 WvB0VgYka5y64EYGwIh94ZJnTpDmVaVJA+1VMWh1vKV+8XS94vqmMo302/9jGrmo xuzArBoQlrKkEyMu4Vng1i+MOwjGV4k8r93VATqbCftFJNIBP2/YFhKOAvoajItX /a0412XMfmQ1uDfcaD4l+SYdXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpt0O8e BWZajaQup9q/Qwf336uLMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIQlfGlcfzCuh292Nf3SixFRE7s/nlrUxZrXnERw9lJayP4NrvU805 GkJK7sqfyZIqZrywdViVdfy9t0W7jqekoRVGmnSCXFHLvz82Nx5TztToTlT2yMZj 0QJsaVA8p0a86Qlc0Hz+hygz0ALz2P7hjWIiJl35e7zfGf5rVF1dWQgZBt135J89 Dp8H53YR2OQBmm/wR6/qI71F5b/+4AUPmR5CIxBgGsVIuEQUjtqmHJNNqAOdpz3V EDRarXQ/+EyDZTok0SR9wYSwOo/AI7S2KPGdcsuQCIGKFcEh0l1+93BHaqUYAAqo lzrJw9EXUY3EwL8m6Dy0nubNVt+rhpNK -----END CERTIFICATE-----Generated at Sat Sep 6 07:01:06 2025 by rpki-client