$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: Q7s33aVhQd7Yh5BZqK4NHZ01M4fMULGLmJdcDERXs5Q= Subject key identifier: C9:4F:D1:6D:BB:D6:20:BE:31:BD:17:6E:8A:C4:F6:4A:91:C4:64:D0 Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 07DD Signing time: Thu 18 Sep 2025 21:21:54 +0000 Manifest this update: Thu 18 Sep 2025 21:21:54 +0000 Manifest next update: Thu 25 Sep 2025 21:21:54 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: O6L7lFbu+k2prrbN7VM9B6fM7GX41QalnVcNeNljEpY=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Sep 18 21:21:54 2025 GMT Not After : Sep 25 21:21:54 2025 GMT Subject: CN=68cc77f2-20be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dd:8d:a4:5c:75:dc:5a:c0:f5:c8:5f:83:41: 60:c8:ad:f9:29:35:af:0c:d8:ff:41:ed:b1:6d:03: 13:74:39:5c:11:81:50:4b:36:a0:e9:b6:3f:f7:da: ef:c7:cd:1e:a1:16:8b:74:eb:22:5a:6c:3b:21:1a: 1f:d0:93:8b:21:01:28:f8:7a:91:7b:17:1e:40:b8: 3f:1f:8f:c0:c5:93:78:a5:3d:f8:42:29:c5:f3:f0: 65:61:e8:2d:d6:48:d1:60:bd:5f:70:67:3a:34:91: 92:83:8a:6b:40:e8:b7:5e:97:78:86:f1:63:52:a4: 9e:d0:74:5d:24:a9:72:87:95:d6:0d:0f:4a:3a:14: 5b:1f:9d:ea:f1:28:6a:0b:3a:9f:89:a1:c9:48:dd: bc:4f:50:83:38:c3:07:49:b1:4e:a8:ce:4c:76:e9: fe:d4:84:0b:b2:e1:98:d1:a4:04:19:16:a4:4d:6e: 06:c9:0c:68:1b:35:20:0b:21:05:33:ea:b5:21:60: 32:17:0b:d8:d6:b4:07:b5:ca:d3:e5:da:c5:be:2b: 6d:3d:c7:fc:96:a9:6a:81:18:49:2f:25:21:4e:0a: 7c:9f:e0:95:91:1d:26:d3:a3:27:9a:c6:cb:71:cd: 56:8b:c8:58:ec:a8:f1:3a:9e:1c:92:57:c0:89:74: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4F:D1:6D:BB:D6:20:BE:31:BD:17:6E:8A:C4:F6:4A:91:C4:64:D0 X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d7:59:08:5b:23:51:f3:50:dd:28:31:96:46:5e:95:9e:79: 4e:f0:b0:65:59:a8:5a:58:c1:5d:8f:29:98:f3:88:13:50:7c: b7:cd:19:5b:4d:e3:1d:7b:f1:2f:db:93:17:00:76:54:9d:76: d8:11:6b:3d:c1:f2:ba:9c:52:76:b2:7c:05:54:d7:66:ba:ed: 0e:d5:4d:3d:dc:90:23:24:29:4d:3b:44:97:40:b4:f6:21:6d: d3:16:dc:b5:09:2b:f1:09:67:fb:90:27:42:cb:16:8f:39:fc: 2a:50:97:ff:09:61:87:68:91:c5:85:c9:2f:a3:4a:0b:70:24: df:6a:7c:c3:f0:ee:83:46:50:e1:79:f5:0e:e7:3a:32:b0:14: 85:34:dc:ab:b2:58:f5:ff:47:91:0e:26:50:d0:00:84:3a:14: d0:ac:79:1e:fb:d2:07:28:1e:67:c7:95:bf:57:6d:d9:5b:8f: 0b:8c:86:cb:9b:3c:a4:66:ce:00:89:c2:81:c1:b8:82:64:06: ef:20:47:1a:3e:15:6f:d5:e0:fe:e0:e9:ac:41:e0:2e:39:0d: 53:73:64:42:ac:5c:dc:9c:19:a5:7a:e3:b1:5e:1e:a6:35:9e: 18:b1:6b:4c:b0:d0:6e:78:93:64:d6:3a:2c:e6:1e:ed:e6:13: 37:82:76:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUwOTE4MjEyMTU0WhcNMjUwOTI1MjEyMTU0WjAYMRYwFAYD VQQDEw02OGNjNzdmMi0yMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5N2NpFx13FrA9chfg0FgyK35KTWvDNj/Qe2xbQMTdDlcEYFQSzag6bY/99rv x80eoRaLdOsiWmw7IRof0JOLIQEo+HqRexceQLg/H4/AxZN4pT34QinF8/BlYegt 1kjRYL1fcGc6NJGSg4prQOi3Xpd4hvFjUqSe0HRdJKlyh5XWDQ9KOhRbH53q8Shq CzqfiaHJSN28T1CDOMMHSbFOqM5Mdun+1IQLsuGY0aQEGRakTW4GyQxoGzUgCyEF M+q1IWAyFwvY1rQHtcrT5drFvittPcf8lqlqgRhJLyUhTgp8n+CVkR0m06MnmsbL cc1Wi8hY7KjxOp4cklfAiXS/FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlP0W27 1iC+Mb0XborE9kqRxGTQMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA111kIWyNR81DdKDGWRl6VnnlO8LBlWahaWMFdjymY84gTUHy3zRlb TeMde/Ev25MXAHZUnXbYEWs9wfK6nFJ2snwFVNdmuu0O1U093JAjJClNO0SXQLT2 IW3TFty1CSvxCWf7kCdCyxaPOfwqUJf/CWGHaJHFhckvo0oLcCTfanzD8O6DRlDh efUO5zoysBSFNNyrslj1/0eRDiZQ0ACEOhTQrHke+9IHKB5nx5W/V23ZW48LjIbL mzykZs4AicKBwbiCZAbvIEcaPhVv1eD+4OmsQeAuOQ1Tc2RCrFzcnBmleuOxXh6m NZ4YsWtMsNBueJNk1jos5h7t5hM3gnax -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:57 2025 by rpki-client