$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: NGDFPWIqhLzIa+5wkvI9dxDbqOV0yxD99EVA+VbppK0= Subject key identifier: D5:2A:FE:A8:5B:90:2A:15:C3:EA:83:E4:3C:9C:C2:27:73:6F:EB:F3 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E30 Signing time: Thu 18 Sep 2025 17:59:01 +0000 Manifest this update: Thu 18 Sep 2025 17:59:00 +0000 Manifest next update: Thu 25 Sep 2025 17:59:00 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: M7VcRVXeH55oWFD17IbT+zGGYPMCRdfAgOhEOlwA52o=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Sep 18 17:59:00 2025 GMT Not After : Sep 25 17:59:00 2025 GMT Subject: CN=68cc4865-faef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:30:36:64:da:f6:8c:0e:5d:01:e9:9f:6a: 57:6a:db:f6:34:21:01:e1:b1:b7:bf:16:8a:a4:55: 55:28:8a:e4:e2:74:d7:ad:91:25:e6:8f:a7:03:d7: a9:b6:f2:45:43:19:55:81:30:fe:b2:7b:a4:bc:99: 7e:d8:8d:5d:9f:8a:2f:10:fc:c8:86:77:60:18:f1: c8:ad:2c:e7:35:f1:0a:1f:13:70:cf:65:25:2a:c8: ab:cb:09:39:58:7e:db:a4:09:4e:f6:0b:e3:09:5a: 2f:03:1d:30:1c:41:98:74:c4:ec:fc:fb:9c:6a:15: 95:93:97:f0:19:e3:c1:34:1b:52:da:4b:f6:98:fc: e6:4d:92:7d:9b:d5:5a:94:cf:12:98:f7:0a:79:34: cb:57:f5:8c:36:87:f0:3d:d7:da:68:4d:77:2a:7e: da:d9:af:4a:b2:57:8c:4b:f1:f7:12:6b:94:d7:f2: d0:f0:e0:81:01:28:2e:da:98:a5:b4:21:07:a8:50: c4:b4:52:d7:84:73:2b:80:ba:a6:91:eb:17:53:5d: 74:51:d3:de:f1:f1:eb:84:49:d8:23:72:0e:d9:74: fc:8b:49:61:ff:e4:c7:a0:0a:34:a5:30:7c:a4:41: 84:6d:16:25:1a:9f:19:1e:cd:1b:ef:31:87:6e:9d: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:FE:A8:5B:90:2A:15:C3:EA:83:E4:3C:9C:C2:27:73:6F:EB:F3 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e2:0c:77:4e:2e:70:d4:7e:ba:67:4d:80:1f:7a:70:47:15: 8a:a8:9c:87:95:1d:1e:bb:21:b7:f9:09:26:2a:45:b6:8d:20: fb:0f:8b:99:4a:36:04:db:f3:20:a0:37:1c:e9:63:a9:74:e5: e3:03:d4:97:3a:9f:81:0a:43:46:2f:c0:3a:1d:92:0b:ec:ec: 03:df:c9:03:c1:be:fa:81:2b:ae:9b:4d:8d:46:67:0d:16:91: 59:f5:f8:34:1b:f9:c5:67:9d:13:73:5c:8d:24:7c:b4:c3:9e: 2e:a7:8f:95:99:ad:34:1c:10:ae:12:6a:c0:16:3b:bd:27:d3: 87:66:33:34:1e:e8:d7:8f:09:a6:73:f4:29:54:bf:d8:a2:5e: 73:19:06:49:3a:c9:11:68:cc:2e:49:5c:66:5b:b5:25:f7:3d: bc:11:3e:92:b0:f4:13:be:e6:c9:36:ff:14:31:82:f5:3e:a6: 66:98:c7:c2:bb:6c:0d:46:c7:c9:ae:9d:24:c6:ed:f9:6d:02: 8a:70:a1:6d:a0:fa:78:3c:e1:38:d8:3e:a9:07:37:e6:f9:0d: 16:16:6e:c1:ae:d5:30:af:e0:8a:a8:4d:d3:d2:5e:cf:b2:d4: 06:f5:65:5b:57:de:cc:19:f6:2d:74:e8:9a:49:01:0a:91:77: d4:d7:de:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUwOTE4MTc1OTAwWhcNMjUwOTI1MTc1OTAwWjAYMRYwFAYD VQQDEw02OGNjNDg2NS1mYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG0wNmTa9owOXQHpn2pXatv2NCEB4bG3vxaKpFVVKIrk4nTXrZEl5o+nA9ep tvJFQxlVgTD+snukvJl+2I1dn4ovEPzIhndgGPHIrSznNfEKHxNwz2UlKsirywk5 WH7bpAlO9gvjCVovAx0wHEGYdMTs/PucahWVk5fwGePBNBtS2kv2mPzmTZJ9m9Va lM8SmPcKeTTLV/WMNofwPdfaaE13Kn7a2a9KsleMS/H3EmuU1/LQ8OCBASgu2pil tCEHqFDEtFLXhHMrgLqmkesXU110UdPe8fHrhEnYI3IO2XT8i0lh/+THoAo0pTB8 pEGEbRYlGp8ZHs0b7zGHbp3mvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUq/qhb kCoVw+qD5Dycwidzb+vzMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl4gx3Ti5w1H66Z02AH3pwRxWKqJyHlR0euyG3+QkmKkW2jSD7D4uZ SjYE2/MgoDcc6WOpdOXjA9SXOp+BCkNGL8A6HZIL7OwD38kDwb76gSuum02NRmcN FpFZ9fg0G/nFZ50Tc1yNJHy0w54up4+Vma00HBCuEmrAFju9J9OHZjM0HujXjwmm c/QpVL/Yol5zGQZJOskRaMwuSVxmW7Ul9z28ET6SsPQTvubJNv8UMYL1PqZmmMfC u2wNRsfJrp0kxu35bQKKcKFtoPp4POE42D6pBzfm+Q0WFm7BrtUwr+CKqE3T0l7P stQG9WVbV97MGfYtdOiaSQEKkXfU197m -----END CERTIFICATE-----Generated at Thu Sep 18 22:14:25 2025 by rpki-client