$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: C3VviU2cgCB9UQOx+oUQqq7Y35hv+Zy9CVRtEJkHZrk= Subject key identifier: 25:69:E4:69:5A:15:16:CC:4D:D9:49:78:FC:A1:EF:2B:E2:E2:6C:EC Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 01D4 Signing time: Sat 06 Sep 2025 15:57:59 +0000 Manifest this update: Sat 06 Sep 2025 15:57:58 +0000 Manifest next update: Sat 13 Sep 2025 15:57:58 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: Wky47fFRUOM5Kv8/m7WFzesLULosGiskvXYnRc1eHVU=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Sep 6 15:57:58 2025 GMT Not After : Sep 13 15:57:58 2025 GMT Subject: CN=68bc5a06-7ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:8a:2f:76:e2:6a:d8:4e:d9:d0:42:fc:59: dc:78:02:bb:94:fb:38:fb:cd:b9:57:8e:4b:e2:63: b1:28:0c:83:2d:c6:f2:7a:9d:bf:43:a8:3d:7e:36: 89:e5:ee:28:33:d6:e6:8a:af:3c:50:d0:5d:65:df: 26:6f:65:22:01:d6:90:af:28:78:63:01:d9:74:4a: e5:49:71:73:7e:c8:9b:96:4b:73:8c:41:0f:de:42: 82:e4:bd:6a:49:51:df:12:fb:05:7c:a4:29:3b:85: a9:4e:3e:e9:26:50:e9:3d:b6:50:52:0c:4a:30:16: 53:3f:68:5c:b2:bc:3d:8c:8e:d8:0b:01:12:39:a8: 7c:a5:dc:57:93:73:08:93:f3:be:1b:f8:36:fb:6b: 1d:e6:0d:b5:19:d8:c5:d3:01:85:d0:41:30:b6:61: ee:27:df:9a:05:d8:2f:21:be:35:3f:f2:b9:cc:0a: 66:1a:36:c7:f1:73:ee:b1:c2:ed:3b:63:0a:48:a9: 06:17:39:5f:66:3f:06:b7:bb:03:da:8f:b6:47:f2: 21:06:09:ad:ed:37:9f:4d:89:d9:b6:e7:6b:f0:46: a7:bb:ed:70:41:c7:c2:5e:6a:28:0f:fd:7a:c3:72: 28:a4:56:61:7b:99:8f:d0:cf:ec:6e:f2:a8:c8:48: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:69:E4:69:5A:15:16:CC:4D:D9:49:78:FC:A1:EF:2B:E2:E2:6C:EC X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:56:28:36:a5:bd:27:f0:20:97:36:53:6d:38:a4:84:21:23: be:c3:42:16:28:1d:6b:11:9f:b2:6c:6e:9a:fe:59:aa:f8:cb: a8:3f:95:63:a9:42:d7:b8:45:55:cb:33:1b:b2:0a:ed:a7:5a: 99:de:91:a0:37:39:af:ea:ed:6e:14:0c:ef:c6:a4:ce:13:f7: c3:79:0d:a3:41:05:03:b7:14:94:df:f4:04:5c:1e:0a:b8:44: 5f:c2:90:e6:bf:44:dd:62:37:e7:7d:b8:db:d5:dc:34:2f:f3: 22:2e:e5:e4:2f:12:47:ac:22:c3:36:4d:05:c2:ba:88:de:1d: 45:0d:a8:9f:db:0a:53:0b:9e:20:30:07:e9:08:17:2c:1a:dc: a4:7d:15:38:ba:45:93:d3:fb:a0:8c:ca:82:f6:d6:ab:d5:be: 8c:b3:12:e1:4f:e2:a7:e3:cc:1e:5e:b4:b4:d7:21:a8:f8:40: 27:d0:1a:72:d2:dd:56:f0:a9:e6:b1:79:cb:4a:08:64:46:77: 0a:37:ba:bd:fc:b4:ea:ff:e8:e1:75:98:1f:6d:2a:7f:43:65: 5d:e5:f0:0f:f0:e6:54:2c:f3:5e:75:8e:08:a4:ba:64:23:f0: f2:87:63:1e:0b:04:d1:b1:c1:17:76:a7:59:80:22:64:75:1a: a1:c1:5f:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUwOTA2MTU1NzU4WhcNMjUwOTEzMTU1NzU4WjAYMRYwFAYD VQQDEw02OGJjNWEwNi03ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJiKL3biathO2dBC/FnceAK7lPs4+825V45L4mOxKAyDLcbyep2/Q6g9fjaJ 5e4oM9bmiq88UNBdZd8mb2UiAdaQryh4YwHZdErlSXFzfsiblktzjEEP3kKC5L1q SVHfEvsFfKQpO4WpTj7pJlDpPbZQUgxKMBZTP2hcsrw9jI7YCwESOah8pdxXk3MI k/O+G/g2+2sd5g21GdjF0wGF0EEwtmHuJ9+aBdgvIb41P/K5zApmGjbH8XPuscLt O2MKSKkGFzlfZj8Gt7sD2o+2R/IhBgmt7TefTYnZtudr8Eanu+1wQcfCXmooD/16 w3IopFZhe5mP0M/sbvKoyEjDmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVp5Gla FRbMTdlJePyh7yvi4mzsMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACVig2pb0n8CCXNlNtOKSEISO+w0IWKB1rEZ+ybG6a/lmq+MuoP5Vj qULXuEVVyzMbsgrtp1qZ3pGgNzmv6u1uFAzvxqTOE/fDeQ2jQQUDtxSU3/QEXB4K uERfwpDmv0TdYjfnfbjb1dw0L/MiLuXkLxJHrCLDNk0FwrqI3h1FDaif2wpTC54g MAfpCBcsGtykfRU4ukWT0/ugjMqC9tar1b6MsxLhT+Kn48weXrS01yGo+EAn0Bpy 0t1W8KnmsXnLSghkRncKN7q9/LTq/+jhdZgfbSp/Q2Vd5fAP8OZULPNedY4IpLpk I/Dyh2MeCwTRscEXdqdZgCJkdRqhwV9W -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:05 2025 by rpki-client