$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: VCtdNLX0dCzovU76x2oXCC9xTjLLH2zuPh1G9giZ05Y= Subject key identifier: DC:72:52:4D:2D:28:DF:7C:DC:04:3A:49:19:D2:72:7D:6A:C8:8F:7F Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0759 Signing time: Fri 22 Aug 2025 22:04:50 +0000 Manifest this update: Fri 22 Aug 2025 22:04:50 +0000 Manifest next update: Fri 29 Aug 2025 22:04:50 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: Fym3cfTjOMLKYM0MY6DdScfuPTzLKHr+99XoZFpSCd0=) 2: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) 3: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: N+wwXOK9gDgn7rK/IyLVoV5vGXUsHM3EL0gIoN4TwM4=) 4: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: kwV8hhlNLXw0fqo5GXhukzzyuE6LyZO1Y35yZzYd4Pk=) 5: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: xcv2mpFGfangjKYY2vbEm6RbSQ1lS7sMyZ3S+/1HCdM=) 6: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: kAk6kjL+iK4SBo72pkG0PU0h0fM1Y3JSaas9S8BeqPU=) 7: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: lXMyXIdfvbwQROqw/pE3PgGn2BRu07uMklJZGHe93PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Aug 22 22:04:50 2025 GMT Not After : Aug 29 22:04:50 2025 GMT Subject: CN=68a8e982-b62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:65:97:d7:78:ad:cb:02:9e:77:bb:c8:78: ae:54:f1:20:8d:b2:2a:5b:f1:48:12:6b:1e:d7:8b: 00:9e:7c:fd:d6:99:e4:c6:8f:0b:16:15:a2:17:35: e8:3b:35:b2:00:d2:8d:5d:8e:15:b3:1b:7b:3e:48: 87:67:39:5e:b5:34:1c:8d:ac:47:6e:6d:d6:33:42: cf:ac:4a:04:ba:a8:61:fc:bf:a7:7e:00:73:25:bc: f2:14:c8:92:e0:aa:3e:de:6d:21:bf:42:17:22:b1: 77:ef:e8:1f:55:84:48:2b:d1:aa:4e:a0:6d:a5:0d: d1:32:38:0a:04:f9:3e:ea:29:a0:db:d4:4d:13:ec: 39:8d:0d:c6:b8:4a:d6:8a:20:b3:5b:16:81:4c:cb: ed:02:2c:bc:bb:7d:5b:21:54:43:d3:21:36:ca:4d: 88:78:57:6f:d2:50:56:78:37:c9:59:b5:fe:af:ef: ec:f7:f0:84:63:77:67:a2:f6:cf:31:e3:6a:60:1b: c6:09:c2:f9:01:d5:ad:bd:2b:56:4b:d1:ca:27:b3: 82:55:12:0a:79:1f:53:c2:e0:f2:43:ba:34:33:31: f1:af:89:af:be:ba:c1:ae:5b:5a:13:94:60:55:a8: 46:e9:3a:7b:ba:0a:34:e9:e8:6b:51:82:28:b2:95: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:72:52:4D:2D:28:DF:7C:DC:04:3A:49:19:D2:72:7D:6A:C8:8F:7F X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:bf:3d:50:94:94:83:f8:bf:bc:a9:1a:2a:f3:a5:57:3f:a9: d8:cb:a7:07:d2:72:c9:6c:b7:04:62:8e:07:7b:96:6b:52:44: 9d:cf:83:9d:1e:f4:65:b6:49:b4:d1:e7:1e:6e:06:a4:70:21: c4:05:14:43:59:be:6e:07:a1:6f:06:da:16:80:4e:63:f3:6d: a9:67:c7:18:aa:95:ed:d8:e5:ca:a0:20:ff:44:70:40:a5:f6: d9:e3:7f:cd:a2:f1:d5:78:a2:4b:05:0b:2c:57:66:4c:3f:a4: 2e:29:86:ab:13:98:bb:02:88:21:71:86:aa:1b:e1:82:6d:71: 37:c3:8f:1d:9e:02:87:6f:23:e3:05:2e:67:f1:b9:7f:78:56: 0e:8e:44:1d:11:bf:62:bc:7e:24:67:8d:74:92:ce:13:96:8c: 92:1f:a3:2d:71:59:c4:50:31:58:1d:ee:68:a1:89:e3:18:3a: f0:91:80:8b:2e:c6:d9:dc:8e:b0:2a:e3:c9:8e:ae:63:69:8a: 2a:07:a5:6e:e9:ca:5f:44:f5:0a:8c:9b:d3:69:78:0c:63:87: 8f:d0:48:b0:39:c3:20:e2:69:32:13:8b:2e:7c:ca:0d:ac:a0: 21:97:44:fd:84:4d:18:8f:df:af:bb:c8:11:f1:11:98:93:97: f1:57:76:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwODIyMjIwNDUwWhcNMjUwODI5MjIwNDUwWjAYMRYwFAYD VQQDEw02OGE4ZTk4Mi1iNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5Fll9d4rcsCnne7yHiuVPEgjbIqW/FIEmse14sAnnz91pnkxo8LFhWiFzXo OzWyANKNXY4Vsxt7PkiHZzletTQcjaxHbm3WM0LPrEoEuqhh/L+nfgBzJbzyFMiS 4Ko+3m0hv0IXIrF37+gfVYRIK9GqTqBtpQ3RMjgKBPk+6img29RNE+w5jQ3GuErW iiCzWxaBTMvtAiy8u31bIVRD0yE2yk2IeFdv0lBWeDfJWbX+r+/s9/CEY3dnovbP MeNqYBvGCcL5AdWtvStWS9HKJ7OCVRIKeR9TwuDyQ7o0MzHxr4mvvrrBrltaE5Rg VahG6Tp7ugo06ehrUYIospXO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxyUk0t KN983AQ6SRnScn1qyI9/MB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtvz1QlJSD+L+8qRoq86VXP6nYy6cH0nLJbLcEYo4He5ZrUkSdz4Od HvRltkm00ecebgakcCHEBRRDWb5uB6FvBtoWgE5j822pZ8cYqpXt2OXKoCD/RHBA pfbZ43/NovHVeKJLBQssV2ZMP6QuKYarE5i7AoghcYaqG+GCbXE3w48dngKHbyPj BS5n8bl/eFYOjkQdEb9ivH4kZ410ks4TloySH6MtcVnEUDFYHe5ooYnjGDrwkYCL LsbZ3I6wKuPJjq5jaYoqB6Vu6cpfRPUKjJvTaXgMY4eP0EiwOcMg4mkyE4sufMoN rKAhl0T9hE0Yj9+vu8gR8RGYk5fxV3bn -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:15 2025 by rpki-client