$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: 0buAu/m22rri50P2X5yxU8EsOeLyI2UeTHfRcNdwYls= Subject key identifier: 03:BA:9E:76:C8:C9:DE:73:FE:BC:92:99:CB:F6:D9:88:E0:7C:EC:BD Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 35AE Signing time: Fri 22 Aug 2025 14:28:05 +0000 Manifest this update: Fri 22 Aug 2025 14:28:05 +0000 Manifest next update: Fri 29 Aug 2025 14:28:05 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: HMuCpIxrACR/JXMecOau0JMQdLrOSztdGmc+1lcmIag=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: uDX3snF5KOLhQFZJb9NS91kFKiMHEVAq6if3Xq1rgsY=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: +oczTLjRD/tYfsYBFtIa6eRmdxZaKTBLayvz3HoGlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13954 (0x3682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Aug 22 14:28:05 2025 GMT Not After : Aug 29 14:28:05 2025 GMT Subject: CN=68a87e75-4c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:52:a2:1b:ef:47:28:7c:0e:e0:cd:9e:23: 49:88:64:47:04:48:74:b9:f7:b6:97:1f:b3:bf:06: 35:0f:3b:24:92:fc:fe:ee:86:f5:33:b1:4e:73:49: d4:79:11:9c:68:7b:10:92:28:20:94:ae:d8:84:54: 12:13:31:0f:6e:4f:79:f7:b5:99:f4:76:ec:5c:3d: 70:cb:0c:7f:ae:30:2d:32:95:57:1d:9d:b8:ab:12: fc:3f:5c:11:03:9f:58:8a:92:ae:00:d3:e1:68:d3: 64:1e:97:64:19:b1:cd:c4:67:f9:ca:d5:fa:5c:7d: 0c:2c:ff:55:56:13:c0:9a:84:1a:b2:5b:b4:6f:ad: 74:8d:f2:97:40:82:94:a8:a7:9d:59:0c:6c:1c:88: dc:0c:5b:9a:cc:c7:c1:85:24:3f:a6:07:d1:39:34: 26:0a:17:2c:57:e3:54:47:dd:16:73:4b:11:57:f3: da:e2:d0:46:8e:02:6c:58:6d:f4:2e:21:a9:95:e3: 87:ff:a2:81:d4:1f:cd:e1:24:ba:41:da:5d:89:49: 1d:13:1d:27:79:8b:11:6e:9d:3e:af:d8:84:75:a2: 1f:b1:23:c9:75:0b:ad:1b:38:89:6b:9c:52:d7:a7: e8:57:6b:fe:88:9d:16:43:c3:7a:02:a1:80:f1:46: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BA:9E:76:C8:C9:DE:73:FE:BC:92:99:CB:F6:D9:88:E0:7C:EC:BD X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e0:4b:90:b7:52:bd:17:2c:7c:cf:5b:97:85:77:b7:d7:e8: 56:15:24:dc:3c:f0:61:7b:85:29:05:b6:0b:de:84:bb:ca:5c: 9f:8a:d9:4a:3e:40:22:d9:d8:66:83:f3:cd:62:14:d2:97:cb: d2:55:d1:2c:70:2c:86:4c:15:b2:30:c6:98:1c:aa:d4:50:e9: 2c:3c:86:ec:d6:71:98:f8:2b:22:94:e1:8c:fd:82:8c:56:91: 6c:39:58:6a:a8:4a:21:22:19:a8:00:20:d9:b1:06:df:54:0e: f5:b2:78:94:0e:3c:ad:23:13:73:d2:fe:51:a7:15:68:24:04: 25:e8:e8:9f:d8:7c:1a:01:c0:fc:ef:bb:f8:4a:12:0c:1b:57: 7d:8a:2c:aa:cd:8e:d9:2d:74:b9:e4:99:71:48:a3:5e:f9:2c: 94:b2:91:93:e0:a0:89:35:ff:db:e7:aa:14:aa:cc:d5:c2:69: 9f:9a:fc:69:23:c6:09:98:47:c5:74:fb:be:7f:a9:fd:84:95: 28:32:22:76:1c:d5:86:be:a2:c3:90:4c:6b:18:c0:b6:da:fd: 38:7f:72:e5:6a:7f:cf:c4:4b:81:79:64:6d:15:09:46:6d:42: 9a:31:19:97:63:e0:0c:1c:3a:70:37:f8:b5:7d:63:72:d5:3e: 2b:f6:e3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwODIyMTQyODA1WhcNMjUwODI5MTQyODA1WjAYMRYwFAYD VQQDEw02OGE4N2U3NS00YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqFSohvvRyh8DuDNniNJiGRHBEh0ufe2lx+zvwY1Dzskkvz+7ob1M7FOc0nU eRGcaHsQkigglK7YhFQSEzEPbk9597WZ9HbsXD1wywx/rjAtMpVXHZ24qxL8P1wR A59YipKuANPhaNNkHpdkGbHNxGf5ytX6XH0MLP9VVhPAmoQaslu0b610jfKXQIKU qKedWQxsHIjcDFuazMfBhSQ/pgfROTQmChcsV+NUR90Wc0sRV/Pa4tBGjgJsWG30 LiGpleOH/6KB1B/N4SS6QdpdiUkdEx0neYsRbp0+r9iEdaIfsSPJdQutGziJa5xS 16foV2v+iJ0WQ8N6AqGA8UbKYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAO6nnbI yd5z/rySmcv22YjgfOy9MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg4EuQt1K9Fyx8z1uXhXe31+hWFSTcPPBhe4UpBbYL3oS7ylyfitlK PkAi2dhmg/PNYhTSl8vSVdEscCyGTBWyMMaYHKrUUOksPIbs1nGY+CsilOGM/YKM VpFsOVhqqEohIhmoACDZsQbfVA71sniUDjytIxNz0v5RpxVoJAQl6Oif2HwaAcD8 77v4ShIMG1d9iiyqzY7ZLXS55JlxSKNe+SyUspGT4KCJNf/b56oUqszVwmmfmvxp I8YJmEfFdPu+f6n9hJUoMiJ2HNWGvqLDkExrGMC22v04f3Llan/PxEuBeWRtFQlG bUKaMRmXY+AMHDpwN/i1fWNy1T4r9uMt -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:36 2025 by rpki-client