$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: onIZNWmkLcEQMMn/2FVqDrL9ry2lsYI9Wg76kDQZlGM= Subject key identifier: 1E:87:3F:AA:9A:A4:DE:F0:A8:AE:3C:56:EB:F7:4F:15:F1:14:85:4F Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 011D Signing time: Sat 23 Aug 2025 04:55:30 +0000 Manifest this update: Sat 23 Aug 2025 04:55:30 +0000 Manifest next update: Sat 30 Aug 2025 04:55:30 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: l6h1oP9ER1KVLEcDjHBdhu6QYT12UYI30slFkV+rxFc=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Aug 23 04:55:30 2025 GMT Not After : Aug 30 04:55:30 2025 GMT Subject: CN=68a949c2-e8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:5d:b0:97:8d:6c:08:e9:bb:76:b6:d6:bc: a7:ae:f2:ff:31:98:b3:d5:af:71:b1:94:b0:52:d4: 26:db:6c:22:d3:b7:04:1d:6f:2d:56:36:18:87:0a: 96:0e:c1:af:b2:80:f7:aa:b5:7c:26:64:90:46:aa: 97:42:e2:7b:8a:cc:92:1a:ab:7f:1c:0e:73:ce:5f: 8d:77:66:eb:00:db:dd:31:91:79:0d:c8:c9:dc:fb: 88:86:8c:13:a1:6d:df:cf:12:ed:69:b3:42:63:e6: 2a:6d:89:87:62:65:d1:8b:0f:90:d1:c1:d8:80:4d: fd:b4:b6:01:76:5c:f0:b0:96:32:95:9d:1a:04:60: c2:fa:27:e4:40:7d:83:42:88:e9:7f:f2:c2:76:22: a5:08:c9:86:30:40:31:d8:d1:25:73:30:de:8b:76: 1b:59:b2:4e:c5:80:ab:d7:d0:17:00:e6:b6:e1:c6: 42:5b:85:91:1d:47:be:41:1a:71:a9:60:aa:1e:c2: dc:1c:5f:73:37:e2:c2:af:1b:14:5b:b1:ec:8b:0f: 89:24:2f:85:9b:09:e1:de:a7:18:30:79:70:dc:d2: 53:69:02:8f:c9:4f:7c:a5:94:6a:9f:08:7b:4f:70: 60:ab:78:93:70:ba:2c:db:c7:5d:86:d1:d6:fb:c0: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:3F:AA:9A:A4:DE:F0:A8:AE:3C:56:EB:F7:4F:15:F1:14:85:4F X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:31:44:4d:dc:92:d7:86:0f:ac:1d:06:85:d6:e4:36:ef:66: fb:fb:91:9d:64:a4:ac:13:6d:7f:81:26:b8:1b:56:15:43:25: db:d2:49:1f:52:6a:3a:54:c7:dd:30:d9:46:91:e8:3b:31:0f: 68:81:f9:98:c5:d4:b0:0f:a0:e1:fa:4b:a2:4a:dd:ca:d4:fc: 82:ef:4b:a1:51:a7:bf:0a:c5:ad:4b:98:cd:8c:50:71:3c:98: b8:a3:4d:27:36:26:86:ab:f3:79:ed:ed:03:6a:f8:29:c0:39: 32:d9:7f:7a:66:82:35:ea:3f:59:94:c7:16:4d:58:fc:de:e1: b0:1c:1c:fa:a1:bc:ae:9d:f8:5f:95:74:16:9b:a5:05:d7:23: ff:ab:77:9a:1b:86:2f:05:57:de:19:22:f8:a3:79:b5:8a:11: 7b:2e:c7:9e:f1:7d:24:eb:05:6b:00:55:84:02:c1:1c:05:3d: d1:39:a8:43:2f:f7:bc:bd:5f:11:08:05:aa:6e:26:42:bb:be: 52:f9:29:4e:43:d6:30:a6:93:e4:c4:58:e1:00:6e:cf:59:97: a7:91:9a:e2:d2:7b:01:c5:2f:f1:88:61:da:c9:d3:1b:0b:50: 86:29:79:9c:1e:55:61:4e:82:fe:70:e8:a0:57:92:6c:6d:9b: 2e:9d:4f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUwODIzMDQ1NTMwWhcNMjUwODMwMDQ1NTMwWjAYMRYwFAYD VQQDEw02OGE5NDljMi1lOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EZdsJeNbAjpu3a21rynrvL/MZiz1a9xsZSwUtQm22wi07cEHW8tVjYYhwqW DsGvsoD3qrV8JmSQRqqXQuJ7isySGqt/HA5zzl+Nd2brANvdMZF5DcjJ3PuIhowT oW3fzxLtabNCY+YqbYmHYmXRiw+Q0cHYgE39tLYBdlzwsJYylZ0aBGDC+ifkQH2D Qojpf/LCdiKlCMmGMEAx2NElczDei3YbWbJOxYCr19AXAOa24cZCW4WRHUe+QRpx qWCqHsLcHF9zN+LCrxsUW7Hsiw+JJC+Fmwnh3qcYMHlw3NJTaQKPyU98pZRqnwh7 T3Bgq3iTcLos28ddhtHW+8CXuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6HP6qa pN7wqK48Vuv3TxXxFIVPMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSMURN3JLXhg+sHQaF1uQ272b7+5GdZKSsE21/gSa4G1YVQyXb0kkf Umo6VMfdMNlGkeg7MQ9ogfmYxdSwD6Dh+kuiSt3K1PyC70uhUae/CsWtS5jNjFBx PJi4o00nNiaGq/N57e0DavgpwDky2X96ZoI16j9ZlMcWTVj83uGwHBz6obyunfhf lXQWm6UF1yP/q3eaG4YvBVfeGSL4o3m1ihF7Lsee8X0k6wVrAFWEAsEcBT3ROahD L/e8vV8RCAWqbiZCu75S+SlOQ9YwppPkxFjhAG7PWZenkZri0nsBxS/xiGHaydMb C1CGKXmcHlVhToL+cOigV5JsbZsunU+F -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:27 2025 by rpki-client