$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: w5rzJs0J4tFHvQe6sbwYub+DVpGHr8+tJ6DK2olaI08= Subject key identifier: 5C:D5:04:61:35:D5:E4:70:78:0F:40:69:8A:BB:84:E8:8F:62:90:6E Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 0456 Signing time: Sat 23 Aug 2025 00:29:59 +0000 Manifest this update: Sat 23 Aug 2025 00:29:58 +0000 Manifest next update: Sat 30 Aug 2025 00:29:58 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: C25wYRXh/w/uZhVwHWEgyIdCdnQJrfwc3ObVfj2wPTo=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Aug 23 00:29:58 2025 GMT Not After : Aug 30 00:29:58 2025 GMT Subject: CN=68a90b87-577e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:a8:93:da:b2:c3:f8:44:a0:83:99:cf:75: 24:b2:6f:d4:0a:27:1f:f7:0d:b6:60:26:af:ea:87: 9b:c9:d1:32:98:c7:db:e0:88:d4:8f:b3:9c:5a:cb: 2d:37:5d:95:86:dc:8c:a2:c2:db:59:38:9f:9f:47: 57:c9:71:38:b2:fb:95:a0:c0:16:35:1e:e9:b8:ad: 72:37:0e:f8:e5:aa:c0:83:62:ac:3a:a9:3d:49:44: 77:38:b5:54:e8:2d:de:6a:eb:62:c0:3e:b0:b9:e1: 55:2b:4f:d7:b1:ee:dc:fe:41:9a:59:1e:93:fd:25: bc:dd:b5:97:f1:48:93:d0:82:ef:30:8e:20:e9:75: a9:82:99:a6:a3:9a:da:3b:82:0b:a7:a3:ae:ec:8d: c1:a1:65:2e:5e:3f:79:54:68:b2:ff:5b:25:0e:e7: f2:ca:ac:0b:6d:4f:a4:d8:bd:ed:a4:ea:0b:63:4a: 5c:60:a7:b4:80:27:56:3a:db:a0:29:51:3d:1f:f9: f9:1e:ac:31:f5:e5:ac:b0:f8:d9:9c:d7:c4:a4:7d: 58:5b:49:42:f2:84:19:00:e9:5f:38:a2:c5:11:be: f3:6b:8e:67:3d:92:f6:6c:4d:38:ed:c0:99:cf:9d: 0e:4c:a1:dc:d8:c5:0e:f4:14:53:ef:7d:39:65:c1: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D5:04:61:35:D5:E4:70:78:0F:40:69:8A:BB:84:E8:8F:62:90:6E X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:9b:54:01:08:bf:dd:e6:ba:99:e2:4b:1e:f4:5c:53:7c:66: f3:92:69:05:26:4a:57:8c:03:9f:2b:cb:e8:09:42:ed:a7:5e: 58:4a:05:f9:87:43:a7:4d:54:83:63:f3:06:17:ad:eb:58:62: 18:32:ad:9f:ee:fc:f0:21:7e:41:3b:59:53:a1:44:a0:df:11: df:08:3a:53:51:b3:ee:9f:e1:a6:a8:49:04:5f:1a:94:2e:27: dd:06:0d:78:37:24:ed:45:b1:cc:f5:4e:2b:01:6d:b3:3a:25: 3b:53:b3:00:7a:68:7d:07:3b:ad:1e:4d:93:90:21:24:55:c5: c9:06:a2:a7:03:11:8a:b3:0d:24:6c:c6:49:f2:1b:4d:33:ff: 3a:a5:72:8e:49:55:38:85:72:16:e5:ab:df:9f:b7:22:88:0d: 88:cc:21:f9:0a:0f:b6:c4:54:83:39:af:7a:23:66:56:4e:6a: 09:55:3a:ec:b4:dc:84:81:49:84:0d:9e:22:81:b2:b8:30:01: 95:9e:82:9b:3f:ba:46:d8:29:14:39:16:8d:08:97:cf:c4:10: a5:e5:df:62:7e:14:60:0a:c0:2c:ca:06:51:33:67:13:e8:51: c0:fc:c0:46:09:9a:52:d6:6e:0a:a8:92:f3:56:1d:02:92:1f: 48:a3:d8:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwODIzMDAyOTU4WhcNMjUwODMwMDAyOTU4WjAYMRYwFAYD VQQDEw02OGE5MGI4Ny01NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB+ok9qyw/hEoIOZz3Uksm/UCicf9w22YCav6oebydEymMfb4IjUj7OcWsst N12VhtyMosLbWTifn0dXyXE4svuVoMAWNR7puK1yNw745arAg2KsOqk9SUR3OLVU 6C3eautiwD6wueFVK0/Xse7c/kGaWR6T/SW83bWX8UiT0ILvMI4g6XWpgpmmo5ra O4ILp6Ou7I3BoWUuXj95VGiy/1slDufyyqwLbU+k2L3tpOoLY0pcYKe0gCdWOtug KVE9H/n5Hqwx9eWssPjZnNfEpH1YW0lC8oQZAOlfOKLFEb7za45nPZL2bE047cCZ z50OTKHc2MUO9BRT7305ZcGmIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzVBGE1 1eRweA9AaYq7hOiPYpBuMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIm1QBCL/d5rqZ4kse9FxTfGbzkmkFJkpXjAOfK8voCULtp15YSgX5 h0OnTVSDY/MGF63rWGIYMq2f7vzwIX5BO1lToUSg3xHfCDpTUbPun+GmqEkEXxqU LifdBg14NyTtRbHM9U4rAW2zOiU7U7MAemh9BzutHk2TkCEkVcXJBqKnAxGKsw0k bMZJ8htNM/86pXKOSVU4hXIW5avfn7ciiA2IzCH5Cg+2xFSDOa96I2ZWTmoJVTrs tNyEgUmEDZ4igbK4MAGVnoKbP7pG2CkUORaNCJfPxBCl5d9ifhRgCsAsygZRM2cT 6FHA/MBGCZpS1m4KqJLzVh0Ckh9Io9is -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:48 2025 by rpki-client