$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: kgfk3/eQIMh8/c//CPRLJaZW+uDxUgI0r2dyPo5eDBU= Subject key identifier: CB:1D:C8:6E:BA:A0:7F:5E:7F:B3:70:8E:CF:D4:F0:35:F8:6B:E6:CB Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 0893 Signing time: Fri 22 Aug 2025 20:46:23 +0000 Manifest this update: Fri 22 Aug 2025 20:46:23 +0000 Manifest next update: Fri 29 Aug 2025 20:46:23 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: RRV92GM1vrC20YcPFdstoItBrKIGLMOaNa9wT/F/CNk=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Aug 22 20:46:23 2025 GMT Not After : Aug 29 20:46:23 2025 GMT Subject: CN=68a8d71f-3551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:e0:b6:fc:ea:1d:0c:0f:75:cb:c7:67:e7: 68:e2:63:54:3e:c5:50:10:39:49:e5:12:5f:6f:d6: 4a:45:c3:01:79:01:31:78:e1:fd:53:09:fe:28:ed: 91:cb:b0:b7:93:41:be:78:47:4d:08:8b:62:87:96: 2f:ee:79:88:29:de:8e:ab:88:17:85:45:6e:8f:43: 3a:fb:02:ed:50:fd:44:9d:2b:05:92:bd:f1:9b:a2: 64:27:0d:79:0e:9c:98:19:e9:32:bc:b3:c1:13:e4: cc:53:c0:cc:23:36:c7:9c:86:c1:0b:76:00:84:3d: 4e:a7:63:74:08:14:03:59:71:c1:49:2b:a4:32:46: 9f:ac:83:18:87:71:78:a9:9e:e8:15:eb:bf:57:b6: c7:7e:ef:90:69:98:69:84:c0:3d:5a:1c:09:4b:cd: 01:bc:33:ef:c8:3d:ed:ee:8e:ff:76:8d:93:52:43: 45:dd:61:43:0d:41:34:e2:2f:af:c6:b6:e9:98:c5: 9e:5a:26:ed:c0:f3:36:99:77:1d:5d:e2:59:4b:ea: 59:85:ef:84:da:f4:52:c0:79:09:20:82:81:78:4f: 48:50:01:a7:33:a2:46:78:75:62:2f:c0:3e:d3:b0: fc:09:4b:36:08:88:bf:3e:8b:11:1c:61:93:2f:3c: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:C8:6E:BA:A0:7F:5E:7F:B3:70:8E:CF:D4:F0:35:F8:6B:E6:CB X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:76:a2:fa:b5:af:0e:9a:be:66:b4:f7:d2:11:6d:b5:3f:d1: 3b:9e:26:d4:48:7a:21:cf:d5:c9:7d:01:34:21:01:a2:bb:9c: 06:de:24:b8:6b:5a:63:95:dc:15:cd:bb:e3:0d:f0:ea:06:cf: 88:b4:0f:94:f6:1e:77:7d:ba:da:bb:a2:0c:7e:09:2b:01:17: be:c9:f7:28:7b:8b:5d:9f:67:8f:72:c5:61:93:71:86:5d:a4: 7e:dd:d2:94:08:93:8f:ab:33:43:96:7e:08:90:f3:ab:b0:d6: 70:03:8f:3a:6e:b7:98:f5:8e:cf:8a:d0:b8:d6:ba:8c:49:06: ee:02:34:85:0e:30:d3:7e:33:fc:bc:dd:38:73:b2:19:64:42: 4e:8b:99:34:d6:ef:c9:8a:da:2c:7b:24:1e:ce:a5:a9:14:12: e2:3f:40:d6:10:45:4c:e9:37:be:bc:b8:48:47:96:eb:6f:7e: 8a:0b:55:9c:46:c1:eb:95:67:f2:f7:6c:32:b2:48:a9:39:07: d6:55:73:fd:ee:e1:2d:1b:3b:1c:87:6e:c9:c2:57:c4:58:d6: 68:86:3d:5a:4d:22:6d:65:2e:7b:16:5d:df:95:79:41:1b:85: 40:ba:47:ea:2b:26:6e:7c:bc:45:8b:47:29:35:4f:bf:ad:f0: 6a:f8:1a:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUwODIyMjA0NjIzWhcNMjUwODI5MjA0NjIzWjAYMRYwFAYD VQQDEw02OGE4ZDcxZi0zNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03rgtvzqHQwPdcvHZ+do4mNUPsVQEDlJ5RJfb9ZKRcMBeQExeOH9Uwn+KO2R y7C3k0G+eEdNCItih5Yv7nmIKd6Oq4gXhUVuj0M6+wLtUP1EnSsFkr3xm6JkJw15 DpyYGekyvLPBE+TMU8DMIzbHnIbBC3YAhD1Op2N0CBQDWXHBSSukMkafrIMYh3F4 qZ7oFeu/V7bHfu+QaZhphMA9WhwJS80BvDPvyD3t7o7/do2TUkNF3WFDDUE04i+v xrbpmMWeWibtwPM2mXcdXeJZS+pZhe+E2vRSwHkJIIKBeE9IUAGnM6JGeHViL8A+ 07D8CUs2CIi/PosRHGGTLzxmeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsdyG66 oH9ef7Nwjs/U8DX4a+bLMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9dqL6ta8Omr5mtPfSEW21P9E7nibUSHohz9XJfQE0IQGiu5wG3iS4 a1pjldwVzbvjDfDqBs+ItA+U9h53fbrau6IMfgkrARe+yfcoe4tdn2ePcsVhk3GG XaR+3dKUCJOPqzNDln4IkPOrsNZwA486breY9Y7PitC41rqMSQbuAjSFDjDTfjP8 vN04c7IZZEJOi5k01u/JitoseyQezqWpFBLiP0DWEEVM6Te+vLhIR5brb36KC1Wc RsHrlWfy92wyskipOQfWVXP97uEtGzsch27JwlfEWNZohj1aTSJtZS57Fl3flXlB G4VAukfqKyZufLxFi0cpNU+/rfBq+Bqi -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:49 2025 by rpki-client