$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: FAR7HUzLN3jW97GhTbEEy5OMIkLz5HmyePf535uAwU0= Subject key identifier: E9:55:BB:B7:F4:8C:59:6D:04:D6:E3:7B:4F:D7:5B:4E:39:FB:70:3A Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 04E9 Signing time: Fri 22 Aug 2025 23:55:30 +0000 Manifest this update: Fri 22 Aug 2025 23:55:29 +0000 Manifest next update: Fri 29 Aug 2025 23:55:29 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: 9fdDPxsNlroIcf1VQBKHHy3w1Q/xVEozTz4qLzB21Zk=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Aug 22 23:55:29 2025 GMT Not After : Aug 29 23:55:29 2025 GMT Subject: CN=68a90371-b248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ef:f8:b3:88:30:58:4f:06:9d:03:62:0d:84: 83:e9:f0:0f:13:83:ac:68:dd:1d:13:66:c6:d7:db: 6a:4c:4e:92:a6:b0:68:78:1f:f8:8e:44:9b:40:fa: b6:82:09:eb:ef:4c:fb:d1:3e:fb:8c:e7:1d:62:03: cd:81:ca:9e:a1:e3:da:25:03:57:c4:f2:b6:fb:5a: 84:e8:bb:8d:1e:93:95:ec:36:96:a3:4d:e7:be:20: 56:91:43:ac:95:db:ad:03:d2:12:f9:22:f9:8b:47: 1a:eb:54:46:41:d4:99:9d:67:57:19:d4:a7:67:30: 1c:e6:0e:b7:6d:f2:5f:cf:7f:b8:f7:a2:d7:f0:65: f3:66:73:22:70:0d:f5:01:53:13:5f:f2:f0:12:5b: a3:05:2d:b3:e6:d4:0f:18:1c:b4:96:4d:51:91:d4: 5c:d8:2b:f4:8d:97:5e:53:d4:66:d1:08:29:d3:d5: 95:5f:ee:14:e9:c8:d2:73:1d:56:1b:ae:22:21:ec: a5:b8:87:19:c6:a5:c5:51:fa:21:0e:44:00:36:b7: 12:28:06:76:cf:d9:69:f1:b7:3b:eb:fa:ee:f4:3e: e3:38:bf:67:ba:c0:b9:57:cf:95:13:db:73:0d:b6: 75:30:c6:ec:04:d2:5f:96:b1:93:d5:0a:5b:e5:6b: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:55:BB:B7:F4:8C:59:6D:04:D6:E3:7B:4F:D7:5B:4E:39:FB:70:3A X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dc:50:29:24:37:7c:43:90:1a:35:72:36:2a:fd:26:08:ac: 88:9d:e3:7e:e8:a6:a6:bd:c2:9c:39:90:04:1c:1e:27:5f:b3: 15:dc:41:a9:d0:4a:e9:74:c6:59:a2:e5:c3:1c:e3:89:d8:f9: be:fb:89:64:1e:67:6d:d8:c6:e9:1b:52:ca:2d:01:2f:13:e9: d8:68:e4:45:2d:65:dc:d3:0e:5a:e6:e2:66:be:c2:19:d9:48: 1d:df:a6:16:32:06:53:56:e4:70:48:2f:48:62:0f:82:e8:5b: 4c:24:a1:9d:d3:af:1d:f5:55:97:36:55:34:1e:49:6f:b8:23: 45:aa:c6:23:43:76:93:fc:f9:c1:4c:de:73:4a:e0:69:9d:51: 7c:28:81:e9:1a:f4:2a:73:20:ec:11:bd:41:5e:f0:b8:67:17: 7f:77:46:61:41:20:53:71:74:25:36:50:00:0c:7e:17:db:d6: 09:c5:9d:56:89:85:d3:10:b8:fd:4e:31:55:3b:69:79:f6:0b: fa:05:93:20:97:02:48:6f:06:6d:cc:08:8e:ae:f2:eb:54:f3: 2b:3f:a4:a9:53:41:12:16:3e:4c:3f:ec:37:83:1d:3a:b3:c5: c3:73:94:bb:2b:df:59:1a:94:ef:84:a4:86:75:62:ef:18:01: b8:3e:fc:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwODIyMjM1NTI5WhcNMjUwODI5MjM1NTI5WjAYMRYwFAYD VQQDEw02OGE5MDM3MS1iMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+/4s4gwWE8GnQNiDYSD6fAPE4OsaN0dE2bG19tqTE6SprBoeB/4jkSbQPq2 ggnr70z70T77jOcdYgPNgcqeoePaJQNXxPK2+1qE6LuNHpOV7DaWo03nviBWkUOs ldutA9IS+SL5i0ca61RGQdSZnWdXGdSnZzAc5g63bfJfz3+496LX8GXzZnMicA31 AVMTX/LwElujBS2z5tQPGBy0lk1RkdRc2Cv0jZdeU9Rm0Qgp09WVX+4U6cjScx1W G64iIeyluIcZxqXFUfohDkQANrcSKAZ2z9lp8bc76/ru9D7jOL9nusC5V8+VE9tz DbZ1MMbsBNJflrGT1Qpb5WtyXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlVu7f0 jFltBNbje0/XW045+3A6MB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+3FApJDd8Q5AaNXI2Kv0mCKyIneN+6KamvcKcOZAEHB4nX7MV3EGp 0ErpdMZZouXDHOOJ2Pm++4lkHmdt2MbpG1LKLQEvE+nYaORFLWXc0w5a5uJmvsIZ 2Ugd36YWMgZTVuRwSC9IYg+C6FtMJKGd068d9VWXNlU0HklvuCNFqsYjQ3aT/PnB TN5zSuBpnVF8KIHpGvQqcyDsEb1BXvC4Zxd/d0ZhQSBTcXQlNlAADH4X29YJxZ1W iYXTELj9TjFVO2l59gv6BZMglwJIbwZtzAiOrvLrVPMrP6SpU0ESFj5MP+w3gx06 s8XDc5S7K99ZGpTvhKSGdWLvGAG4Pvz9 -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:25 2025 by rpki-client