$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: Tr3pLWhiCtvkJVdeRY9tZ6u0I8lirUiihAjjpe17BYI= Subject key identifier: E0:0B:57:D9:67:14:94:94:E7:73:2C:D0:8D:A7:9C:F5:8A:BF:8D:FC Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 28DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 2867 Signing time: Fri 22 Aug 2025 15:39:27 +0000 Manifest this update: Fri 22 Aug 2025 15:39:26 +0000 Manifest next update: Fri 29 Aug 2025 15:39:26 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: u5pDGFGg9rYErYkCSitDJQTvrYZ0FrYFX581o+d1vAA=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=) 4: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=) 5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 6: 9E60B12451BF11F08496463FC4F9AE02.roa (hash: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8=) 7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10462 (0x28de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Aug 22 15:39:26 2025 GMT Not After : Aug 29 15:39:26 2025 GMT Subject: CN=68a88f2e-0ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:44:25:52:f7:17:88:c4:33:4e:e7:f9:26: 2c:e9:95:55:96:96:41:8a:f9:64:37:b7:c0:89:08: 2b:17:09:8f:63:c8:7f:2a:a1:4b:18:62:9c:00:5d: d6:51:a5:fd:f9:a3:cb:10:0d:72:5c:d0:2d:25:c0: b2:1a:99:a4:29:4b:d0:77:df:9c:31:76:a1:cf:76: d7:76:8e:11:01:16:88:28:14:01:3c:c1:e4:27:a5: 26:06:bd:85:08:99:31:09:d0:f0:45:76:08:52:c2: e1:11:2f:47:9c:2b:32:bf:3b:1c:7e:eb:e5:f6:d5: c7:e1:1a:6a:e1:f5:5a:0f:23:78:8d:b3:ec:33:93: ae:4f:4a:47:68:3b:3f:6f:0c:2d:fb:af:04:9e:4f: da:eb:c7:04:bd:5e:58:f4:ba:75:60:8b:1c:e6:0c: 61:f9:d1:82:d7:46:04:bf:e1:74:d0:ed:0c:6f:f9: d3:6c:05:c2:4e:e6:b8:f2:41:45:dd:c5:cd:39:8d: 0e:d8:63:5b:60:56:a0:ce:af:26:ba:b6:82:22:78: 61:05:f6:aa:32:54:41:59:69:2d:9d:30:74:15:e2: 9d:8f:6e:37:1f:cc:73:c4:cf:dc:85:18:e5:2d:35: f1:01:e6:a8:85:79:c8:79:e2:2a:11:0b:53:d3:ee: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:57:D9:67:14:94:94:E7:73:2C:D0:8D:A7:9C:F5:8A:BF:8D:FC X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:41:32:78:b6:d9:a8:d3:26:1b:25:16:c7:11:a5:3b:7f:c6: 8d:08:a3:5b:41:ef:3e:52:0e:b8:bf:0e:79:54:c7:fa:86:51: ae:43:ec:78:86:73:a0:82:2e:83:10:ae:9c:f4:24:6a:7b:3b: d7:3d:2e:3b:e4:ff:68:4a:fb:ea:cd:ad:74:7a:e6:02:1a:3f: 6d:82:a0:4a:8d:03:87:34:0b:3b:49:4d:14:80:88:d5:de:a3: ec:56:7d:90:f0:58:bf:e4:e9:19:70:fe:cf:f1:5e:a6:6a:3f: b0:26:3f:9e:b5:53:5e:fb:46:da:43:16:ca:b3:c3:81:e9:26: a0:63:2e:2f:98:12:09:bc:34:dd:82:0f:b5:ad:ce:fc:cf:a8: d6:a0:6a:27:22:e9:0e:7d:99:64:aa:5a:6a:a0:5e:50:df:e4: de:38:b8:48:c5:b4:31:f4:d5:de:29:c3:0a:79:b9:f9:3a:8f: df:db:70:c8:40:3b:a2:6c:a2:d7:5a:64:b3:90:d3:2a:61:c3: b3:3f:9d:82:e3:41:9f:25:a2:2f:28:0d:47:40:2e:df:0a:c8: c5:25:8d:0f:a4:c8:46:39:44:ab:2d:45:a7:a6:62:36:cf:76: 69:c3:ac:f6:16:cf:fc:70:d4:6b:6f:4b:a4:48:fe:d6:57:16: e8:6e:61:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwODIyMTUzOTI2WhcNMjUwODI5MTUzOTI2WjAYMRYwFAYD VQQDEw02OGE4OGYyZS0wZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZpEJVL3F4jEM07n+SYs6ZVVlpZBivlkN7fAiQgrFwmPY8h/KqFLGGKcAF3W UaX9+aPLEA1yXNAtJcCyGpmkKUvQd9+cMXahz3bXdo4RARaIKBQBPMHkJ6UmBr2F CJkxCdDwRXYIUsLhES9HnCsyvzscfuvl9tXH4Rpq4fVaDyN4jbPsM5OuT0pHaDs/ bwwt+68Enk/a68cEvV5Y9Lp1YIsc5gxh+dGC10YEv+F00O0Mb/nTbAXCTua48kFF 3cXNOY0O2GNbYFagzq8muraCInhhBfaqMlRBWWktnTB0FeKdj243H8xzxM/chRjl LTXxAeaohXnIeeIqEQtT0+4A3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOALV9ln FJSU53Ms0I2nnPWKv438MB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7QTJ4ttmo0yYbJRbHEaU7f8aNCKNbQe8+Ug64vw55VMf6hlGuQ+x4 hnOggi6DEK6c9CRqezvXPS475P9oSvvqza10euYCGj9tgqBKjQOHNAs7SU0UgIjV 3qPsVn2Q8Fi/5OkZcP7P8V6maj+wJj+etVNe+0baQxbKs8OB6SagYy4vmBIJvDTd gg+1rc78z6jWoGonIukOfZlkqlpqoF5Q3+TeOLhIxbQx9NXeKcMKebn5Oo/f23DI QDuibKLXWmSzkNMqYcOzP52C40GfJaIvKA1HQC7fCsjFJY0PpMhGOUSrLUWnpmI2 z3Zpw6z2Fs/8cNRrb0ukSP7WVxbobmFO -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:17 2025 by rpki-client