$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: 5I4DiQL6tUatMfvsfT36TxyiZerh69AyfswdctEVZrM= Subject key identifier: 66:88:A6:A5:78:2C:C1:BD:76:BC:7C:72:90:5D:0A:14:D2:CA:DC:91 Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 05:11:31 +0000 Manifest this update: Sat 23 Aug 2025 05:11:30 +0000 Manifest next update: Sat 30 Aug 2025 05:11:30 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: YsJycSDMZrbAkpyBi0v3SWoL8J7BGdh7JtIy2XtfWjI=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Aug 23 05:11:30 2025 GMT Not After : Aug 30 05:11:30 2025 GMT Subject: CN=68a94d83-80e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:72:80:dd:86:f6:bd:8d:29:64:e7:6e:bb: e5:e8:19:f6:39:ab:37:a9:b7:19:69:e1:58:f3:be: 99:d1:a0:e2:ab:66:3d:8a:65:54:6e:90:2d:ea:ba: 41:b5:68:03:cc:66:b9:e2:6f:e2:e1:9f:01:92:d2: 5c:7e:12:c2:e0:f5:60:d3:92:48:10:6e:90:90:71: ac:c1:94:ce:b3:18:88:17:e4:82:07:6b:62:b1:03: 78:05:63:53:45:da:82:32:de:9f:e7:d8:4b:fd:53: 9c:93:98:5e:20:c9:78:a9:3b:c6:7d:cb:c5:48:29: 0d:9f:90:47:97:74:ae:17:3a:44:ca:f3:9f:3f:b0: fb:63:95:44:7b:33:23:fc:e7:ef:ec:6a:e6:d6:b9: e2:9d:42:00:d1:14:cd:93:e7:9a:fa:7f:b1:25:76: b2:f3:b3:0d:23:80:fd:85:94:f9:ad:e4:62:f4:10: a0:64:59:16:78:39:ef:03:10:bd:ec:96:8b:f9:08: 2c:1f:e1:a1:24:45:b5:a8:d9:3e:3e:3c:73:fe:55: b4:86:e2:ed:20:72:59:0f:51:06:92:b3:54:c3:7d: 6a:ff:a1:9f:bc:a8:cf:0d:72:89:20:f3:d5:28:fc: 4f:30:82:7f:a2:06:ed:2e:10:5b:d6:4d:d5:b8:0d: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:A6:A5:78:2C:C1:BD:76:BC:7C:72:90:5D:0A:14:D2:CA:DC:91 X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:72:df:36:bd:33:98:03:38:f7:e5:e3:70:1b:90:42:cd:8d: 4f:1e:ad:df:35:1c:02:e3:09:b3:97:af:b7:ab:cf:d7:88:6d: 29:72:9e:71:e2:d6:0e:d0:d5:a2:7e:d3:ed:b7:df:21:3e:55: b8:60:f3:16:98:43:38:9b:7e:37:a1:73:16:38:35:7e:8e:2e: 5c:76:46:27:f9:ac:2c:09:91:50:d1:3f:c9:cb:65:e6:a1:5f: f7:33:bf:99:53:0b:9a:f3:85:ca:8b:ae:0e:fe:a7:7a:60:e0: 5c:17:a4:37:4d:16:60:c4:41:7e:24:90:c9:c3:f6:fe:86:f2: 8f:f6:fd:47:0d:bb:98:94:bb:e6:37:44:2b:14:3a:fb:62:bd: c2:b6:87:77:22:fb:8a:91:9c:7d:b6:c1:3b:91:06:9a:7c:fd: ee:e3:6a:fe:de:7a:5b:33:48:7f:f4:8f:17:8a:5a:00:0a:42: da:b7:17:68:0b:a9:ff:e3:55:50:8a:0a:20:d4:5f:ef:c8:b7: 3f:d1:d5:ed:6a:86:ff:5a:82:86:c1:5b:f9:02:78:72:b5:c4: 10:18:f5:1c:42:87:42:c2:43:d5:7c:d6:97:20:1a:f4:63:8b: d7:2b:fc:a9:60:84:34:de:4d:b1:ff:ab:a8:ad:6b:d0:4f:02: 29:b0:3f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUwODIzMDUxMTMwWhcNMjUwODMwMDUxMTMwWjAYMRYwFAYD VQQDEw02OGE5NGQ4My04MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4hygN2G9r2NKWTnbrvl6Bn2Oas3qbcZaeFY876Z0aDiq2Y9imVUbpAt6rpB tWgDzGa54m/i4Z8BktJcfhLC4PVg05JIEG6QkHGswZTOsxiIF+SCB2tisQN4BWNT RdqCMt6f59hL/VOck5heIMl4qTvGfcvFSCkNn5BHl3SuFzpEyvOfP7D7Y5VEezMj /Ofv7Grm1rninUIA0RTNk+ea+n+xJXay87MNI4D9hZT5reRi9BCgZFkWeDnvAxC9 7JaL+QgsH+GhJEW1qNk+Pjxz/lW0huLtIHJZD1EGkrNUw31q/6GfvKjPDXKJIPPV KPxPMIJ/ogbtLhBb1k3VuA1ECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaIpqV4 LMG9drx8cpBdChTSytyRMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkct82vTOYAzj35eNwG5BCzY1PHq3fNRwC4wmzl6+3q8/XiG0pcp5x 4tYO0NWiftPtt98hPlW4YPMWmEM4m343oXMWODV+ji5cdkYn+awsCZFQ0T/Jy2Xm oV/3M7+ZUwua84XKi64O/qd6YOBcF6Q3TRZgxEF+JJDJw/b+hvKP9v1HDbuYlLvm N0QrFDr7Yr3Ctod3IvuKkZx9tsE7kQaafP3u42r+3npbM0h/9I8XiloACkLatxdo C6n/41VQigog1F/vyLc/0dXtaob/WoKGwVv5AnhytcQQGPUcQodCwkPVfNaXIBr0 Y4vXK/ypYIQ03k2x/6uorWvQTwIpsD95 -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:36 2025 by rpki-client