$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft File: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json) Hash identifier: m6KmMSm2G4tiGXbaX0L0sal3eGjscIuR34CcW+4Iaps= Subject key identifier: 1D:C5:D1:F6:F8:4F:52:81:39:27:C3:39:F3:5C:98:BB:53:EB:CD:3A Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B Certificate issuer: /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft Manifest number: 07E9 Signing time: Fri 22 Aug 2025 21:09:08 +0000 Manifest this update: Fri 22 Aug 2025 21:09:08 +0000 Manifest next update: Fri 29 Aug 2025 21:09:08 +0000 Files and hashes: 1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: 3MbCbtvGyWouo+xaTPnh5Vx6yesK6kDCKInoDaCv9UY=) 2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: fZBIeDUKsdRpTczFyA/tRXZpgobXbgClU9BqXFuQJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Validity Not Before: Aug 22 21:09:08 2025 GMT Not After : Aug 29 21:09:08 2025 GMT Subject: CN=68a8dc74-6c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:9a:08:24:a4:a6:b3:e6:1f:da:f3:0d:ee: 17:f3:f5:7c:ed:d8:28:26:7a:9e:cd:16:9f:0b:c8: 3b:f2:c1:17:f7:ea:15:b2:69:eb:96:fe:2b:dc:bc: 70:cc:87:60:f1:7b:2e:06:2a:6a:c4:99:e3:dc:b2: 13:a9:13:50:2b:d6:74:da:c0:75:7f:03:6b:a1:58: 18:30:7f:9d:21:a2:95:c2:24:47:00:32:8b:97:cb: ac:e5:66:71:db:0d:76:8f:ff:a9:02:a3:88:af:fb: 97:90:20:46:13:70:d6:69:a5:9d:c3:35:ed:c9:6e: fa:9d:f9:5b:a5:f6:0c:cb:43:59:ce:a1:b9:da:e4: e9:44:c9:bf:df:b7:14:16:73:86:2f:f6:11:20:0a: 02:18:b6:14:42:a7:da:20:a9:f2:e6:b1:c7:52:74: c7:5b:53:1d:e3:af:77:0c:77:a9:d8:e5:e4:5a:21: 98:f0:72:d7:44:c4:a2:84:d1:1b:07:0b:8f:17:f0: df:01:10:a0:07:6d:4d:36:de:38:86:ed:46:7a:fc: 0e:76:93:5b:58:0b:fc:30:c0:18:01:91:65:6c:10: e1:f5:9b:28:dc:cc:eb:cf:92:37:25:fa:d0:d7:f3: f6:a8:3c:f8:79:c5:7d:7f:d5:db:54:84:22:ca:94: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:D1:F6:F8:4F:52:81:39:27:C3:39:F3:5C:98:BB:53:EB:CD:3A X509v3 Authority Key Identifier: keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:5c:15:57:b6:10:d0:c6:b0:fa:39:cc:7b:ad:2f:c7:c9:72: ad:89:06:69:11:9e:5d:41:ce:d0:0b:51:f1:8a:04:f3:2c:00: 43:76:cc:0c:ca:60:15:2a:72:6a:0e:18:69:0b:01:35:65:7b: 00:3c:a0:2f:df:5d:ae:af:fd:6c:7d:9d:54:2b:86:2a:e4:2e: 48:10:07:0a:63:bd:7d:4d:bc:98:b1:67:eb:59:d7:1b:c7:91: 5d:6d:dd:ac:34:dd:f4:d0:66:fb:0a:36:e3:1e:cc:e0:bb:06: a7:c0:c5:5d:8d:39:4e:54:a0:cf:38:27:b7:5d:ef:8e:01:6c: 57:19:39:9c:59:42:da:0c:89:4f:8b:1f:10:9c:70:11:06:ac: 72:a2:52:3d:72:1c:84:21:cb:9e:75:d5:96:29:9d:f8:72:02: 89:62:9a:6e:ef:d7:e9:23:58:22:cf:8e:c1:1c:37:c8:e1:b3: d4:23:da:37:93:c3:63:f6:96:28:86:ea:cb:0c:92:55:a5:12: 4a:63:c6:da:77:70:20:43:41:21:a7:5b:02:ef:0b:98:46:34: ce:52:8a:21:36:43:12:f8:e1:8c:2a:4f:c2:8c:2e:c9:bb:42: 69:1a:fc:81:59:3b:10:57:26:7d:53:23:56:73:a8:10:4e:5f: 90:3c:7e:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGNEMxMTAvBgNVBAUTKDQxRTM4MEEwQzlGQUJDQzEwRjhFQTMyOTYzNTJFNkE3 ODc4RDM1M0IwHhcNMjUwODIyMjEwOTA4WhcNMjUwODI5MjEwOTA4WjAYMRYwFAYD VQQDEw02OGE4ZGM3NC02YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzyaCCSkprPmH9rzDe4X8/V87dgoJnqezRafC8g78sEX9+oVsmnrlv4r3Lxw zIdg8XsuBipqxJnj3LITqRNQK9Z02sB1fwNroVgYMH+dIaKVwiRHADKLl8us5WZx 2w12j/+pAqOIr/uXkCBGE3DWaaWdwzXtyW76nflbpfYMy0NZzqG52uTpRMm/37cU FnOGL/YRIAoCGLYUQqfaIKny5rHHUnTHW1Md4693DHep2OXkWiGY8HLXRMSihNEb BwuPF/DfARCgB21NNt44hu1GevwOdpNbWAv8MMAYAZFlbBDh9Zso3Mzrz5I3JfrQ 1/P2qDz4ecV9f9XbVIQiypRmbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3F0fb4 T1KBOSfDOfNcmLtT6806MB8GA1UdIwQYMBaAFEHjgKDJ+rzBD46jKWNS5qeHjTU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEY0Qy85NDA3NjVGQ0Y5 NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZNRVBqcU1wWTFMbXA0ZU5O VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlT0FvTW42dk1FUGpxTXBZMUxtcDRlTk5Ucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEY0Qy85NDA3NjVGQ0Y5NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZN RVBqcU1wWTFMbXA0ZU5OVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwXBVXthDQxrD6Ocx7rS/HyXKtiQZpEZ5dQc7QC1HxigTzLABDdswM ymAVKnJqDhhpCwE1ZXsAPKAv312ur/1sfZ1UK4Yq5C5IEAcKY719TbyYsWfrWdcb x5Fdbd2sNN300Gb7CjbjHszguwanwMVdjTlOVKDPOCe3Xe+OAWxXGTmcWULaDIlP ix8QnHARBqxyolI9chyEIcueddWWKZ34cgKJYppu79fpI1giz47BHDfI4bPUI9o3 k8Nj9pYohurLDJJVpRJKY8bad3AgQ0Ehp1sC7wuYRjTOUoohNkMS+OGMKk/CjC7J u0JpGvyBWTsQVyZ9UyNWc6gQTl+QPH7R -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:04 2025 by rpki-client