$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: usgTKKGgLsAkurAMw2v+JGb+dLFLR69s73GzHW3+sQw= Subject key identifier: 3F:52:33:96:1D:31:87:30:DA:92:1C:0C:6A:64:C8:34:56:CB:61:BE Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 01CC Signing time: Fri 22 Aug 2025 15:58:23 +0000 Manifest this update: Fri 22 Aug 2025 15:58:22 +0000 Manifest next update: Fri 29 Aug 2025 15:58:22 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: Ty48Ahhl7OZbg2Aw52v3CnYqs3y/5B86yHJ6XLJXcyQ=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Aug 22 15:58:22 2025 GMT Not After : Aug 29 15:58:22 2025 GMT Subject: CN=68a8939e-ac21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:1a:d1:5f:10:0f:07:5e:44:91:50:94:3c: 57:32:45:8d:ec:d6:8d:32:f2:d1:e2:4d:3e:d1:45: 8a:1e:42:ea:11:01:75:33:08:1a:7f:17:74:3a:25: 52:e3:f3:8f:5a:49:d6:6b:9e:32:76:d4:24:f9:1b: df:97:9c:9b:3b:67:95:91:ac:34:61:d4:8c:d4:75: 04:41:4f:0c:ae:73:72:46:5d:2c:e5:96:64:a8:a6: 68:b6:80:e0:fa:73:3f:6c:21:1f:14:c4:13:c9:70: 77:c6:c1:11:e7:b1:61:94:c2:a5:42:66:9e:30:d2: bc:98:43:df:72:1b:fe:b8:6b:6a:04:ef:05:71:ee: 9f:4e:a8:03:cf:d7:a5:4a:b3:d4:34:7a:3b:75:8e: 50:ee:12:3e:d8:1c:8b:a0:02:c5:f4:4c:e9:ac:a6: d4:c4:dc:3d:0f:4a:b1:fb:58:5b:62:60:5c:38:ce: 89:57:47:4d:76:39:65:f0:57:37:ef:9f:34:2a:a1: 20:af:17:79:89:79:ba:81:50:6a:23:de:68:ef:b3: 97:46:dc:d4:7c:8a:82:32:5c:f7:8e:be:24:e2:3b: 42:cf:85:6a:0a:94:18:60:0b:96:b2:25:e3:5b:57: c8:5f:43:92:4e:be:c0:30:45:6e:aa:80:d1:25:3c: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:52:33:96:1D:31:87:30:DA:92:1C:0C:6A:64:C8:34:56:CB:61:BE X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:17:3e:bf:a8:be:a1:56:19:9f:ca:86:2b:e5:ae:a9:df:2e: 6f:dc:db:d9:f2:19:e0:92:7b:f8:b8:74:2f:a5:af:da:8d:7f: 74:17:a3:e8:fa:12:2f:b1:53:a0:11:fb:53:ec:e7:96:3d:98: e9:e3:cf:c8:c9:bd:b7:fc:34:2e:61:11:c9:b3:e0:0c:c2:8c: 67:72:f8:4c:d7:5c:38:62:6b:d0:01:fd:3b:97:34:36:2a:29: 7a:1c:f4:ce:56:14:7e:11:1b:53:8c:2a:d9:e4:54:99:63:68: 42:3b:eb:b0:6b:42:09:e3:3e:89:bd:76:29:d9:e4:35:fe:ed: 54:c0:ca:8d:42:72:ea:e8:3a:16:a6:eb:1c:2f:98:f6:0e:9b: ac:fd:ea:a7:bc:1b:4e:3d:c8:4a:ac:34:15:55:81:ee:4f:78: 4b:11:6d:39:30:b8:56:6a:06:9b:57:ed:19:5b:4b:12:76:47: 0c:36:8c:e4:9f:b7:12:6e:bd:e9:ed:43:b8:74:5f:2a:38:66: be:a0:72:90:9a:7b:a5:6d:3d:06:b8:dd:2a:69:6a:bd:88:17: 3b:e2:25:36:67:f7:1c:37:ee:44:d3:4f:b0:fa:2f:05:eb:d5: 45:40:3e:49:30:60:d9:35:e4:6e:5c:6c:d4:11:2c:10:cd:72: 3e:9e:3b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUwODIyMTU1ODIyWhcNMjUwODI5MTU1ODIyWjAYMRYwFAYD VQQDEw02OGE4OTM5ZS1hYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu90a0V8QDwdeRJFQlDxXMkWN7NaNMvLR4k0+0UWKHkLqEQF1Mwgafxd0OiVS 4/OPWknWa54ydtQk+Rvfl5ybO2eVkaw0YdSM1HUEQU8MrnNyRl0s5ZZkqKZotoDg +nM/bCEfFMQTyXB3xsER57FhlMKlQmaeMNK8mEPfchv+uGtqBO8Fce6fTqgDz9el SrPUNHo7dY5Q7hI+2ByLoALF9EzprKbUxNw9D0qx+1hbYmBcOM6JV0dNdjll8Fc3 7580KqEgrxd5iXm6gVBqI95o77OXRtzUfIqCMlz3jr4k4jtCz4VqCpQYYAuWsiXj W1fIX0OSTr7AMEVuqoDRJTw2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9SM5Yd MYcw2pIcDGpkyDRWy2G+MB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Fz6/qL6hVhmfyoYr5a6p3y5v3NvZ8hngknv4uHQvpa/ajX90F6Po +hIvsVOgEftT7OeWPZjp48/Iyb23/DQuYRHJs+AMwoxncvhM11w4YmvQAf07lzQ2 Kil6HPTOVhR+ERtTjCrZ5FSZY2hCO+uwa0IJ4z6JvXYp2eQ1/u1UwMqNQnLq6DoW puscL5j2Dpus/eqnvBtOPchKrDQVVYHuT3hLEW05MLhWagabV+0ZW0sSdkcMNozk n7cSbr3p7UO4dF8qOGa+oHKQmnulbT0GuN0qaWq9iBc74iU2Z/ccN+5E00+w+i8F 69VFQD5JMGDZNeRuXGzUESwQzXI+njs8 -----END CERTIFICATE-----Generated at Sat Aug 23 12:41:56 2025 by rpki-client