$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: +Ut9ikOBDyrFy9OCG2anMdnxtfFmvk/pvcxcQYqrj9E= Subject key identifier: EA:C5:B4:08:AC:BC:D4:64:5F:C0:74:6E:23:C6:F0:23:5A:EF:76:BE Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 07CE Signing time: Sat 18 Oct 2025 22:28:51 +0000 Manifest this update: Sat 18 Oct 2025 22:28:50 +0000 Manifest next update: Sat 25 Oct 2025 22:28:50 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: UB1gmtsLxypLb0a4AR/7W2O0jpPsXCbgSj6tsvPh1ag=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Oct 18 22:28:50 2025 GMT Not After : Oct 25 22:28:50 2025 GMT Subject: CN=68f414a3-07ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:bf:ea:9b:0c:12:96:e8:d9:80:1b:0d:eb: 5e:e9:9d:47:d4:03:c7:39:55:09:24:88:36:46:7a: 1e:14:5f:d1:d7:33:2c:a4:6b:ea:3b:33:4d:f6:2b: 7f:73:b3:b4:45:78:61:ca:3f:56:d6:e8:3b:b3:27: b3:b6:bb:4d:f5:b6:ba:43:69:9b:3a:3d:f2:4d:7b: 27:bc:43:05:fb:a4:64:9d:20:3f:ba:8b:90:46:a3: 26:18:15:af:7a:c3:58:e9:fa:0f:25:5d:56:13:a5: f9:d1:d9:bb:8b:4f:59:b2:47:8b:ce:ce:cc:47:4f: bf:f3:b9:f0:44:5e:52:a4:1d:05:d8:18:c0:9b:e9: 8f:f4:1c:08:f3:36:4c:47:72:18:c3:b0:a6:c5:6a: b8:17:11:04:d6:21:59:5f:a5:6e:59:28:70:9f:20: e9:44:e1:f4:97:86:c1:12:ea:43:bd:d2:e7:68:8d: 98:52:2b:9c:cc:a3:cf:75:fa:e4:50:01:29:57:32: 22:8e:01:3d:e1:00:ec:3a:48:d9:25:49:da:6f:5b: c3:5b:d4:12:03:99:e7:e3:f4:d1:74:4d:b4:7b:05: ca:15:3b:23:dc:31:c5:34:ee:8c:ff:f9:fc:f0:3d: a9:19:2c:79:90:47:d6:b7:c3:60:5f:8e:75:49:cd: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:B4:08:AC:BC:D4:64:5F:C0:74:6E:23:C6:F0:23:5A:EF:76:BE X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:84:23:82:27:20:4e:4d:74:29:0d:e1:73:79:23:b7:5b:55: ac:09:f5:3b:9c:fa:e8:e1:ea:aa:af:3e:59:8a:b2:68:f4:13: ee:7a:03:55:07:d2:03:f9:2a:cd:ad:c0:0b:3c:f6:86:cf:de: 15:c0:ac:60:33:b3:0e:d5:72:c6:a2:e7:3f:b1:2c:bf:42:6b: 43:06:6a:a9:10:19:78:81:dc:41:9d:34:21:9b:c6:f5:25:02: cb:f6:47:aa:62:59:a3:9e:17:dd:ca:29:7a:04:0f:05:85:14: 3f:e3:28:e3:91:08:bb:95:d0:9f:f4:27:6f:94:7d:99:63:fa: e7:32:9a:9c:84:5f:53:24:30:85:e8:50:15:6e:c6:7f:a5:f6: bb:0e:db:b1:e3:f0:b4:27:33:a6:03:8a:5a:47:19:65:46:e1: 74:62:8e:48:e9:ea:51:36:3b:8b:c3:86:ae:85:05:ab:ef:01: c5:45:7b:cf:82:1b:1e:ab:0c:7f:f0:7a:32:78:85:a9:5a:06: a6:37:7a:0e:d0:04:42:2e:22:3b:60:84:51:bc:8f:cb:0c:70: 5a:93:b9:f0:ee:31:95:f5:0a:f0:23:77:d0:b6:c6:9d:09:e3: 36:9f:c4:89:b8:47:c4:9a:71:13:b9:b9:f9:71:cc:ed:6c:5e: b2:49:d5:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUxMDE4MjIyODUwWhcNMjUxMDI1MjIyODUwWjAYMRYwFAYD VQQDEw02OGY0MTRhMy0wN2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx+/6psMEpbo2YAbDete6Z1H1APHOVUJJIg2RnoeFF/R1zMspGvqOzNN9it/ c7O0RXhhyj9W1ug7syeztrtN9ba6Q2mbOj3yTXsnvEMF+6RknSA/uouQRqMmGBWv esNY6foPJV1WE6X50dm7i09ZskeLzs7MR0+/87nwRF5SpB0F2BjAm+mP9BwI8zZM R3IYw7CmxWq4FxEE1iFZX6VuWShwnyDpROH0l4bBEupDvdLnaI2YUiuczKPPdfrk UAEpVzIijgE94QDsOkjZJUnab1vDW9QSA5nn4/TRdE20ewXKFTsj3DHFNO6M//n8 8D2pGSx5kEfWt8NgX451Sc0NfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrFtAis vNRkX8B0biPG8CNa73a+MB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnhCOCJyBOTXQpDeFzeSO3W1WsCfU7nPro4eqqrz5ZirJo9BPuegNV B9ID+SrNrcALPPaGz94VwKxgM7MO1XLGouc/sSy/QmtDBmqpEBl4gdxBnTQhm8b1 JQLL9keqYlmjnhfdyil6BA8FhRQ/4yjjkQi7ldCf9CdvlH2ZY/rnMpqchF9TJDCF 6FAVbsZ/pfa7Dtux4/C0JzOmA4paRxllRuF0Yo5I6epRNjuLw4auhQWr7wHFRXvP ghseqwx/8HoyeIWpWgamN3oO0ARCLiI7YIRRvI/LDHBak7nw7jGV9QrwI3fQtsad CeM2n8SJuEfEmnETubn5ccztbF6ySdUP -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:31 2025 by rpki-client