$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: lQh1RQWu7tX6hi93qtib31nuA8AWJN0xv0rLloVj4YU= Subject key identifier: F8:DC:99:EE:98:34:2F:9B:41:18:FC:14:F0:B9:AC:6C:F1:C1:AD:4F Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 023F Signing time: Sat 18 Oct 2025 23:42:50 +0000 Manifest this update: Sat 18 Oct 2025 23:42:49 +0000 Manifest next update: Sat 25 Oct 2025 23:42:49 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: lCWu6yMsoiL0TvQh52adR6A02H+TDmqXCGswURFvRKA=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Oct 18 23:42:49 2025 GMT Not After : Oct 25 23:42:49 2025 GMT Subject: CN=68f425f9-d997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:c6:13:19:c8:3b:2f:5b:20:a2:08:ed:25: c1:a5:84:d8:a0:ae:85:6a:11:6f:74:3e:eb:02:7d: c2:8d:eb:c1:05:09:59:78:eb:93:37:8d:e9:54:fb: 4b:f6:30:7e:54:df:33:58:da:29:cb:f2:1c:ad:b8: 6c:80:a4:59:b7:3e:dc:31:c2:39:79:ba:66:dc:74: fa:37:21:50:e6:bb:7f:b9:f2:62:76:84:83:83:c9: ca:87:1a:b0:7f:33:db:e7:47:22:04:60:49:5f:7a: bb:6c:14:97:08:99:7f:e7:ac:3f:08:86:99:66:85: 28:e8:13:7b:05:b1:8c:4c:0e:67:55:46:38:f0:5e: eb:74:ee:76:9c:8f:7b:79:1c:d1:1a:ff:29:86:96: 41:27:92:80:9c:8b:b5:18:78:d5:79:46:01:eb:79: 50:95:62:75:2c:4d:d3:c1:ad:c3:93:b9:20:b7:6e: b6:c8:4e:91:c8:db:53:21:38:85:03:77:c0:be:1d: ae:46:48:2e:1d:c2:51:77:32:f1:b9:09:97:2b:73: 45:16:c3:6a:38:50:74:87:23:0a:1a:d4:bd:d4:06: 62:76:e1:5c:ae:da:4f:02:ef:09:b8:cf:bd:bb:f4: 1c:1f:ad:78:55:40:4a:f5:fc:0e:8e:48:95:b0:51: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:99:EE:98:34:2F:9B:41:18:FC:14:F0:B9:AC:6C:F1:C1:AD:4F X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e6:a5:15:71:8b:4c:a9:1f:a6:b3:49:78:28:56:19:5a:05: 77:b4:49:c0:c3:c1:ff:10:c6:81:ba:7b:95:32:b9:fd:6e:c1: d5:34:1f:31:43:9f:66:49:51:71:49:09:78:cf:9f:71:f7:04: 74:75:26:f0:21:a8:e7:a8:9b:a4:25:86:d6:57:a4:ad:b1:a8: 15:22:b3:79:cd:a3:e7:85:54:9f:f4:66:62:e5:75:ed:f1:48: cd:5a:96:e0:0a:90:b1:ee:f1:e2:5e:91:3f:8a:26:49:6c:86: 97:6c:42:86:61:83:d6:37:c0:a2:12:39:77:ea:cc:c2:61:06: b3:a7:03:3b:67:46:18:27:3e:72:ff:d6:e4:25:77:85:db:fa: c5:e8:c6:9a:3b:6a:09:a4:4a:e0:ef:db:f3:cc:75:d4:0f:58: 74:b2:50:ba:f9:30:a1:d3:1a:39:1e:a0:fd:26:f3:15:d2:78: 33:7d:4e:a2:8a:59:bf:f6:38:9a:b5:1d:d7:40:9e:38:ab:76: fd:30:23:ab:cc:68:5e:12:16:00:97:d1:ac:ed:2e:73:83:06: 59:76:bc:96:92:28:6d:6d:02:93:ef:71:01:2f:4d:93:98:e7: a7:d0:60:68:cc:a7:5e:4b:17:2f:36:e3:a9:3a:f8:60:7b:1e: 96:4b:61:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUxMDE4MjM0MjQ5WhcNMjUxMDI1MjM0MjQ5WjAYMRYwFAYD VQQDEw02OGY0MjVmOS1kOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycTGExnIOy9bIKII7SXBpYTYoK6FahFvdD7rAn3CjevBBQlZeOuTN43pVPtL 9jB+VN8zWNopy/IcrbhsgKRZtz7cMcI5ebpm3HT6NyFQ5rt/ufJidoSDg8nKhxqw fzPb50ciBGBJX3q7bBSXCJl/56w/CIaZZoUo6BN7BbGMTA5nVUY48F7rdO52nI97 eRzRGv8phpZBJ5KAnIu1GHjVeUYB63lQlWJ1LE3Twa3Dk7kgt262yE6RyNtTITiF A3fAvh2uRkguHcJRdzLxuQmXK3NFFsNqOFB0hyMKGtS91AZiduFcrtpPAu8JuM+9 u/QcH614VUBK9fwOjkiVsFGqewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjcme6Y NC+bQRj8FPC5rGzxwa1PMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN5qUVcYtMqR+ms0l4KFYZWgV3tEnAw8H/EMaBunuVMrn9bsHVNB8x Q59mSVFxSQl4z59x9wR0dSbwIajnqJukJYbWV6StsagVIrN5zaPnhVSf9GZi5XXt 8UjNWpbgCpCx7vHiXpE/iiZJbIaXbEKGYYPWN8CiEjl36szCYQazpwM7Z0YYJz5y /9bkJXeF2/rF6MaaO2oJpErg79vzzHXUD1h0slC6+TCh0xo5HqD9JvMV0ngzfU6i ilm/9jiatR3XQJ44q3b9MCOrzGheEhYAl9Gs7S5zgwZZdryWkihtbQKT73EBL02T mOen0GBozKdeSxcvNuOpOvhgex6WS2FU -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:16 2025 by rpki-client