$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json) Hash identifier: TO6kNQJ5yB/mZZqJvMxCs4sWvbndaSh3Pwg8xCsfyqY= Subject key identifier: DF:BC:95:4A:8F:F4:CB:B6:53:20:39:C6:56:62:A8:16:DE:3E:F5:14 Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft Manifest number: 0168 Signing time: Sun 19 Oct 2025 06:33:51 +0000 Manifest this update: Sun 19 Oct 2025 06:33:51 +0000 Manifest next update: Sun 26 Oct 2025 06:33:51 +0000 Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: zSxZ66QZJlsuOuckZX2i4CnOH50k/iKtPQJSk1nVs4g=) 2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: +vHH0mUjaHjNGLcgyypJ8y/RcZMmCEJZHVNAnsairms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Validity Not Before: Oct 19 06:33:51 2025 GMT Not After : Oct 26 06:33:51 2025 GMT Subject: CN=68f4864f-2748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:52:55:38:a9:93:ab:25:56:32:45:ce:c3: 65:e2:82:5c:5d:06:5b:6f:04:d2:54:f1:d6:ec:57: d6:a9:ab:2b:ec:9e:26:7a:c1:39:08:4c:05:e1:d2: 7f:1d:89:0d:e3:86:e3:15:90:b5:86:2d:a0:24:17: 84:b7:93:26:28:6f:5b:a0:a4:ab:03:ab:40:f4:a0: 27:75:b1:8c:0e:de:87:ad:eb:8b:43:f8:0c:00:df: 01:a5:13:ad:95:35:0b:10:24:a3:90:bb:7d:ad:60: c6:9a:6e:2d:e1:7a:0b:26:f0:0d:e5:35:80:ff:5a: 07:56:96:3b:ad:1a:98:9f:c9:bd:1f:cc:70:fc:ff: d1:f4:67:61:d4:eb:c0:68:9d:92:ed:38:79:fe:81: a5:d0:2c:00:89:7a:63:d7:f7:66:59:5e:a3:25:c8: 5b:4b:47:e9:37:97:73:21:3a:ff:71:a3:cf:58:50: cf:44:f9:78:09:95:12:ce:80:57:74:a7:55:94:6c: 9f:57:49:1b:19:5b:63:be:4d:b9:23:60:9c:a5:4d: 62:8e:e9:56:6b:2e:80:31:25:b7:fa:84:d8:cf:dc: 69:65:ab:68:0e:fc:32:e2:b3:93:20:f7:ed:9e:7c: 2b:ad:55:94:c1:cb:70:81:8d:90:59:d6:7f:b8:8f: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:95:4A:8F:F4:CB:B6:53:20:39:C6:56:62:A8:16:DE:3E:F5:14 X509v3 Authority Key Identifier: keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:3b:3f:37:0d:b5:43:8e:0f:fa:78:be:82:b8:7d:5d:bc: be:13:0a:ad:08:e4:d0:cd:ab:12:e5:2e:d8:e8:5b:9b:26:44: b4:ae:19:02:f8:fb:1c:7f:00:05:1b:19:2d:63:38:50:74:7a: 96:bc:29:22:49:3a:37:48:51:e7:12:e6:af:09:d1:a0:bc:c1: 0c:2d:b0:fc:64:f2:4b:38:2a:a7:80:bc:19:5a:ef:1e:f4:e1: d1:49:85:27:62:76:ac:91:ff:57:07:bf:9b:3a:ae:ac:bb:92: e9:18:6a:01:05:81:39:52:76:bc:b7:57:16:5a:49:9e:f7:e7: b2:aa:43:f8:36:3e:b0:bc:c2:be:26:2a:d1:67:54:00:b4:27: 60:ed:01:75:7d:41:17:b9:3c:4d:85:1d:37:5a:bb:7d:53:5c: a4:02:d4:4b:bb:4e:ab:e8:12:97:5f:2b:84:b9:ec:08:39:17: c1:89:8e:ba:18:93:aa:7b:11:fc:1d:a5:fb:2d:4a:51:31:1d: a7:2e:f9:1f:63:f1:21:f7:ba:80:5f:45:0c:5b:24:e0:7e:93: 7f:93:1a:44:33:b0:42:09:fc:98:2d:de:11:45:20:9e:23:7c: 16:c7:a9:e3:4d:68:3c:6d:b1:f7:65:53:ac:da:28:58:c7:5a: c4:8f:68:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3QjExMTAvBgNVBAUTKDQzMkEzNkU2RDU3MDBCMEJDQUNDRTBGNDE1NzZBRTZC MTNDQUQzQzAwHhcNMjUxMDE5MDYzMzUxWhcNMjUxMDI2MDYzMzUxWjAYMRYwFAYD VQQDEw02OGY0ODY0Zi0yNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9VSVTipk6slVjJFzsNl4oJcXQZbbwTSVPHW7FfWqasr7J4mesE5CEwF4dJ/ HYkN44bjFZC1hi2gJBeEt5MmKG9boKSrA6tA9KAndbGMDt6HreuLQ/gMAN8BpROt lTULECSjkLt9rWDGmm4t4XoLJvAN5TWA/1oHVpY7rRqYn8m9H8xw/P/R9Gdh1OvA aJ2S7Th5/oGl0CwAiXpj1/dmWV6jJchbS0fpN5dzITr/caPPWFDPRPl4CZUSzoBX dKdVlGyfV0kbGVtjvk25I2CcpU1ijulWay6AMSW3+oTYz9xpZatoDvwy4rOTIPft nnwrrVWUwctwgY2QWdZ/uI8U5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+8lUqP 9Mu2UyA5xlZiqBbePvUUMB8GA1UdIwQYMBaAFEMqNubVcAsLyszg9BV2rmsTytPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdCMS84RkFGMkJERTgy QTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3dkt6T0QwRlhhdWF4UEsw OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5bzI1dFZ3Q3d2S3pPRDBGWGF1YXhQSzA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdCMS84RkFGMkJERTgyQTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3 dkt6T0QwRlhhdWF4UEswOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1DTs/Nw21Q44P+ni+grh9Xby+EwqtCOTQzasS5S7Y6FubJkS0rhkC +PscfwAFGxktYzhQdHqWvCkiSTo3SFHnEuavCdGgvMEMLbD8ZPJLOCqngLwZWu8e 9OHRSYUnYnaskf9XB7+bOq6su5LpGGoBBYE5Una8t1cWWkme9+eyqkP4Nj6wvMK+ JirRZ1QAtCdg7QF1fUEXuTxNhR03Wrt9U1ykAtRLu06r6BKXXyuEuewIORfBiY66 GJOqexH8HaX7LUpRMR2nLvkfY/Eh97qAX0UMWyTgfpN/kxpEM7BCCfyYLd4RRSCe I3wWx6njTWg8bbH3ZVOs2ihYx1rEj2gV -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:44 2025 by rpki-client