$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: z2hFx8oRhqtmEk2yKuOBI3VYFrexock4uDCAydFsOmQ= Subject key identifier: 08:57:A5:B1:13:45:51:AE:43:D9:B7:32:24:F8:DC:AD:D0:3F:2E:B4 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 02AF Signing time: Sun 19 Oct 2025 03:40:35 +0000 Manifest this update: Sun 19 Oct 2025 03:40:33 +0000 Manifest next update: Sun 26 Oct 2025 03:40:33 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: 1C0RBNbc0XkXaibwwe1mrhZqKHN1j6X6a7mz2L3NXQo=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Oct 19 03:40:33 2025 GMT Not After : Oct 26 03:40:33 2025 GMT Subject: CN=68f45db2-5e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:7a:b1:0c:db:bd:6d:70:54:dd:ac:93:30: 40:f0:26:7d:4e:1a:9f:04:b3:71:61:60:5c:36:3b: 92:7e:5e:b0:e2:4a:4a:2f:bf:0d:35:6e:9a:0f:0c: e2:b9:29:73:d2:99:d5:1e:e0:e4:23:12:06:60:0a: 22:05:ad:9e:9a:f3:b3:74:6a:6a:b9:34:86:99:0e: 58:d0:e2:57:21:c2:47:e7:ec:11:ac:e6:46:0f:47: e2:b5:1f:06:05:41:e7:b2:b1:85:69:c3:45:34:d2: f6:c1:4e:41:d7:f9:bb:d0:7d:ac:f2:e4:a0:b7:11: 17:28:70:43:02:1a:37:48:e7:38:69:56:58:6d:58: 29:f0:f2:93:27:0d:80:80:3c:90:e8:46:1c:e7:16: ed:ec:0a:f4:3e:78:bd:5a:01:88:1a:f0:d2:b4:c3: 9d:c7:a1:70:18:84:0e:a1:de:c0:b9:67:c2:3f:eb: 5b:39:1e:bc:b3:17:d4:fa:fc:8a:9b:a3:01:32:d2: 57:ef:b1:a0:f3:98:33:da:f6:89:b2:32:9a:88:51: 79:bc:b2:cc:9d:75:62:a7:f4:7a:d2:a5:06:02:77: 58:c6:95:3d:43:89:bd:9a:21:2e:6a:7d:5c:9a:49: d5:5d:6a:83:eb:c5:b3:43:d6:00:4e:fd:3f:b9:6d: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:57:A5:B1:13:45:51:AE:43:D9:B7:32:24:F8:DC:AD:D0:3F:2E:B4 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:14:fa:15:53:69:71:5a:a6:7a:66:50:92:e3:76:39:e0:f3: e4:63:ed:f9:01:d3:92:ff:dc:56:80:86:e6:15:45:fe:c4:07: e0:48:83:ed:b7:39:a3:79:82:eb:6c:a4:42:4e:df:67:9a:6f: ca:9e:ca:5a:6d:2d:52:a4:34:30:04:74:33:6e:39:7b:91:2f: f6:f4:ce:47:ce:75:13:7a:21:6a:fa:64:fd:f4:f4:a6:75:37: 51:04:79:48:fc:ad:b0:29:35:b9:b5:47:11:d2:f1:71:4c:6f: 63:a1:fc:73:0d:4d:7b:df:6c:9f:79:d9:75:0a:7c:1b:f1:76: 0e:92:30:94:29:19:d1:b2:b6:b4:37:b8:a5:07:b7:a9:1b:36: 64:60:f9:47:7f:90:b5:a3:ea:bc:07:64:26:dc:a7:9d:9c:af: 9c:f3:8b:96:57:4a:33:bc:61:68:99:f7:4c:07:33:c3:d7:b9: b0:a0:d0:69:89:b0:82:da:48:38:ba:6b:2e:50:ca:13:ff:ef: 93:62:fd:a2:26:0d:4a:21:9a:ea:f7:ed:37:de:8c:b6:82:5e: 8c:4b:7e:45:d9:da:51:87:9c:fa:7b:23:8b:e1:75:d7:ff:ab: e7:7c:62:7e:19:e8:b2:38:73:e3:58:c1:66:23:16:86:86:89: 6c:cd:9c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUxMDE5MDM0MDMzWhcNMjUxMDI2MDM0MDMzWjAYMRYwFAYD VQQDEw02OGY0NWRiMi01ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LN6sQzbvW1wVN2skzBA8CZ9ThqfBLNxYWBcNjuSfl6w4kpKL78NNW6aDwzi uSlz0pnVHuDkIxIGYAoiBa2emvOzdGpquTSGmQ5Y0OJXIcJH5+wRrOZGD0fitR8G BUHnsrGFacNFNNL2wU5B1/m70H2s8uSgtxEXKHBDAho3SOc4aVZYbVgp8PKTJw2A gDyQ6EYc5xbt7Ar0Pni9WgGIGvDStMOdx6FwGIQOod7AuWfCP+tbOR68sxfU+vyK m6MBMtJX77Gg85gz2vaJsjKaiFF5vLLMnXVip/R60qUGAndYxpU9Q4m9miEuan1c mknVXWqD68WzQ9YATv0/uW0IRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhXpbET RVGuQ9m3MiT43K3QPy60MB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqFPoVU2lxWqZ6ZlCS43Y54PPkY+35AdOS/9xWgIbmFUX+xAfgSIPt tzmjeYLrbKRCTt9nmm/KnspabS1SpDQwBHQzbjl7kS/29M5HznUTeiFq+mT99PSm dTdRBHlI/K2wKTW5tUcR0vFxTG9jofxzDU1732yfedl1Cnwb8XYOkjCUKRnRsra0 N7ilB7epGzZkYPlHf5C1o+q8B2Qm3KednK+c84uWV0ozvGFomfdMBzPD17mwoNBp ibCC2kg4umsuUMoT/++TYv2iJg1KIZrq9+033oy2gl6MS35F2dpRh5z6eyOL4XXX /6vnfGJ+GeiyOHPjWMFmIxaGholszZyU -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:49 2025 by rpki-client