$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json) Hash identifier: X0bUt1dpkLLIG5owtXTUUSjta7g7f+LnYfBJqtmHsIQ= Subject key identifier: A6:B8:F9:76:90:EC:F9:89:0F:90:99:B7:B6:F9:AB:E1:4E:A1:C4:23 Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0BC8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft Manifest number: 0BC1 Signing time: Mon 20 Oct 2025 15:20:10 +0000 Manifest this update: Mon 20 Oct 2025 15:20:09 +0000 Manifest next update: Mon 27 Oct 2025 15:20:09 +0000 Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: pVcTGDhGofebHR4iwzwLADm3BP03cx1wTTY5hED81vA=) 2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /8fEEtPdMyUdjQ1z+LPnGcbnmSc1TogzrljlPk/+Zoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: Oct 20 15:20:09 2025 GMT Not After : Oct 27 15:20:09 2025 GMT Subject: CN=68f6532a-1a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:fe:05:ef:f6:40:85:76:b9:69:f7:cc:a3: 46:1c:8f:b3:17:a6:92:41:48:a2:80:4b:6b:2f:1c: 5f:6c:15:8b:96:08:24:a3:52:a4:53:9d:8c:cd:f1: 25:65:33:b5:75:80:7d:83:bb:78:85:b7:1e:ba:aa: 7f:fa:8d:93:05:e6:07:43:10:4d:18:f7:86:64:4f: ff:67:cc:f3:36:ae:c5:e9:d6:36:ce:9f:d6:ec:c9: 79:be:8a:0e:c6:10:ec:46:5e:f4:4b:be:82:85:88: 77:ec:d9:e1:84:29:d5:a9:53:8d:57:d7:e7:0b:7f: 80:59:52:4a:3a:ee:3d:6b:f9:a6:d5:25:8a:81:1b: 19:1c:b1:16:8f:77:b7:af:80:d4:cc:ef:24:8f:48: f8:90:76:78:94:70:96:d1:b4:b5:a9:91:40:2b:34: a6:05:ea:34:91:dd:a5:cb:8d:48:a0:86:b2:d6:99: 03:7c:e5:7d:ec:69:e3:5f:d6:f1:35:5d:3d:fb:cf: 80:6e:90:3d:b8:d0:b9:d0:d1:79:4e:d5:7f:47:f4: 00:da:58:b4:ba:f6:a9:cc:79:7c:77:6f:b1:8a:74: 25:2f:ca:4e:2a:c8:6d:e8:21:b6:f1:b4:e2:cf:07: 56:1d:bf:a2:c7:87:a8:2c:eb:c4:e0:78:2f:dc:fa: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B8:F9:76:90:EC:F9:89:0F:90:99:B7:B6:F9:AB:E1:4E:A1:C4:23 X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:95:4a:e8:fb:bc:10:34:63:60:b0:1f:0d:8d:50:42:40:12: e5:75:ff:70:69:02:3d:b4:42:ae:3b:95:5e:b6:f5:0a:4f:81: 48:5e:c5:4b:1c:15:dd:24:e5:fb:04:82:8e:65:83:a5:11:82: 3f:b7:81:78:e0:16:2f:78:34:fe:e5:18:b5:8f:6f:26:49:5b: 33:ac:dd:ba:e0:0b:9c:7b:5b:99:92:a1:14:db:39:5a:52:e4: 91:e0:bc:a5:6a:47:86:1f:f5:57:35:95:9c:65:0b:6d:5a:e5: be:19:c5:a9:51:8b:9e:39:75:f9:1c:9d:a4:39:49:4c:14:06: e2:43:47:d4:a8:ab:62:6f:9f:06:16:a5:87:8c:d9:09:36:07: 2b:29:85:f6:e4:aa:22:71:10:31:54:1f:58:7c:be:33:3e:e9: 88:58:1f:32:51:11:5e:52:cb:8f:d3:d7:fb:64:af:01:40:d4: 45:d3:93:8d:5f:00:09:bf:eb:27:9f:ca:70:25:d2:2d:90:7a: 0d:65:ad:29:87:90:72:d4:f6:3e:a1:89:a9:e8:21:f2:ba:0e: 60:a1:9c:17:6e:8d:28:06:4e:f2:59:65:e9:d7:af:22:3a:81: 64:47:79:ef:e3:40:83:e4:6c:b8:ae:69:3c:c8:af:a2:2f:1f: 7f:2f:c5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjUxMDIwMTUyMDA5WhcNMjUxMDI3MTUyMDA5WjAYMRYwFAYD VQQDEw02OGY2NTMyYS0xYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEn+Be/2QIV2uWn3zKNGHI+zF6aSQUiigEtrLxxfbBWLlggko1KkU52MzfEl ZTO1dYB9g7t4hbceuqp/+o2TBeYHQxBNGPeGZE//Z8zzNq7F6dY2zp/W7Ml5vooO xhDsRl70S76ChYh37NnhhCnVqVONV9fnC3+AWVJKOu49a/mm1SWKgRsZHLEWj3e3 r4DUzO8kj0j4kHZ4lHCW0bS1qZFAKzSmBeo0kd2ly41IoIay1pkDfOV97GnjX9bx NV09+8+AbpA9uNC50NF5TtV/R/QA2li0uvapzHl8d2+xinQlL8pOKsht6CG28bTi zwdWHb+ix4eoLOvE4Hgv3Pq4kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa4+XaQ 7PmJD5CZt7b5q+FOocQjMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi83QTc1MEEwQTJERDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFL X0xpNmdWbWM0d1owVkVfWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7lUro+7wQNGNgsB8NjVBCQBLldf9waQI9tEKuO5VetvUKT4FIXsVL HBXdJOX7BIKOZYOlEYI/t4F44BYveDT+5Ri1j28mSVszrN264Auce1uZkqEU2zla UuSR4LylakeGH/VXNZWcZQttWuW+GcWpUYueOXX5HJ2kOUlMFAbiQ0fUqKtib58G FqWHjNkJNgcrKYX25KoicRAxVB9YfL4zPumIWB8yURFeUsuP09f7ZK8BQNRF05ON XwAJv+snn8pwJdItkHoNZa0ph5By1PY+oYmp6CHyug5goZwXbo0oBk7yWWXp168i OoFkR3nv40CD5Gy4rmk8yK+iLx9/L8UC -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:09 2025 by rpki-client