$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json) Hash identifier: 5ry10zX/aP/89yva9diL8nt8jzNen2VMs864NV3YqKw= Subject key identifier: 8E:4D:E6:A7:A8:6D:33:59:3C:7C:E1:95:EB:19:C5:37:2D:E6:F2:BE Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft Manifest number: 027D Signing time: Sun 19 Oct 2025 03:51:27 +0000 Manifest this update: Sun 19 Oct 2025 03:51:26 +0000 Manifest next update: Sun 26 Oct 2025 03:51:26 +0000 Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: CS6kZgJ0gZ6R2kTn8syfCTGV89UJPmwhUXe38kP5DpA=) 2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: DvV5HozP+sR1ACB5NUpTfiC/G52OiXFRlLclsmTMjHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Validity Not Before: Oct 19 03:51:26 2025 GMT Not After : Oct 26 03:51:26 2025 GMT Subject: CN=68f4603e-37f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:46:24:a7:b9:c0:ad:19:18:4c:49:27:1f: 18:78:e6:56:fe:49:ce:38:8f:b4:8b:33:77:c7:5c: 5b:1c:82:9e:a6:09:14:38:90:ac:48:44:f4:34:20: c4:eb:5e:e3:60:70:4d:b9:68:04:12:07:10:91:5b: 8c:7f:8d:7f:87:42:bd:8c:8a:15:cb:fa:95:d9:56: ba:ee:61:8b:a8:8f:15:45:92:81:73:29:c9:b0:19: 5e:a6:12:6e:3b:0f:29:17:87:c7:36:e1:ca:23:5d: 97:08:37:25:75:79:64:3f:18:83:2c:3c:8f:68:bc: 2f:8f:73:73:d1:66:d0:0d:34:2f:00:7f:ea:00:13: ac:aa:bc:b1:85:77:b9:63:ec:3b:9c:d2:5a:ce:55: 2f:e8:9e:9c:c3:fd:94:ab:69:b9:15:1c:a2:a1:54: 50:01:7b:ee:03:13:ed:d1:06:54:75:20:f3:0c:a5: 09:ad:1a:1e:bf:70:40:d0:4e:4b:4a:17:80:7b:10: b9:dc:02:eb:13:e9:6b:d9:93:4c:84:d8:0d:8d:37: 97:c7:67:1a:e5:75:59:d5:11:c2:f9:71:6b:89:56: ac:bb:a4:84:4d:30:9c:7e:51:85:4a:b7:99:fe:e4: a8:06:7e:ae:5b:ea:5e:27:ab:90:c9:cd:95:4f:8e: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4D:E6:A7:A8:6D:33:59:3C:7C:E1:95:EB:19:C5:37:2D:E6:F2:BE X509v3 Authority Key Identifier: keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fd:bb:a8:f2:4b:cb:19:98:39:ec:91:27:d7:59:61:ec:c2: 30:4b:ac:35:1d:fb:f4:8e:9e:fa:08:85:f3:4e:a6:bc:9d:56: c1:bc:dc:bb:56:cc:c3:62:d7:f3:86:75:8e:ef:ba:a7:0e:e7: 78:7d:b4:4b:4d:02:f8:d4:0c:72:f0:65:05:af:ef:c3:a3:3b: ed:22:c1:fc:25:aa:a6:bd:a2:f3:ea:35:d0:24:5d:9b:7a:27: 3c:75:35:d2:b9:47:62:c5:6d:21:df:e6:c7:2e:b0:7b:ac:ee: 81:32:64:8d:1c:fa:b9:74:38:d0:63:06:42:13:4d:ca:83:50: 92:24:2a:52:34:16:96:5f:89:b8:10:7d:0f:54:8e:de:88:02: c5:0d:98:25:dd:0d:c8:b4:e6:ed:0c:1e:00:0d:61:6c:fc:fc: 14:dd:ae:07:25:d7:6d:d3:91:42:2f:d9:49:d7:4c:bc:f8:e9: db:4e:2a:28:65:89:d1:ac:a3:03:a2:d0:7c:06:22:7a:a8:cf: b2:d1:ae:1f:61:bf:f5:8e:af:6b:d4:5c:c3:8f:3e:23:3c:1b: db:0b:fc:e5:6b:92:38:71:77:a5:dc:ce:1c:1f:98:19:5e:ba: d2:5e:29:91:63:f5:d0:7b:6c:d8:d2:79:a5:75:e5:e7:39:30: 6d:52:8d:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3RjkxMTAvBgNVBAUTKEFBNTc5MEIwRjdENzYyQkU5MzJCOURDNjExQjdENjlC OTA2ODVBNEUwHhcNMjUxMDE5MDM1MTI2WhcNMjUxMDI2MDM1MTI2WjAYMRYwFAYD VQQDEw02OGY0NjAzZS0zN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJVGJKe5wK0ZGExJJx8YeOZW/knOOI+0izN3x1xbHIKepgkUOJCsSET0NCDE 617jYHBNuWgEEgcQkVuMf41/h0K9jIoVy/qV2Va67mGLqI8VRZKBcynJsBlephJu Ow8pF4fHNuHKI12XCDcldXlkPxiDLDyPaLwvj3Nz0WbQDTQvAH/qABOsqryxhXe5 Y+w7nNJazlUv6J6cw/2Uq2m5FRyioVRQAXvuAxPt0QZUdSDzDKUJrRoev3BA0E5L SheAexC53ALrE+lr2ZNMhNgNjTeXx2ca5XVZ1RHC+XFriVasu6SETTCcflGFSreZ /uSoBn6uW+peJ6uQyc2VT475DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5N5qeo bTNZPHzhlesZxTct5vK+MB8GA1UdIwQYMBaAFKpXkLD312K+kyudxhG31puQaFpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdGOS8yQUVDRTY2QTI3 QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFlyNlRLNTNHRWJmV201Qm9X azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FsZVFzUGZYWXI2VEs1M0dFYmZXbTVCb1drNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdGOS8yQUVDRTY2QTI3QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFly NlRLNTNHRWJmV201Qm9XazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA/buo8kvLGZg57JEn11lh7MIwS6w1Hfv0jp76CIXzTqa8nVbBvNy7 VszDYtfzhnWO77qnDud4fbRLTQL41Axy8GUFr+/DozvtIsH8JaqmvaLz6jXQJF2b eic8dTXSuUdixW0h3+bHLrB7rO6BMmSNHPq5dDjQYwZCE03Kg1CSJCpSNBaWX4m4 EH0PVI7eiALFDZgl3Q3ItObtDB4ADWFs/PwU3a4HJddt05FCL9lJ10y8+OnbTioo ZYnRrKMDotB8BiJ6qM+y0a4fYb/1jq9r1FzDjz4jPBvbC/zla5I4cXel3M4cH5gZ XrrSXimRY/XQe2zY0nmldeXnOTBtUo3v -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:08 2025 by rpki-client