$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: OwOx/hs48ihpuCxo3cuYJNwBSGF+pPqxR/h5/gaUGaA= Subject key identifier: 9F:3F:F2:69:36:B6:11:B5:8E:39:76:0F:F3:02:25:56:91:64:EA:3A Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 026E Signing time: Sun 19 Oct 2025 03:54:50 +0000 Manifest this update: Sun 19 Oct 2025 03:54:50 +0000 Manifest next update: Sun 26 Oct 2025 03:54:50 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: Kdqt5bn3/frjtfHlun+MUBTZIRAcoklU6DGRACfNGaM=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: uhIrsP1ipJFX3Ct1IhnIwZmCjEIkpTywt0iwOfj/NzQ=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: 7cBmRSUB3GK5yJL7yaxAGg0XDgWGErxNw0g36JGOJzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: Oct 19 03:54:50 2025 GMT Not After : Oct 26 03:54:50 2025 GMT Subject: CN=68f4610a-69bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:c2:0c:68:48:f4:44:41:94:7e:2a:06:fa: 37:5c:e6:06:4f:d4:30:6e:ae:0f:03:a6:f6:b5:1e: 31:ea:0c:c1:29:17:0f:2a:16:ca:0a:7d:d3:13:67: ad:c2:3d:fe:4c:32:be:cc:0b:5f:f6:3d:c1:02:f5: a2:f8:a4:79:35:19:7e:f1:2a:65:b5:1a:a9:56:c9: 83:ee:2d:57:6b:54:76:de:94:07:bc:ef:a5:05:6f: ef:0c:ed:44:07:7c:65:11:a0:a9:3c:63:7f:16:ae: c1:bf:04:f3:a7:20:9f:e5:04:bc:d7:aa:a6:45:45: a6:25:1f:74:ad:d6:49:e7:53:94:06:61:36:5f:15: 9e:ae:a7:8f:37:e6:3d:b8:63:b7:fb:c2:4e:54:6e: 9e:3b:a6:79:11:58:7a:5a:68:87:cd:73:a2:4e:7b: 37:2c:03:8b:dd:90:ba:3a:27:f8:3e:4e:10:3b:92: 4e:a6:6c:ae:c5:23:20:c2:cc:a9:81:60:f0:05:e4: fd:cf:fd:94:b4:9d:45:33:30:1c:0f:85:c1:78:ca: 73:40:f8:c2:82:49:ac:c8:ff:68:e0:7c:9c:69:a5: 3d:71:9d:63:e8:70:4f:d3:56:4e:de:5b:cf:e7:70: 08:47:45:70:e7:e0:2d:e6:62:4c:45:ad:45:29:01: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:F2:69:36:B6:11:B5:8E:39:76:0F:F3:02:25:56:91:64:EA:3A X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bc:b2:7e:47:2b:7f:79:51:17:b8:ab:30:06:6b:5c:e2:0d: 88:a7:33:34:b0:0c:9e:85:8c:72:75:e5:25:f8:86:07:75:45: a3:77:bf:63:98:88:dc:3e:dc:44:00:99:de:bb:6c:2a:9c:53: 67:00:a2:23:51:20:b3:f7:2d:7f:85:66:83:1c:10:91:b1:fd: 27:4d:49:53:98:84:60:8a:ca:3e:56:82:f1:ea:45:18:a4:e3: 5f:24:06:90:ff:e5:ec:c5:90:d9:b2:cd:a2:f5:a9:cc:a2:48: d5:99:1c:ad:a7:c6:99:36:10:db:95:f2:bf:79:e2:04:c9:95: 54:87:6d:b5:a7:d7:ee:9b:94:0e:29:7e:80:20:47:c3:cf:b0: 4a:4e:f9:e0:de:ca:96:25:40:d9:93:a8:05:ec:80:60:80:f9: 96:b9:0f:26:28:f9:df:89:d2:31:0f:49:67:14:28:98:ed:f7: a0:47:cb:ce:c5:12:1a:cf:ab:aa:8f:d6:8c:0d:88:e9:68:99: 70:91:e6:e4:77:78:63:56:57:c4:6c:af:2f:2b:86:16:59:c0: d5:75:94:d4:bb:c3:72:6c:d0:64:a0:a8:6f:2e:ef:f1:a6:ea: a9:87:ae:7d:75:46:2f:53:33:4e:d0:ef:97:ae:14:72:fa:82: ee:be:f8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUxMDE5MDM1NDUwWhcNMjUxMDI2MDM1NDUwWjAYMRYwFAYD VQQDEw02OGY0NjEwYS02OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4N3CDGhI9ERBlH4qBvo3XOYGT9Qwbq4PA6b2tR4x6gzBKRcPKhbKCn3TE2et wj3+TDK+zAtf9j3BAvWi+KR5NRl+8SpltRqpVsmD7i1Xa1R23pQHvO+lBW/vDO1E B3xlEaCpPGN/Fq7BvwTzpyCf5QS816qmRUWmJR90rdZJ51OUBmE2XxWerqePN+Y9 uGO3+8JOVG6eO6Z5EVh6WmiHzXOiTns3LAOL3ZC6Oif4Pk4QO5JOpmyuxSMgwsyp gWDwBeT9z/2UtJ1FMzAcD4XBeMpzQPjCgkmsyP9o4HycaaU9cZ1j6HBP01ZO3lvP 53AIR0Vw5+At5mJMRa1FKQHfXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8/8mk2 thG1jjl2D/MCJVaRZOo6MB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArvLJ+Ryt/eVEXuKswBmtc4g2IpzM0sAyehYxydeUl+IYHdUWjd79j mIjcPtxEAJneu2wqnFNnAKIjUSCz9y1/hWaDHBCRsf0nTUlTmIRgiso+VoLx6kUY pONfJAaQ/+XsxZDZss2i9anMokjVmRytp8aZNhDblfK/eeIEyZVUh221p9fum5QO KX6AIEfDz7BKTvng3sqWJUDZk6gF7IBggPmWuQ8mKPnfidIxD0lnFCiY7fegR8vO xRIaz6uqj9aMDYjpaJlwkebkd3hjVlfEbK8vK4YWWcDVdZTUu8NybNBkoKhvLu/x puqph659dUYvUzNO0O+XrhRy+oLuvvjP -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:26 2025 by rpki-client