$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: qHBNHKK/N2DR8pp3vLVrCaUXk8YVkk4xQX70U55Yw1c= Subject key identifier: C5:AD:9F:EC:BD:C1:DA:BE:36:1A:75:C9:48:B9:21:3C:1B:E0:2E:2C Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 0473 Signing time: Sun 19 Oct 2025 02:03:39 +0000 Manifest this update: Sun 19 Oct 2025 02:03:39 +0000 Manifest next update: Sun 26 Oct 2025 02:03:39 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: rVmMeMGTR9hPBW1gI9n3O9Cs1JC5XSB6rvi4CYOsvoY=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Oct 19 02:03:39 2025 GMT Not After : Oct 26 02:03:39 2025 GMT Subject: CN=68f446fb-2143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:89:0a:af:5b:55:1d:2a:f1:f3:f9:58:ab: 25:70:dd:31:82:8c:3c:e0:6e:1f:ea:89:77:9f:f9: 5c:a2:13:2a:6c:f4:48:10:31:66:e2:38:78:8a:16: ce:7e:3f:8e:e2:1f:b3:12:d2:15:67:5b:12:2c:b6: 5d:61:ae:df:99:c3:2e:74:ed:59:62:82:8a:2e:be: e4:ba:1b:b6:1e:de:2f:89:98:a2:32:ef:1c:bf:5b: 69:0e:ba:87:ef:17:88:84:07:2e:d5:f6:92:87:dd: c8:69:00:22:89:0c:14:e7:cd:cb:64:f3:df:1a:8c: ff:b0:1d:53:b3:16:27:09:5f:68:6c:e8:eb:9e:f3: 61:23:29:3f:36:51:8d:fb:e6:01:87:87:c0:8e:5a: d0:e9:bc:f9:3b:e8:93:e6:f9:9a:fa:dc:4a:02:04: 48:ea:4e:23:59:53:bd:99:21:46:8c:0a:09:ac:c2: 1f:f7:96:48:6e:38:50:df:c7:a0:15:07:3b:14:6a: 3d:9c:80:c5:f1:4a:f0:ac:ed:1f:27:b6:93:e4:7c: 37:d3:b1:7f:75:50:04:d7:9e:4b:e8:8b:27:39:40: fb:aa:ae:82:b4:7f:c1:8b:ab:20:94:bf:51:1a:25: 7c:0f:ec:d6:20:da:7a:c1:1c:e8:61:2d:8d:58:85: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AD:9F:EC:BD:C1:DA:BE:36:1A:75:C9:48:B9:21:3C:1B:E0:2E:2C X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3b:52:3a:b9:ba:9d:2f:9f:a4:1f:6a:e8:dc:d1:95:53:b3: 83:17:56:0f:9b:37:37:c0:92:5a:6c:47:39:e3:69:62:01:31: ff:f3:fc:38:29:4d:1e:1a:e3:55:c6:9f:e8:8f:c7:05:5a:04: 61:3f:7c:48:e5:a9:09:61:4e:91:13:bc:f9:94:bb:81:ac:9c: f5:40:ad:3f:40:37:1f:a3:67:b0:08:97:83:b9:35:a5:92:d8: 0b:96:f5:e1:7a:10:1a:2d:8c:e8:90:43:49:da:54:96:2f:f6: de:68:42:07:57:ca:e1:03:68:67:ab:ce:00:3e:5b:26:8f:c9: 96:40:02:ef:08:cc:01:8e:5b:1c:4c:4b:06:3b:97:2e:4b:5a: d6:23:79:2e:8c:d1:41:c6:a6:9d:94:6d:23:28:5b:1d:97:e8: 87:78:fd:96:bf:8c:45:69:d4:f5:f3:76:96:e2:6b:f7:1e:90: 94:6e:4c:5b:74:de:09:38:4b:4d:c0:13:94:e7:a1:f5:a6:3a: 9b:63:f7:af:1c:ac:ef:31:84:99:11:db:39:9f:37:5b:2b:eb: dc:ef:14:11:b2:88:77:92:9c:ca:52:7b:97:87:db:0c:a3:aa: ed:7a:d5:46:af:69:1a:b6:65:64:4d:06:f2:32:40:c9:57:e9: c4:84:9c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUxMDE5MDIwMzM5WhcNMjUxMDI2MDIwMzM5WjAYMRYwFAYD VQQDEw02OGY0NDZmYi0yMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcuJCq9bVR0q8fP5WKslcN0xgow84G4f6ol3n/lcohMqbPRIEDFm4jh4ihbO fj+O4h+zEtIVZ1sSLLZdYa7fmcMudO1ZYoKKLr7kuhu2Ht4viZiiMu8cv1tpDrqH 7xeIhAcu1faSh93IaQAiiQwU583LZPPfGoz/sB1TsxYnCV9obOjrnvNhIyk/NlGN ++YBh4fAjlrQ6bz5O+iT5vma+txKAgRI6k4jWVO9mSFGjAoJrMIf95ZIbjhQ38eg FQc7FGo9nIDF8UrwrO0fJ7aT5Hw307F/dVAE155L6IsnOUD7qq6CtH/Bi6sglL9R GiV8D+zWINp6wRzoYS2NWIXXfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWtn+y9 wdq+Nhp1yUi5ITwb4C4sMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhO1I6ubqdL5+kH2ro3NGVU7ODF1YPmzc3wJJabEc542liATH/8/w4 KU0eGuNVxp/oj8cFWgRhP3xI5akJYU6RE7z5lLuBrJz1QK0/QDcfo2ewCJeDuTWl ktgLlvXhehAaLYzokENJ2lSWL/beaEIHV8rhA2hnq84APlsmj8mWQALvCMwBjlsc TEsGO5cuS1rWI3kujNFBxqadlG0jKFsdl+iHeP2Wv4xFadT183aW4mv3HpCUbkxb dN4JOEtNwBOU56H1pjqbY/evHKzvMYSZEds5nzdbK+vc7xQRsoh3kpzKUnuXh9sM o6rtetVGr2katmVkTQbyMkDJV+nEhJxp -----END CERTIFICATE-----Generated at Tue Oct 21 03:09:23 2025 by rpki-client