$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: EbChKwj5b+Ze/ElR6l2ln1TDwSaRGSmzNWSxhl7PUO0= Subject key identifier: C0:64:D9:2F:BB:CB:17:F4:51:E4:D6:25:A5:FD:86:14:99:E7:7C:7F Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 01B9 Signing time: Sun 19 Oct 2025 05:32:27 +0000 Manifest this update: Sun 19 Oct 2025 05:32:26 +0000 Manifest next update: Sun 26 Oct 2025 05:32:26 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: mh3Ht34oEbRhPw9d1RaRpfzS1VzyLSJS4mvhC7G+UA4=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Oct 19 05:32:26 2025 GMT Not After : Oct 26 05:32:26 2025 GMT Subject: CN=68f477ea-a8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:7c:38:57:4b:33:6f:75:3b:1f:a8:fd:f6: f5:22:42:d9:a0:ae:24:52:01:f3:2d:5c:33:fb:5f: 03:a0:45:e8:14:0b:31:d0:93:45:a0:e0:80:35:f8: 29:45:f5:29:5b:f2:c4:02:24:44:e3:85:ed:a6:b2: 65:56:cf:0d:bd:26:45:58:19:33:85:cb:f6:d3:ec: d6:23:7c:e8:bd:1d:80:3d:5b:9a:e3:7a:5b:6e:c1: f6:c8:b0:c3:cd:65:fe:fe:17:96:9f:0b:76:ce:be: c4:d5:1b:fb:bc:af:55:a1:c6:26:1b:b6:15:89:e5: a5:cc:23:f6:ef:2e:c9:fa:d7:48:96:da:95:6b:17: 9e:ad:1b:e1:0a:72:63:ec:ca:ed:8e:40:ff:98:9b: e1:af:44:6b:8a:7c:ec:2c:fb:3a:1e:84:32:9b:3d: bb:e9:84:90:66:25:a8:c8:fb:c6:44:c0:a4:52:9e: 24:59:a9:25:a7:7c:d0:3a:22:be:ca:5b:68:c1:75: 46:7a:b9:d6:ce:fb:87:4b:fc:b5:4d:4f:15:82:76: f3:90:a3:df:0f:dd:e0:a4:f2:54:0e:f8:cb:cf:50: 0d:78:de:35:8f:51:45:7d:45:73:da:7e:1b:fb:0f: 92:46:85:a1:d3:6b:64:b0:22:ca:88:74:41:a6:ca: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:64:D9:2F:BB:CB:17:F4:51:E4:D6:25:A5:FD:86:14:99:E7:7C:7F X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:55:1b:6c:7f:5a:20:e4:89:f3:b1:81:d6:d6:a3:eb:97:2b: 51:e6:ef:16:4f:2b:96:56:14:a0:53:73:d2:db:53:ce:9a:d8: dd:99:92:fa:08:aa:93:6c:cb:64:29:7d:7f:26:f5:11:04:3a: 58:4d:77:c1:3d:c0:13:ce:db:65:43:5a:41:22:55:0f:9b:7c: d0:b9:00:9f:26:f1:20:6e:ba:20:2b:df:3b:69:7f:12:fd:44: ca:a2:d8:8f:3b:a3:03:6f:33:f2:d8:97:60:4d:9a:d4:54:97: f9:bc:8f:45:97:c0:9c:55:74:29:f4:ed:9d:5c:93:26:83:73: e8:67:b2:9d:a8:7e:50:81:f2:65:43:e1:e9:79:1e:ca:34:be: 0e:72:8a:73:c5:2c:cd:2f:95:97:ce:38:82:82:73:cb:20:27: 98:35:4b:7a:a4:50:41:9c:09:a0:25:7b:71:12:f9:1a:46:36: a0:11:79:10:0a:b5:b3:95:84:cd:cd:f8:be:d4:c7:8d:56:fe: 15:4d:2e:38:c6:c2:f2:e9:ba:20:e6:5a:38:16:3b:17:de:42: 67:71:d8:53:2e:cc:9d:e7:da:82:2e:83:7b:b0:d1:67:7c:c6: de:cf:d5:88:74:b3:fc:2d:63:51:22:cf:b9:46:98:6f:85:55: d8:4d:19:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUxMDE5MDUzMjI2WhcNMjUxMDI2MDUzMjI2WjAYMRYwFAYD VQQDEw02OGY0NzdlYS1hOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4Z8OFdLM291Ox+o/fb1IkLZoK4kUgHzLVwz+18DoEXoFAsx0JNFoOCANfgp RfUpW/LEAiRE44XtprJlVs8NvSZFWBkzhcv20+zWI3zovR2APVua43pbbsH2yLDD zWX+/heWnwt2zr7E1Rv7vK9VocYmG7YVieWlzCP27y7J+tdIltqVaxeerRvhCnJj 7MrtjkD/mJvhr0RrinzsLPs6HoQymz276YSQZiWoyPvGRMCkUp4kWaklp3zQOiK+ yltowXVGernWzvuHS/y1TU8VgnbzkKPfD93gpPJUDvjLz1ANeN41j1FFfUVz2n4b +w+SRoWh02tksCLKiHRBpsp46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBk2S+7 yxf0UeTWJaX9hhSZ53x/MB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzVRtsf1og5InzsYHW1qPrlytR5u8WTyuWVhSgU3PS21POmtjdmZL6 CKqTbMtkKX1/JvURBDpYTXfBPcATzttlQ1pBIlUPm3zQuQCfJvEgbrogK987aX8S /UTKotiPO6MDbzPy2JdgTZrUVJf5vI9Fl8CcVXQp9O2dXJMmg3PoZ7KdqH5QgfJl Q+HpeR7KNL4OcopzxSzNL5WXzjiCgnPLICeYNUt6pFBBnAmgJXtxEvkaRjagEXkQ CrWzlYTNzfi+1MeNVv4VTS44xsLy6bog5lo4FjsX3kJncdhTLsyd59qCLoN7sNFn fMbez9WIdLP8LWNRIs+5RphvhVXYTRmw -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:13 2025 by rpki-client