$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: kb8giD9pwcRiF7vrCyQymcHRpcC/Oe5QEsFuimKqPCI= Subject key identifier: 57:AE:4D:E2:04:82:00:C4:1B:5B:D9:10:01:57:2D:FC:16:A6:BC:05 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C63 Signing time: Sat 18 Oct 2025 19:19:36 +0000 Manifest this update: Sat 18 Oct 2025 19:19:35 +0000 Manifest next update: Sat 25 Oct 2025 19:19:35 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: 1m2o674xILxGkLvSIFG3wESg5fypu+Xi0Dy4qhbC458=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Oct 18 19:19:35 2025 GMT Not After : Oct 25 19:19:35 2025 GMT Subject: CN=68f3e847-7cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:40:c9:4d:17:a3:cc:2f:88:b2:bc:2f:f0: 4e:90:73:19:38:77:2e:36:2d:95:18:9d:a8:5a:39: 15:7a:a3:5b:3a:9e:76:1d:43:bb:d8:30:8b:b2:d8: 7a:3d:09:99:d1:18:25:7d:40:23:76:44:ad:22:24: 5e:11:d5:11:0e:f1:c7:93:36:3a:cf:8c:26:a0:9b: 72:99:88:b7:c9:42:ec:66:c8:3a:23:cb:48:9d:bc: 75:cc:fa:3e:04:2c:56:23:ca:6a:f1:1d:bd:0a:1b: bc:78:29:37:be:38:9d:b5:9a:c2:68:a4:4b:e8:6d: 05:f0:bd:b7:6b:96:90:60:49:92:5c:e5:39:c2:32: 97:56:a6:c0:6e:f9:e6:33:32:a1:68:d1:e9:26:71: 52:5d:b0:04:cd:92:af:84:66:81:17:e6:cb:71:12: 35:47:a8:cf:92:b9:c3:d7:f7:c7:d6:95:73:65:51: 94:7e:23:6f:11:68:b8:ca:d1:7b:c8:bc:1a:32:26: ed:82:68:2e:95:af:d8:2a:fc:07:13:db:2f:39:dd: 66:16:6e:3f:be:3d:58:4f:26:e3:dd:8f:a0:b6:9e: 0c:93:13:a0:d5:ec:7f:85:43:2d:15:31:de:20:b8: 05:8f:60:bd:81:0c:02:36:32:7c:54:5d:00:d6:7c: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:4D:E2:04:82:00:C4:1B:5B:D9:10:01:57:2D:FC:16:A6:BC:05 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:11:57:82:e0:4e:7f:7b:61:4f:cd:33:44:c7:e4:7c:a8:73: 79:f5:1b:26:ff:27:04:4e:26:3b:e3:21:ac:37:4b:ad:9b:c4: c9:91:f7:56:1e:75:93:28:0e:ee:ca:79:e2:c0:22:f7:05:7f: bb:d9:80:98:a2:e7:b8:f6:a4:4b:83:75:df:73:fe:d7:ec:6e: 98:cd:12:73:65:2c:a4:4d:f0:98:7e:cb:7d:36:92:9e:68:93: c6:36:60:54:82:58:5f:34:dd:b0:d5:3c:fe:5a:ea:76:0e:b6: 8b:50:25:f5:bf:7a:3c:d5:c1:66:de:db:c0:d0:41:ff:a0:6f: 4d:76:03:17:19:b5:2e:db:22:68:2b:08:fa:f7:66:c3:ce:51: 24:9d:23:0f:38:0c:1a:5b:5f:dd:e0:61:c3:83:60:9b:b3:cc: 68:1b:98:dc:3f:a2:8b:9e:c9:35:bc:80:2c:99:e5:17:ce:29: 9f:b7:16:de:1f:f1:37:e0:00:ba:94:a1:1f:bb:07:d6:e9:fc: 69:5a:6a:58:f9:c8:62:3d:d4:77:16:b3:00:a3:c8:98:9d:41: 2e:f9:1b:ea:6a:96:5f:e7:b8:5f:11:8e:86:19:5a:3d:9e:0f: 25:61:02:6b:a0:50:7f:ac:48:95:9f:8d:bf:3e:ba:c6:76:70: ab:f1:b8:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUxMDE4MTkxOTM1WhcNMjUxMDI1MTkxOTM1WjAYMRYwFAYD VQQDEw02OGYzZTg0Ny03Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/xAyU0Xo8wviLK8L/BOkHMZOHcuNi2VGJ2oWjkVeqNbOp52HUO72DCLsth6 PQmZ0RglfUAjdkStIiReEdURDvHHkzY6z4wmoJtymYi3yULsZsg6I8tInbx1zPo+ BCxWI8pq8R29Chu8eCk3vjidtZrCaKRL6G0F8L23a5aQYEmSXOU5wjKXVqbAbvnm MzKhaNHpJnFSXbAEzZKvhGaBF+bLcRI1R6jPkrnD1/fH1pVzZVGUfiNvEWi4ytF7 yLwaMibtgmgula/YKvwHE9svOd1mFm4/vj1YTybj3Y+gtp4MkxOg1ex/hUMtFTHe ILgFj2C9gQwCNjJ8VF0A1nzrjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeuTeIE ggDEG1vZEAFXLfwWprwFMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASEVeC4E5/e2FPzTNEx+R8qHN59Rsm/ycETiY74yGsN0utm8TJkfdW HnWTKA7uynniwCL3BX+72YCYoue49qRLg3Xfc/7X7G6YzRJzZSykTfCYfst9NpKe aJPGNmBUglhfNN2w1Tz+Wup2DraLUCX1v3o81cFm3tvA0EH/oG9NdgMXGbUu2yJo Kwj692bDzlEknSMPOAwaW1/d4GHDg2Cbs8xoG5jcP6KLnsk1vIAsmeUXzimftxbe H/E34AC6lKEfuwfW6fxpWmpY+chiPdR3FrMAo8iYnUEu+RvqapZf57hfEY6GGVo9 ng8lYQJroFB/rEiVn42/PrrGdnCr8bgA -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:00 2025 by rpki-client