$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: Si5+fsmtiwumFblwbh/W/ISxdFlGgQ7TYDFAqHYB8rw= Subject key identifier: 72:91:A1:45:78:1F:B0:BA:23:04:F1:C6:19:25:D6:6C:AE:6B:00:62 Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: 4B Signing time: Sun 19 Oct 2025 10:54:01 +0000 Manifest this update: Sun 19 Oct 2025 10:54:01 +0000 Manifest next update: Sun 26 Oct 2025 10:54:01 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: aMCd1LI3Gc1mhegCmgqJiSv8a2n+/EFdZ3KgaM/Nt9Q=) 2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: fil/oQotRM+MIGw/cNqLrz8OgmoOYQq+ywbG5ZxtQK8=) 3: B8F6B5E6889D11F096782036C4F9AE02.roa (hash: /A/rBXc2op08yj3uZittOvl641NY0+V2n8zZ3/LDWUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Oct 19 10:54:01 2025 GMT Not After : Oct 26 10:54:01 2025 GMT Subject: CN=68f4c349-112a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:3b:d2:18:22:9f:d7:6a:7f:4e:7b:dc:a5: 91:f7:c0:6b:38:45:56:bb:2b:4b:9d:4e:82:43:9e: dd:0c:59:4a:7c:86:58:3e:69:94:58:0d:3e:65:00: c6:e4:13:39:e1:10:bb:7b:46:bf:36:c8:b3:54:43: c9:55:46:26:78:2f:84:7d:b7:62:b0:47:07:c4:aa: 74:34:f1:2d:ae:aa:be:55:1a:d7:e3:01:f6:29:b9: ec:c2:d1:06:38:25:87:15:d5:e1:e6:f7:76:ae:5b: 15:33:59:18:d3:f2:3d:48:c5:77:71:6c:55:ab:65: 71:4c:a0:0f:8e:3d:9d:e8:71:8e:59:5c:d5:ec:1d: ff:69:a9:d3:d9:22:9d:3a:58:16:f6:b8:c9:30:e4: 12:7f:d5:11:2e:a5:ad:48:30:eb:26:2d:33:36:d6: e1:49:4f:79:63:6e:3a:7c:d0:5f:54:71:44:94:eb: 77:52:6b:1a:ea:8b:21:17:01:b9:da:c8:34:a5:42: 05:6d:e1:2b:1c:7e:f7:ee:16:6f:58:a7:45:30:38: 00:f9:60:4f:04:86:9c:4c:76:d0:8c:11:e6:d3:de: be:88:a1:20:00:17:75:bd:d5:9c:c4:1b:aa:29:2f: f9:96:87:a1:8b:80:44:3e:73:00:3e:db:06:16:50: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:91:A1:45:78:1F:B0:BA:23:04:F1:C6:19:25:D6:6C:AE:6B:00:62 X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ab:27:fd:ac:a1:c1:57:01:14:e0:82:26:ed:1a:e2:a5:19: 94:cc:14:0d:63:a7:f6:77:d5:1c:20:24:d7:f6:dc:2e:d4:e4: 51:48:56:90:ee:22:2e:96:e5:45:66:f0:18:0c:35:75:b9:e4: 2c:31:6c:a7:54:84:a2:62:a0:2d:c6:8d:31:30:e6:47:17:01: 89:6a:0d:7e:39:ab:40:80:85:39:d6:b0:4f:53:1d:54:ca:8a: 05:bf:ef:c2:57:c0:03:3a:9c:b1:da:d9:fb:95:ba:23:ee:de: 96:e6:65:89:5f:db:e2:9a:88:18:20:ea:49:3a:1c:1d:53:bd: e9:b6:82:00:7d:6c:13:52:64:e0:5e:b2:8f:4b:59:0b:e3:a8: 09:c9:5c:5e:ce:c3:4b:01:72:ff:72:f7:f7:e7:a5:d4:eb:e2: a7:a0:37:d2:bb:6b:cf:a4:55:fc:39:50:04:d1:ec:5b:ca:29: 8d:da:73:70:aa:f2:7a:54:9a:65:b2:83:43:69:55:d3:04:ec: f4:18:20:1a:d8:04:ec:5f:7f:5c:33:0b:51:60:4d:69:49:c0: be:46:aa:9d:2e:76:ba:05:c3:96:4a:ee:fa:41:6b:6a:75:d5: aa:8a:86:54:f0:37:9e:c6:dc:95:96:24:f4:2a:33:55:77:7a: c4:aa:54:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoNDFDNzU3MTQyOTlBNTc4REQxOTBGRDFGNzMwOTU1QjFG RDlBQzFGNDAeFw0yNTEwMTkxMDU0MDFaFw0yNTEwMjYxMDU0MDFaMBgxFjAUBgNV BAMTDTY4ZjRjMzQ5LTExMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0tjvSGCKf12p/TnvcpZH3wGs4RVa7K0udToJDnt0MWUp8hlg+aZRYDT5lAMbk EznhELt7Rr82yLNUQ8lVRiZ4L4R9t2KwRwfEqnQ08S2uqr5VGtfjAfYpuezC0QY4 JYcV1eHm93auWxUzWRjT8j1IxXdxbFWrZXFMoA+OPZ3ocY5ZXNXsHf9pqdPZIp06 WBb2uMkw5BJ/1REupa1IMOsmLTM21uFJT3ljbjp80F9UcUSU63dSaxrqiyEXAbna yDSlQgVt4SscfvfuFm9Yp0UwOAD5YE8EhpxMdtCMEebT3r6IoSAAF3W91ZzEG6op L/mWh6GLgEQ+cwA+2wYWULE/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcpGhRXgf sLojBPHGGSXWbK5rAGIwHwYDVR0jBBgwFoAUQcdXFCmaV43RkP0fcwlVsf2awfQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0JBMDhBQTQyNEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdm US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWNkWEZDbWFWNDNSa1AwZmN3bFZzZjJhd2ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0JBMDhBQTQyNEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQz UmtQMGZjd2xWc2YyYXdmUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACyrJ/2socFXARTggibtGuKlGZTMFA1jp/Z31RwgJNf23C7U5FFIVpDu Ii6W5UVm8BgMNXW55CwxbKdUhKJioC3GjTEw5kcXAYlqDX45q0CAhTnWsE9THVTK igW/78JXwAM6nLHa2fuVuiPu3pbmZYlf2+KaiBgg6kk6HB1Tvem2ggB9bBNSZOBe so9LWQvjqAnJXF7Ow0sBcv9y9/fnpdTr4qegN9K7a8+kVfw5UATR7FvKKY3ac3Cq 8npUmmWyg0NpVdME7PQYIBrYBOxff1wzC1FgTWlJwL5Gqp0udroFw5ZK7vpBa2p1 1aqKhlTwN57G3JWWJPQqM1V3esSqVIo= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:07 2025 by rpki-client