$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json) Hash identifier: uelP8tWUfchCymXvPBsJlxuNRpCQDsj2+AZTDRYm9F4= Subject key identifier: ED:AE:3D:F9:F4:DD:6A:21:5F:92:B0:C2:D1:FE:1A:AF:B3:71:DB:E9 Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Certificate serial: 0915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft Manifest number: 0915 Signing time: Sat 18 Oct 2025 21:21:33 +0000 Manifest this update: Sat 18 Oct 2025 21:21:32 +0000 Manifest next update: Sat 25 Oct 2025 21:21:32 +0000 Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: kne09B2F8P+20fhxf/IW+2PGFDxkWNlx5QEUsuBmU6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Validity Not Before: Oct 18 21:21:32 2025 GMT Not After : Oct 25 21:21:32 2025 GMT Subject: CN=68f404dc-f6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:15:ec:43:b6:9b:c8:51:9c:b5:0e:5e:21: 71:b8:33:c6:40:ff:28:f8:fa:8c:47:95:ce:89:17: 41:02:31:03:a1:02:bd:4b:ce:ae:21:8f:ca:50:56: 02:7e:85:cf:a8:84:6b:e8:5a:2d:b3:a3:ab:47:dc: d6:16:67:b0:66:de:60:11:a5:06:e2:10:62:fa:7c: 83:bd:41:7b:00:71:01:68:56:c2:44:dc:76:55:49: 92:08:0d:79:5b:7e:de:c3:d8:0d:d1:f9:03:53:7d: 81:4d:89:9c:0f:fd:d6:04:7b:27:9f:d9:35:58:8b: 7c:bf:bd:0f:25:1e:8b:9a:82:4e:1a:25:ee:1a:0f: ec:7e:80:69:bc:ff:cb:f1:d1:32:fb:56:8b:82:cd: 66:47:5d:f9:90:30:32:8f:1e:5f:3a:94:a9:2d:01: 41:1b:04:58:16:2a:c9:d0:f6:4f:f3:08:85:c9:3d: ac:5d:b3:fb:65:f2:f5:03:63:75:aa:44:8f:92:28: de:37:d0:bb:eb:65:c9:29:6e:2c:8b:95:1d:07:32: 70:59:7d:1c:71:bb:3a:16:0a:ec:02:e3:76:62:9a: 93:85:c4:6d:ca:a2:84:38:cb:a1:03:8c:9e:51:74: 71:56:56:e8:08:71:a4:29:ec:4d:28:4d:ee:08:11: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AE:3D:F9:F4:DD:6A:21:5F:92:B0:C2:D1:FE:1A:AF:B3:71:DB:E9 X509v3 Authority Key Identifier: keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9a:78:c8:11:d1:19:f6:be:ed:47:77:ff:83:1f:e3:cf:ee: 4c:e7:9e:eb:b7:50:e1:b6:35:91:43:2a:71:05:e8:e4:c6:e9: ed:6f:bd:e3:6f:34:33:a6:4b:8c:e6:fd:41:61:57:18:45:cb: 35:a5:56:1b:2a:a6:7f:b0:0d:f5:37:db:25:fb:98:aa:3c:52: d4:b9:f6:51:96:2d:b5:53:9c:ed:8e:b4:d9:e3:ad:7f:cb:f7: 81:e2:7f:73:a9:95:cf:b2:c8:e5:1e:82:be:6f:d1:99:ba:1f: b2:47:10:ef:cf:a0:73:4e:bc:78:16:f5:7a:28:56:f7:54:00: ab:54:a5:eb:a6:1e:f3:18:1c:de:d6:25:7e:17:a7:e1:6a:f0: aa:70:7e:a6:c9:26:ba:68:b9:c0:9d:86:35:83:92:cb:44:a6: 54:19:6b:51:cb:99:d8:56:41:1d:40:d9:b0:fd:79:89:05:f5: d3:8b:37:50:94:0e:4d:c3:a9:56:94:24:b7:db:ec:88:19:db: bb:29:9e:05:42:42:2f:68:7f:21:b5:cd:47:5e:a8:79:6e:eb: 69:c0:fd:49:17:95:c6:bb:fd:43:72:1b:82:bb:8a:f9:f4:01: ee:b2:c7:cb:3e:03:c8:36:02:4c:93:71:02:55:98:1f:bc:0e: 7b:58:18:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND NjBEQURBNzcwHhcNMjUxMDE4MjEyMTMyWhcNMjUxMDI1MjEyMTMyWjAYMRYwFAYD VQQDEw02OGY0MDRkYy1mNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uMV7EO2m8hRnLUOXiFxuDPGQP8o+PqMR5XOiRdBAjEDoQK9S86uIY/KUFYC foXPqIRr6Fots6OrR9zWFmewZt5gEaUG4hBi+nyDvUF7AHEBaFbCRNx2VUmSCA15 W37ew9gN0fkDU32BTYmcD/3WBHsnn9k1WIt8v70PJR6LmoJOGiXuGg/sfoBpvP/L 8dEy+1aLgs1mR135kDAyjx5fOpSpLQFBGwRYFirJ0PZP8wiFyT2sXbP7ZfL1A2N1 qkSPkijeN9C762XJKW4si5UdBzJwWX0ccbs6FgrsAuN2YpqThcRtyqKEOMuhA4ye UXRxVlboCHGkKexNKE3uCBH+pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2uPfn0 3WohX5KwwtH+Gq+zcdvpMB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3 czJDdWxXTGFXSlBHRGEybmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATmnjIEdEZ9r7tR3f/gx/jz+5M557rt1DhtjWRQypxBejkxuntb73j bzQzpkuM5v1BYVcYRcs1pVYbKqZ/sA31N9sl+5iqPFLUufZRli21U5ztjrTZ461/ y/eB4n9zqZXPssjlHoK+b9GZuh+yRxDvz6BzTrx4FvV6KFb3VACrVKXrph7zGBze 1iV+F6fhavCqcH6mySa6aLnAnYY1g5LLRKZUGWtRy5nYVkEdQNmw/XmJBfXTizdQ lA5Nw6lWlCS32+yIGdu7KZ4FQkIvaH8htc1HXqh5butpwP1JF5XGu/1DchuCu4r5 9AHussfLPgPINgJMk3ECVZgfvA57WBhD -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:04 2025 by rpki-client