$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json) Hash identifier: GoF9slF2Wv6VJUwh7I29ZMojgmHUTLdnHFtyInhTGHE= Subject key identifier: 4A:DF:A7:8A:3C:2D:35:74:ED:5B:EF:F1:58:00:44:16:C5:93:60:8C Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Certificate serial: 13C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft Manifest number: 2A8D Signing time: Sat 18 Oct 2025 17:25:27 +0000 Manifest this update: Sat 18 Oct 2025 17:25:26 +0000 Manifest next update: Sat 25 Oct 2025 17:25:26 +0000 Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: SbbGfusd+LEDQshKjSFtSsHz+8Vicjweg0tO8gQK63Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5064 (0x13c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Validity Not Before: Oct 18 17:25:26 2025 GMT Not After : Oct 25 17:25:26 2025 GMT Subject: CN=68f3cd87-5898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:05:2b:a5:ba:00:86:67:46:aa:fe:9d:56: 95:1f:75:8c:b3:a6:90:5f:0d:ef:b6:88:0f:51:ad: ea:24:0b:e3:e2:a3:65:66:6f:81:73:3b:82:98:9a: dc:f2:4f:b9:2f:d4:42:02:d2:a8:94:c9:e2:99:bc: 24:43:25:2e:45:ab:de:6f:a7:67:87:0e:81:dc:1c: 09:3c:42:a1:8e:31:ce:bc:95:fa:ed:f1:b5:6b:20: 5b:9c:5b:9a:a3:91:ca:84:85:7c:39:b3:d0:4c:e1: f2:1d:be:7a:c5:3d:b4:d3:9a:ce:b9:f9:2d:b3:96: f3:a2:42:6f:d9:f5:d2:26:31:6a:17:c3:d7:56:08: 66:ad:92:65:93:5b:bb:2f:cb:8c:0f:d2:82:26:dc: bf:f2:eb:97:08:9a:d0:b4:17:98:be:0c:09:55:10: 07:a5:c0:78:ef:43:29:26:0f:57:93:c6:95:fa:1c: 3a:d0:d5:cb:9a:e7:3e:af:89:8a:7b:15:d0:20:6e: 67:35:57:e2:2b:f4:ed:d1:02:36:57:b9:19:b8:6d: c0:f5:22:08:1f:73:12:25:fe:c4:c8:fb:fe:d5:66: 31:0b:cf:34:ee:58:0e:b1:13:92:cd:ec:8d:60:92: 24:c2:9e:eb:82:91:02:d4:e8:7e:42:75:d2:ec:8b: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DF:A7:8A:3C:2D:35:74:ED:5B:EF:F1:58:00:44:16:C5:93:60:8C X509v3 Authority Key Identifier: keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:75:a8:32:49:1d:d6:92:d5:c1:83:b1:47:90:08:e3:63: 9b:cd:fa:6f:1f:47:b6:1e:80:f9:60:3d:20:9d:c9:f4:b3:89: 46:4d:b1:76:8a:75:bf:30:04:e5:94:8f:ac:97:f2:41:f7:bc: 55:37:b7:0b:7c:9c:35:99:74:1a:6e:0e:e5:fd:e4:96:f1:6a: 84:f6:14:cd:4f:5b:f0:bb:40:23:36:ac:3d:ea:f5:22:40:df: 32:48:a2:48:d9:e7:3c:77:87:c0:e0:ae:f9:20:08:ea:fc:89: 18:e7:b3:d1:d0:b1:e4:c9:de:02:c0:c6:84:fc:9c:b0:9d:a8: ab:08:1d:d4:97:ae:a2:9e:13:22:15:43:db:33:cd:57:7b:54: 14:68:63:40:51:bb:10:1b:65:f4:95:58:56:c0:2b:5c:c0:5f: 17:73:50:24:0c:0d:18:51:84:7c:29:fc:e2:7d:e6:57:c6:cb: b3:c1:42:f5:57:b8:19:f6:99:ab:43:1d:39:59:f8:8f:f0:99: b9:64:f1:05:19:b2:f9:19:bf:45:68:ea:37:c2:1f:8d:86:ad: 03:f2:b5:a6:cd:43:7b:29:2b:1d:e0:f2:c5:87:51:85:e0:86: 6a:75:36:ca:90:01:39:e8:f3:4f:c1:62:b6:c1:33:0e:98:19: 0b:c3:85:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx RTA2NzcwNTIwHhcNMjUxMDE4MTcyNTI2WhcNMjUxMDI1MTcyNTI2WjAYMRYwFAYD VQQDEw02OGYzY2Q4Ny01ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NwFK6W6AIZnRqr+nVaVH3WMs6aQXw3vtogPUa3qJAvj4qNlZm+BczuCmJrc 8k+5L9RCAtKolMnimbwkQyUuRaveb6dnhw6B3BwJPEKhjjHOvJX67fG1ayBbnFua o5HKhIV8ObPQTOHyHb56xT2005rOufkts5bzokJv2fXSJjFqF8PXVghmrZJlk1u7 L8uMD9KCJty/8uuXCJrQtBeYvgwJVRAHpcB470MpJg9Xk8aV+hw60NXLmuc+r4mK exXQIG5nNVfiK/Tt0QI2V7kZuG3A9SIIH3MSJf7EyPv+1WYxC8807lgOsROSzeyN YJIkwp7rgpEC1Oh+QnXS7IuqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErfp4o8 LTV07Vvv8VgARBbFk2CMMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96XWoMkkd1pLVwYOxR5AI42ObzfpvH0e2HoD5YD0gncn0s4lGTbF2 inW/MATllI+sl/JB97xVN7cLfJw1mXQabg7l/eSW8WqE9hTNT1vwu0AjNqw96vUi QN8ySKJI2ec8d4fA4K75IAjq/IkY57PR0LHkyd4CwMaE/JywnairCB3Ul66inhMi FUPbM81Xe1QUaGNAUbsQG2X0lVhWwCtcwF8Xc1AkDA0YUYR8KfzifeZXxsuzwUL1 V7gZ9pmrQx05WfiP8Jm5ZPEFGbL5Gb9FaOo3wh+Nhq0D8rWmzUN7KSsd4PLFh1GF 4IZqdTbKkAE56PNPwWK2wTMOmBkLw4Up -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:04 2025 by rpki-client