$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: M0SXnOz5GOFwYe2xHZ3oUCWLBzheoEdhG//9YVju2J8= Subject key identifier: 16:4C:B2:66:A7:F3:88:AA:F1:A7:F0:8B:5E:F4:84:EC:69:92:17:0F Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: C1 Signing time: Sun 19 Oct 2025 09:07:28 +0000 Manifest this update: Sun 19 Oct 2025 09:07:27 +0000 Manifest next update: Sun 26 Oct 2025 09:07:27 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: bh7e15qOcblOOATa+1YRvfZl/Kaz7HQ7iYfYneUDvCI=) 2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=) 3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Oct 19 09:07:27 2025 GMT Not After : Oct 26 09:07:27 2025 GMT Subject: CN=68f4aa4f-482a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:7b:fe:38:24:75:c4:e6:33:8b:4e:c5:94: 96:5d:28:3a:d2:f2:5c:73:69:9f:c2:fd:f0:7c:7a: 84:0b:01:65:7a:d7:98:f3:71:a0:ed:62:13:66:80: e8:7f:3b:87:73:37:9c:9f:e5:e5:99:a1:65:dd:58: 9a:bf:83:b0:37:1f:a3:ec:84:33:40:58:33:83:57: 0f:40:a4:af:13:fe:9e:0e:f0:1a:e5:92:d9:24:4e: 8f:dc:0f:50:c4:9f:4f:ef:16:0b:81:09:ca:75:67: 18:84:6d:e7:d5:75:b1:95:d3:fb:07:4c:80:2c:9c: 9e:2b:da:07:0f:c6:cc:0f:94:75:4c:ae:29:fb:03: 56:c7:bc:75:77:8e:41:ab:25:45:c0:2e:0e:a9:2f: 29:eb:a1:8e:63:6b:25:c2:95:24:77:54:8f:e1:8d: 7e:aa:c8:89:e9:2c:64:c1:e4:39:7c:df:ff:19:da: de:16:39:f9:49:34:e9:c6:2a:26:b0:ad:48:d1:ea: 44:7b:57:c6:c0:b6:5a:31:fa:b5:b6:83:30:96:b1: 3b:03:a2:73:44:56:91:68:02:ee:9e:db:dc:01:c9: 99:55:e1:96:f1:ef:47:40:75:f9:f2:6c:ff:ee:89: 66:36:10:77:e4:72:e5:d7:6d:c7:98:d4:7e:2f:c6: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4C:B2:66:A7:F3:88:AA:F1:A7:F0:8B:5E:F4:84:EC:69:92:17:0F X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:17:ac:b1:0c:b9:31:31:23:98:ce:07:4c:e5:4a:2a:10:e0: 25:3e:9a:a7:a2:e3:ae:7b:99:57:64:36:c2:70:0c:6b:9c:be: 0b:aa:25:fb:74:37:a3:4f:20:ad:d5:cf:8e:69:f8:d9:df:bd: dd:36:1b:9a:f4:7d:a5:85:8c:0e:20:71:39:5d:be:38:d2:67: be:a1:e4:53:07:9f:d4:45:19:d4:1a:2d:99:51:3b:4a:1d:ad: f0:47:e9:bb:00:b8:3b:91:cb:ee:46:df:d7:1a:fe:3d:a5:ba: f2:20:3f:7e:5d:26:55:ae:13:18:ea:bd:92:52:c7:91:00:d9: f8:af:83:90:31:1f:f1:f1:b7:a6:58:72:a0:2a:ca:c0:d5:b6: 25:72:8e:0d:e7:a1:f2:58:23:cd:6a:58:ef:19:bd:08:a1:78: 5c:31:1b:21:1e:ac:c0:e4:55:21:17:62:cd:82:b5:39:75:7b: 59:be:8c:5a:36:d5:31:95:fd:fe:02:63:6a:a2:eb:b1:4f:51: 49:cb:7f:49:77:3c:f2:cc:cb:39:93:ca:ee:76:0f:6d:ec:2d: ae:f5:a1:90:27:38:0a:25:40:7f:09:3b:12:9c:ac:0c:05:d5: 6c:f6:f3:88:2d:dc:22:03:0e:5c:d0:6e:98:97:a8:7f:28:e7: f0:88:ee:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE RTc2Qzg0QkMwHhcNMjUxMDE5MDkwNzI3WhcNMjUxMDI2MDkwNzI3WjAYMRYwFAYD VQQDEw02OGY0YWE0Zi00ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowt7/jgkdcTmM4tOxZSWXSg60vJcc2mfwv3wfHqECwFleteY83Gg7WITZoDo fzuHczecn+XlmaFl3Viav4OwNx+j7IQzQFgzg1cPQKSvE/6eDvAa5ZLZJE6P3A9Q xJ9P7xYLgQnKdWcYhG3n1XWxldP7B0yALJyeK9oHD8bMD5R1TK4p+wNWx7x1d45B qyVFwC4OqS8p66GOY2slwpUkd1SP4Y1+qsiJ6SxkweQ5fN//GdreFjn5STTpxiom sK1I0epEe1fGwLZaMfq1toMwlrE7A6JzRFaRaALuntvcAcmZVeGW8e9HQHX58mz/ 7olmNhB35HLl123HmNR+L8Y5UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZMsman 84iq8afwi170hOxpkhcPMB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRF6yxDLkxMSOYzgdM5UoqEOAlPpqnouOue5lXZDbCcAxrnL4LqiX7 dDejTyCt1c+OafjZ373dNhua9H2lhYwOIHE5Xb440me+oeRTB5/URRnUGi2ZUTtK Ha3wR+m7ALg7kcvuRt/XGv49pbryID9+XSZVrhMY6r2SUseRANn4r4OQMR/x8bem WHKgKsrA1bYlco4N56HyWCPNaljvGb0IoXhcMRshHqzA5FUhF2LNgrU5dXtZvoxa NtUxlf3+AmNqouuxT1FJy39JdzzyzMs5k8rudg9t7C2u9aGQJzgKJUB/CTsSnKwM BdVs9vOILdwiAw5c0G6Yl6h/KOfwiO48 -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:44 2025 by rpki-client