$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: fy01rvq0kyApI6byNe/kpzXO/TPHFmQIsfXBDdjlo3o= Subject key identifier: C1:19:9B:3F:B1:BA:73:BB:1C:11:C4:05:4E:92:99:60:64:37:0F:BC Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0B8B Signing time: Sat 18 Oct 2025 21:48:48 +0000 Manifest this update: Sat 18 Oct 2025 21:48:47 +0000 Manifest next update: Sat 25 Oct 2025 21:48:47 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: 3nrtAyMwuwLJ7xUFo4w1/tSsyfOG54iK/TpWystNVyQ=) 2: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: UEvIJGCtIPViKlp9oF2IdyQbfjX5CIRMn68xHUdCFM0=) 3: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: IIG8gh+kO7sLLkwwytxU4QMUTZ/JBKDzSudE/wC+tc8=) 4: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: leiC+N+7T7KBF8xTueIqh0RjFttyTRTBR+jUcxpvEWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Oct 18 21:48:47 2025 GMT Not After : Oct 25 21:48:47 2025 GMT Subject: CN=68f40b40-7cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:1c:d7:a6:ec:fb:18:c3:12:06:a4:51:90: 26:17:3c:f3:90:c2:9d:9e:99:3d:2c:fe:98:85:09: c3:fc:02:93:bf:22:30:21:fb:82:98:d9:ab:55:fd: a1:c5:7a:8b:7f:3b:d1:c4:80:b0:bc:db:c2:1d:9c: 66:9a:65:5e:e0:f2:1f:8d:06:7d:1e:4d:82:ad:1f: e2:f9:d1:a5:a0:d2:90:98:fc:39:16:9f:9a:a8:53: f1:1f:4a:fd:65:49:ba:54:14:f2:0d:b1:3b:26:da: ba:65:8a:da:63:a6:1f:56:64:6a:bd:80:25:96:19: 82:d4:d4:06:7a:cc:e3:d5:f9:9a:5f:6f:7b:1d:e3: b2:3b:d0:ab:1d:62:f7:e8:28:ba:e5:1f:d2:b8:42: a1:37:96:0d:72:50:49:38:8b:1e:47:17:0a:52:8b: 3e:50:ed:32:4b:6a:6c:30:b6:03:7e:04:78:9b:bc: 22:c2:b8:a4:a8:ab:ca:63:7c:6b:02:73:e2:77:5e: da:a8:c0:11:88:5f:c0:ea:64:c1:c4:e2:7c:a1:04: 33:df:ee:39:7e:28:87:61:2a:b1:10:c2:cb:7f:53: 94:14:32:f0:ad:2b:81:1c:38:78:b6:88:42:4e:56: 07:9a:4e:44:a3:8e:b1:3d:51:4d:30:fe:3c:62:a7: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:9B:3F:B1:BA:73:BB:1C:11:C4:05:4E:92:99:60:64:37:0F:BC X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cd:ae:8d:e3:7b:b0:2a:dc:52:df:0e:75:03:17:60:fb:30: d0:02:ea:62:07:c9:bf:6f:65:84:ea:4d:b8:f6:33:e8:f6:b7: 2c:81:56:93:5b:31:a6:d2:c4:6b:04:b8:40:f0:d5:6a:2b:b8: 74:87:c5:60:0b:18:eb:0d:73:ee:24:5f:fa:3f:0c:33:b4:ec: 54:dc:94:09:23:d2:c1:a3:fc:ad:21:aa:a2:fb:05:ec:1a:54: a1:04:ad:6b:44:17:7c:7e:6c:0a:ef:a7:ef:44:de:7f:4d:13: 99:fe:ea:93:d8:3c:2e:c5:32:43:8d:df:79:17:15:c2:c5:27: dc:41:de:e3:ec:10:34:81:cf:d9:98:65:b9:d4:69:54:ce:1d: 5f:99:ee:94:7d:55:ae:b0:0b:f1:c7:66:cf:db:0a:57:97:16: 58:72:f9:83:15:df:e3:57:33:02:b0:e8:c0:c0:1e:79:1e:8c: 70:d1:9e:94:15:c3:98:13:f3:48:88:4e:64:2e:e0:3a:37:72: 8d:71:82:13:4b:2a:11:06:f4:f1:b8:4d:6a:00:cb:2f:76:e5: 83:65:43:2a:b3:a3:d5:5d:57:23:aa:1b:dd:d8:21:6f:0b:30: c1:b8:3e:7b:0f:69:d7:95:ca:8b:38:21:e7:69:f5:1d:7a:5f: 2e:54:77:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUxMDE4MjE0ODQ3WhcNMjUxMDI1MjE0ODQ3WjAYMRYwFAYD VQQDEw02OGY0MGI0MC03Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+0c16bs+xjDEgakUZAmFzzzkMKdnpk9LP6YhQnD/AKTvyIwIfuCmNmrVf2h xXqLfzvRxICwvNvCHZxmmmVe4PIfjQZ9Hk2CrR/i+dGloNKQmPw5Fp+aqFPxH0r9 ZUm6VBTyDbE7Jtq6ZYraY6YfVmRqvYAllhmC1NQGeszj1fmaX297HeOyO9CrHWL3 6Ci65R/SuEKhN5YNclBJOIseRxcKUos+UO0yS2psMLYDfgR4m7wiwrikqKvKY3xr AnPid17aqMARiF/A6mTBxOJ8oQQz3+45fiiHYSqxEMLLf1OUFDLwrSuBHDh4tohC TlYHmk5Eo46xPVFNMP48YqdQBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEZmz+x unO7HBHEBU6SmWBkNw+8MB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4za6N43uwKtxS3w51Axdg+zDQAupiB8m/b2WE6k249jPo9rcsgVaT WzGm0sRrBLhA8NVqK7h0h8VgCxjrDXPuJF/6PwwztOxU3JQJI9LBo/ytIaqi+wXs GlShBK1rRBd8fmwK76fvRN5/TROZ/uqT2DwuxTJDjd95FxXCxSfcQd7j7BA0gc/Z mGW51GlUzh1fme6UfVWusAvxx2bP2wpXlxZYcvmDFd/jVzMCsOjAwB55Hoxw0Z6U FcOYE/NIiE5kLuA6N3KNcYITSyoRBvTxuE1qAMsvduWDZUMqs6PVXVcjqhvd2CFv CzDBuD57D2nXlcqLOCHnafUdel8uVHc6 -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:39 2025 by rpki-client