$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: iKfBTiQknsZalBy6kSrzm9avY8JLDeEBALZAlqe3LFQ= Subject key identifier: 00:40:0E:14:EA:48:20:B7:29:20:82:E6:A1:B3:1B:46:FB:15:1F:8F Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 070D Signing time: Sat 18 Oct 2025 23:17:47 +0000 Manifest this update: Sat 18 Oct 2025 23:17:47 +0000 Manifest next update: Sat 25 Oct 2025 23:17:47 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: +/CjgvfxusaQ1Ji9sCesv4Ojr5ysg2PFoN8VFlDt6w4=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: FRIMYZ0ymb4xNk4HDg1e5QrcA1pECIMjsb8IPP33VK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: Oct 18 23:17:47 2025 GMT Not After : Oct 25 23:17:47 2025 GMT Subject: CN=68f4201b-27b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:b2:cf:1d:34:3e:ec:5e:94:6b:c6:a2:e1: 27:c1:76:87:41:da:f1:c2:9f:3a:08:c0:1c:e5:b2: d1:c0:3e:60:cd:cd:de:24:6b:c2:76:13:35:d0:86: a8:96:7a:f0:bd:d0:05:e6:21:c8:e1:bc:91:43:60: d0:79:a5:b8:2c:b0:41:5c:5d:00:c4:18:ad:f7:5c: 68:09:95:ea:13:f8:38:86:79:cc:be:dc:bc:c7:c5: f9:03:63:6b:ea:a1:b9:6e:ab:6e:04:d2:17:ea:4d: 56:d2:a1:54:b6:7c:41:5d:f9:82:11:d2:bc:c8:79: 0b:7c:5c:ba:ea:57:8e:04:37:bf:90:6a:0c:44:ec: b3:82:67:74:23:58:68:9f:23:14:68:9d:b3:2c:eb: 5c:ff:ac:24:c5:fa:50:39:c3:b8:0f:82:8a:75:86: 9a:f2:f0:4d:f3:64:eb:89:b3:04:28:ff:75:f6:de: f7:dd:f4:d7:a2:21:b2:ed:95:4f:db:42:9c:6a:fa: 4c:86:4e:e1:95:7c:a8:0f:24:3c:f7:86:35:4b:1d: f1:c0:81:3a:61:cb:2c:b8:95:95:43:97:4c:66:dd: 41:f9:23:0b:5d:58:65:21:a8:3a:f0:71:46:9d:62: 7e:37:de:09:73:be:8c:37:c0:49:63:43:f3:e8:92: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:0E:14:EA:48:20:B7:29:20:82:E6:A1:B3:1B:46:FB:15:1F:8F X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f8:e4:9e:52:8d:85:de:83:a5:0b:d3:05:cf:36:e0:4b:b5: af:9d:c3:cf:ce:32:3d:1e:48:a8:a9:e4:6b:fd:14:2b:6a:c3: 2d:7d:4d:35:5d:6e:cd:70:ce:8d:9f:f9:ae:e6:a1:48:97:f0: ba:01:51:46:76:57:95:19:33:a4:1a:e5:2b:2e:f6:94:7c:91: 0a:60:46:7d:79:1a:7d:f5:3d:2e:e0:7b:b2:3a:cd:28:b2:ab: a0:01:e4:1e:f8:cb:e6:80:d5:e9:ac:c8:dd:40:3f:59:6c:35: c0:de:bf:c6:d8:93:5c:b4:c4:b2:3b:81:42:7c:c7:7c:2e:0a: c5:90:0c:cd:c8:7a:64:4b:ba:07:33:df:02:68:fa:40:1c:9d: 7f:03:e9:56:59:e7:95:cd:2f:fb:d2:13:49:4b:5c:f4:c1:b3: 84:5a:bf:22:df:a2:cf:5b:77:87:40:a1:bd:18:1e:39:ec:0b: ae:c0:f3:90:ff:c3:ed:18:ba:dd:62:74:15:e8:1e:c4:1a:96: 93:65:71:7e:d2:cf:e0:59:8d:3b:d1:fe:e7:2c:1a:1f:f6:e0: c6:51:e5:4d:95:4c:b3:a3:09:ef:b4:cc:cb:5c:34:d1:6e:dc: dd:4f:44:fd:fb:f7:bd:db:bb:12:6c:45:ca:b9:c6:7e:9a:2e: cf:1d:19:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjUxMDE4MjMxNzQ3WhcNMjUxMDI1MjMxNzQ3WjAYMRYwFAYD VQQDEw02OGY0MjAxYi0yN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JWyzx00PuxelGvGouEnwXaHQdrxwp86CMAc5bLRwD5gzc3eJGvCdhM10Iao lnrwvdAF5iHI4byRQ2DQeaW4LLBBXF0AxBit91xoCZXqE/g4hnnMvty8x8X5A2Nr 6qG5bqtuBNIX6k1W0qFUtnxBXfmCEdK8yHkLfFy66leOBDe/kGoMROyzgmd0I1ho nyMUaJ2zLOtc/6wkxfpQOcO4D4KKdYaa8vBN82TribMEKP919t733fTXoiGy7ZVP 20KcavpMhk7hlXyoDyQ894Y1Sx3xwIE6YcssuJWVQ5dMZt1B+SMLXVhlIag68HFG nWJ+N94Jc76MN8BJY0Pz6JJzjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABADhTq SCC3KSCC5qGzG0b7FR+PMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW+OSeUo2F3oOlC9MFzzbgS7WvncPPzjI9HkioqeRr/RQrasMtfU01 XW7NcM6Nn/mu5qFIl/C6AVFGdleVGTOkGuUrLvaUfJEKYEZ9eRp99T0u4HuyOs0o squgAeQe+MvmgNXprMjdQD9ZbDXA3r/G2JNctMSyO4FCfMd8LgrFkAzNyHpkS7oH M98CaPpAHJ1/A+lWWeeVzS/70hNJS1z0wbOEWr8i36LPW3eHQKG9GB457AuuwPOQ /8PtGLrdYnQV6B7EGpaTZXF+0s/gWY070f7nLBof9uDGUeVNlUyzownvtMzLXDTR btzdT0T9+/e927sSbEXKucZ+mi7PHRnl -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:33 2025 by rpki-client