$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: 7Qm+AL1b+THM9BkCkbPpbG4/4oF3f7qZXS1H5yiLynU= Subject key identifier: 10:86:B0:29:27:B9:22:40:91:69:C9:E6:8D:13:E4:7A:83:AF:2B:52 Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B62 Signing time: Sat 18 Oct 2025 16:36:27 +0000 Manifest this update: Sat 18 Oct 2025 16:36:27 +0000 Manifest next update: Sat 25 Oct 2025 16:36:27 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: 3/zXSXuKDfchHXlEcALgn4IlvzHi5xgMZeERX2P4pcA=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: PfaBGPnkUgsWEXBDryvUqr89XZWDUPWxeZUL3rzB4xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7022 (0x1b6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Oct 18 16:36:27 2025 GMT Not After : Oct 25 16:36:27 2025 GMT Subject: CN=68f3c20b-9c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:e0:19:b7:66:4a:b2:98:cd:03:0b:13:27: 30:a5:cd:94:b7:cf:2c:cd:8b:7e:f5:04:57:76:13: f8:8e:13:0b:a0:e8:3f:0f:d4:c0:eb:9a:d7:00:1f: b7:86:d3:a3:b3:7a:19:e5:48:77:43:27:33:39:ce: ae:bb:4c:05:9b:62:a7:ca:7b:47:6a:a2:14:2b:d1: e7:f0:cd:2b:0c:b4:91:a8:03:95:ec:f0:1a:a3:31: e1:25:1c:b7:05:0c:e9:19:75:2c:ae:fd:c0:e3:cc: 2a:40:40:d2:d3:c4:09:00:53:12:7c:59:15:02:14: 50:5c:61:c4:9f:0a:42:1b:8d:c8:c4:99:73:db:d2: 84:b9:2a:77:43:27:ef:2f:54:13:1f:cb:0d:53:45: f5:d0:9f:2d:64:f4:72:35:fc:61:af:ff:54:b5:b3: 6a:e9:9a:17:b5:26:1c:4d:a5:ad:50:99:ee:5c:0e: a6:84:13:3d:f8:41:4e:3e:c0:d3:91:18:26:b8:88: 45:63:60:b7:14:7f:96:49:11:ab:53:39:5c:52:80: 46:10:e5:78:f3:06:fb:48:a0:5e:6e:ae:26:f4:d4: a5:7c:76:75:ad:0f:ca:70:fa:4b:98:84:cb:14:fb: 16:5e:8a:f4:b0:5b:62:82:23:61:de:e7:c4:4d:48: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:86:B0:29:27:B9:22:40:91:69:C9:E6:8D:13:E4:7A:83:AF:2B:52 X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b4:bd:17:81:d6:04:03:f5:95:68:76:61:a6:9d:63:b4:aa: fc:52:20:62:0b:21:28:26:93:e2:02:78:2e:18:c5:dd:fe:9d: 7d:27:76:71:97:66:93:8e:1e:4c:9e:3b:45:d8:bb:75:f6:6f: b3:9b:98:03:82:31:72:b0:4e:dc:cd:3e:52:7b:cd:f2:a7:a4: 2a:9a:6a:c5:56:12:ca:9a:20:fb:6d:57:6f:6b:17:8e:41:c2: 06:ac:73:53:df:0b:21:cf:97:d4:f2:f9:5e:28:d4:e1:c9:34: dd:8d:18:0d:e3:e6:1c:5c:99:b3:a8:cd:5f:12:fe:79:be:25: dc:6b:79:6b:73:fe:41:42:0c:94:1d:dc:7e:fe:d1:3f:c8:fb: fc:d3:c1:a8:cc:93:48:de:84:7a:1f:06:d2:c3:c4:83:0f:90: 7d:c2:15:dc:37:a7:04:b8:d3:32:d0:d5:50:80:44:9b:dc:c5: de:b7:79:02:d8:34:96:7b:1e:75:69:68:ff:1b:81:b8:3d:8d: 0a:5d:ce:79:d5:8c:d0:e8:48:2b:ce:9d:76:9c:67:a6:36:87: 98:ad:88:6d:f4:76:a3:d9:dc:f5:26:76:11:3b:80:b8:08:2a: 03:70:05:c2:85:4b:68:5b:80:0f:9b:8c:b1:60:18:ab:4e:b6: b3:03:3c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUxMDE4MTYzNjI3WhcNMjUxMDI1MTYzNjI3WjAYMRYwFAYD VQQDEw02OGYzYzIwYi05YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw/gGbdmSrKYzQMLEycwpc2Ut88szYt+9QRXdhP4jhMLoOg/D9TA65rXAB+3 htOjs3oZ5Uh3QyczOc6uu0wFm2KnyntHaqIUK9Hn8M0rDLSRqAOV7PAaozHhJRy3 BQzpGXUsrv3A48wqQEDS08QJAFMSfFkVAhRQXGHEnwpCG43IxJlz29KEuSp3Qyfv L1QTH8sNU0X10J8tZPRyNfxhr/9UtbNq6ZoXtSYcTaWtUJnuXA6mhBM9+EFOPsDT kRgmuIhFY2C3FH+WSRGrUzlcUoBGEOV48wb7SKBebq4m9NSlfHZ1rQ/KcPpLmITL FPsWXor0sFtigiNh3ufETUirFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCGsCkn uSJAkWnJ5o0T5HqDrytSMB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLtL0XgdYEA/WVaHZhpp1jtKr8UiBiCyEoJpPiAnguGMXd/p19J3Zx l2aTjh5MnjtF2Lt19m+zm5gDgjFysE7czT5Se83yp6QqmmrFVhLKmiD7bVdvaxeO QcIGrHNT3wshz5fU8vleKNThyTTdjRgN4+YcXJmzqM1fEv55viXca3lrc/5BQgyU Hdx+/tE/yPv808GozJNI3oR6HwbSw8SDD5B9whXcN6cEuNMy0NVQgESb3MXet3kC 2DSWex51aWj/G4G4PY0KXc551YzQ6Egrzp12nGemNoeYrYht9Haj2dz1JnYRO4C4 CCoDcAXChUtoW4APm4yxYBirTrazAzxS -----END CERTIFICATE-----Generated at Mon Oct 20 07:30:31 2025 by rpki-client