$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: DlyzOImPpCg5rHMHbJVeCk+DocBmEq03GaZwxn+7uYo= Subject key identifier: 25:2E:1B:55:FD:CE:14:27:D5:B1:79:5A:8F:60:F9:F5:AA:4C:C1:2A Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0354 Signing time: Sun 19 Oct 2025 03:06:22 +0000 Manifest this update: Sun 19 Oct 2025 03:06:22 +0000 Manifest next update: Sun 26 Oct 2025 03:06:21 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: vymyNWbnhrOGy+zdYvUdpyYqV50wfTp50CLVjSZ3BAo=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: 7H1WNXq4e92nwvgGNVFt3drbCtCA0vHzGWt+JS3qJgY=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: yEYfp9zlxIj6oN/RjQwAEbZkACgBbwz/31Qhgmxz4PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Oct 19 03:06:22 2025 GMT Not After : Oct 26 03:06:21 2025 GMT Subject: CN=68f455ae-3b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:69:ed:d3:fe:79:42:76:20:99:ab:b4:ff: 70:a5:aa:f0:bf:cd:8f:3b:3e:a6:5e:76:d5:c6:8b: cb:32:bb:e1:cf:db:94:ac:55:58:71:88:ae:21:c7: 49:4e:ae:e7:4a:0b:ab:ff:c8:25:98:dc:85:21:78: 8a:92:1a:f5:1b:f0:5d:4d:f8:0e:90:2f:11:51:a5: 39:d0:07:13:25:a4:31:82:68:10:0a:24:39:dd:c0: de:74:75:cc:b5:30:7a:55:df:fd:0a:12:ab:e5:74: 2b:29:f1:82:4a:af:61:37:84:b5:fb:13:f7:be:a3: 07:c0:d7:ef:d8:e4:f8:22:88:ca:6f:ee:b4:b7:8a: bf:30:2f:d2:4b:12:36:f6:98:50:5c:06:cb:b5:3a: 2e:6e:01:cf:6a:67:a7:ae:22:04:dc:ea:4c:c6:61: 59:2a:3c:8a:0a:45:1c:20:a1:04:34:a0:df:1c:38: 4f:4b:a4:83:0b:d2:ea:ff:65:04:9f:e0:d0:37:f4: 85:53:8c:8e:8a:8f:6e:fe:a2:73:a5:81:27:c2:bb: 5e:c3:b6:b4:f6:0a:ec:f6:6a:c7:02:6f:45:62:97: f2:7c:c3:c0:38:52:d1:1c:72:42:98:9d:b7:60:a9: cb:28:d4:62:ad:32:19:f4:83:bb:80:d2:c7:af:6d: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2E:1B:55:FD:CE:14:27:D5:B1:79:5A:8F:60:F9:F5:AA:4C:C1:2A X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d7:da:9a:8a:f0:b0:70:63:3f:e9:d8:0a:dc:0c:a2:f5:78: 73:0f:3c:b9:9c:34:ce:9c:94:0e:19:aa:66:f0:6d:b0:b9:8c: 4f:13:1b:2d:e7:26:54:56:e2:d3:8b:2d:a6:61:c4:89:20:3c: 4a:fd:18:c2:cb:74:74:5b:a3:35:7a:4c:09:41:c8:a3:2f:0f: 87:26:5e:fe:bd:11:5b:89:5e:6f:05:71:1a:d1:4c:52:2f:05: 1a:7a:ae:f4:9d:04:97:c9:c7:91:9d:37:4b:b6:35:64:9f:4a: ef:bb:48:67:c5:76:51:e7:7b:f0:c6:c1:39:0a:c3:9e:da:0c: 69:9a:f7:78:25:c4:eb:2a:43:b9:cb:c5:7e:97:75:16:98:11: fb:58:55:50:bd:83:23:81:4e:c1:d0:37:41:47:16:55:63:0d: 59:5c:1a:cb:b7:ba:08:3a:e6:a5:9b:54:ab:44:24:43:dc:a5: 1f:ff:bd:7b:c2:66:9b:12:74:72:3b:5c:f8:58:e8:a6:19:50: cf:ad:45:29:f4:5a:93:f2:2f:e5:91:1f:aa:2c:95:ff:ed:d3: fe:6d:f5:4e:20:d4:f6:97:6a:9f:f4:1e:79:6d:91:37:17:9d: f5:9d:ef:77:31:5f:d8:5a:8a:9c:71:2a:90:33:01:e1:5b:da: e3:26:a6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUxMDE5MDMwNjIyWhcNMjUxMDI2MDMwNjIxWjAYMRYwFAYD VQQDEw02OGY0NTVhZS0zYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oBp7dP+eUJ2IJmrtP9wparwv82POz6mXnbVxovLMrvhz9uUrFVYcYiuIcdJ Tq7nSgur/8glmNyFIXiKkhr1G/BdTfgOkC8RUaU50AcTJaQxgmgQCiQ53cDedHXM tTB6Vd/9ChKr5XQrKfGCSq9hN4S1+xP3vqMHwNfv2OT4IojKb+60t4q/MC/SSxI2 9phQXAbLtToubgHPamenriIE3OpMxmFZKjyKCkUcIKEENKDfHDhPS6SDC9Lq/2UE n+DQN/SFU4yOio9u/qJzpYEnwrtew7a09grs9mrHAm9FYpfyfMPAOFLRHHJCmJ23 YKnLKNRirTIZ9IO7gNLHr23t9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUuG1X9 zhQn1bF5Wo9g+fWqTMEqMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi19qaivCwcGM/6dgK3Ayi9XhzDzy5nDTOnJQOGapm8G2wuYxPExst 5yZUVuLTiy2mYcSJIDxK/RjCy3R0W6M1ekwJQcijLw+HJl7+vRFbiV5vBXEa0UxS LwUaeq70nQSXyceRnTdLtjVkn0rvu0hnxXZR53vwxsE5CsOe2gxpmvd4JcTrKkO5 y8V+l3UWmBH7WFVQvYMjgU7B0DdBRxZVYw1ZXBrLt7oIOualm1SrRCRD3KUf/717 wmabEnRyO1z4WOimGVDPrUUp9FqT8i/lkR+qLJX/7dP+bfVOINT2l2qf9B55bZE3 F531ne93MV/YWoqccSqQMwHhW9rjJqYU -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:48 2025 by rpki-client