$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: P5ks8K7YsGGIWCMcELhh2eJFKr9juI/KfJDYmjf1Ryo= Subject key identifier: 17:96:08:03:7E:72:C2:FE:7C:3C:C1:22:2C:30:90:6C:92:B4:52:1B Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 07DC Signing time: Sat 18 Oct 2025 22:25:55 +0000 Manifest this update: Sat 18 Oct 2025 22:25:54 +0000 Manifest next update: Sat 25 Oct 2025 22:25:54 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: 2u5Pmo9BXLwYeHDzHWP4gW/WTJtv4r0ZCRmllc9//k4=) 2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: Pp8lb1nzqx7e9rT/EQLbTNVmmjg6MQa2RdSIFuurOeU=) 3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: B/FCYm7yp7p+ieEmvmImAhcl/oemA2ZNjMcDSU18oaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: Oct 18 22:25:54 2025 GMT Not After : Oct 25 22:25:54 2025 GMT Subject: CN=68f413f3-89da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:26:32:75:71:7c:a6:47:b4:de:72:63:35: 37:67:9c:33:b4:e2:fe:a0:3c:4f:5e:4f:61:e4:ad: ab:1d:d4:af:f7:22:ad:46:2b:70:5a:ae:3d:f9:3c: 46:95:e1:f1:e3:81:6a:5d:27:21:8f:c4:7e:af:4f: 21:52:04:84:b9:61:6f:e3:3e:77:84:d3:61:c3:cd: 23:2c:16:d1:c8:95:6e:7c:f0:33:76:be:7a:7c:76: db:a5:e2:43:e2:3b:b5:11:42:9c:15:cc:73:3b:82: 5d:c1:8c:c1:00:95:39:b3:ca:04:8b:a4:a9:ab:0c: d7:cc:c0:81:19:eb:db:47:8e:7c:c9:4d:82:4f:2d: b2:55:89:56:8d:7b:69:2b:33:e5:2f:cc:af:b6:89: 8f:27:41:99:b7:1f:fc:6d:04:49:b9:7b:6a:47:7e: 5a:56:ab:d8:22:d4:64:13:49:ec:42:a2:a3:08:7e: 15:58:23:9f:41:14:b2:60:13:b5:21:df:64:6c:3b: de:da:9f:12:19:ba:ce:9c:40:e5:eb:cc:0a:ed:53: 43:50:cb:f7:38:06:10:df:72:8c:1b:c0:ee:25:6f: 6b:cf:3e:74:1d:b6:c2:30:bf:a4:80:7e:f6:40:24: 8a:92:7d:90:83:e0:4c:06:5f:92:64:59:e2:f1:32: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:96:08:03:7E:72:C2:FE:7C:3C:C1:22:2C:30:90:6C:92:B4:52:1B X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1d:6e:e3:0e:9d:9b:fb:86:d7:cc:39:3c:b6:8d:e6:98:d5: 1e:0b:4c:bd:dc:b7:47:c0:3b:37:3d:5c:3d:ce:99:52:dd:78: 59:6b:f4:09:3c:cf:51:77:2d:0a:f9:eb:65:6b:f5:9d:a0:d6: 3c:c0:21:90:9b:9a:4e:06:b7:b2:eb:3b:9e:1e:c8:0d:d9:4d: 32:f8:c0:6f:95:99:a0:9d:f0:1e:a3:05:5f:5d:44:d7:f7:68: 88:3a:c7:2c:78:fc:3d:dd:d9:37:11:14:e9:ba:b3:87:1e:3c: 16:13:60:7c:d1:c5:f3:b2:c3:0b:7c:84:f1:68:39:3b:0f:d3: aa:8e:22:88:f7:d4:ac:9b:62:ea:eb:a0:3a:3f:37:12:ba:17: 2a:f2:4f:40:42:7b:9a:1e:f9:9a:d4:59:cd:4b:d8:2f:1c:92: 0e:aa:78:82:43:1c:0b:57:a6:8d:95:04:2e:df:33:78:5e:2e: 1b:71:a2:b9:0b:47:01:fb:f6:f2:91:44:28:33:bf:66:6e:0b: b3:57:d4:db:69:c7:82:8a:01:de:5c:56:b6:73:d7:cd:3a:7e: f8:50:79:12:06:1d:e6:74:00:54:b0:7a:de:03:fc:e3:d2:7a: 33:33:40:22:c4:6f:30:5f:12:fc:e1:52:f3:34:12:1d:46:f2: c3:8c:07:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjUxMDE4MjIyNTU0WhcNMjUxMDI1MjIyNTU0WjAYMRYwFAYD VQQDEw02OGY0MTNmMy04OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtogmMnVxfKZHtN5yYzU3Z5wztOL+oDxPXk9h5K2rHdSv9yKtRitwWq49+TxG leHx44FqXSchj8R+r08hUgSEuWFv4z53hNNhw80jLBbRyJVufPAzdr56fHbbpeJD 4ju1EUKcFcxzO4JdwYzBAJU5s8oEi6SpqwzXzMCBGevbR458yU2CTy2yVYlWjXtp KzPlL8yvtomPJ0GZtx/8bQRJuXtqR35aVqvYItRkE0nsQqKjCH4VWCOfQRSyYBO1 Id9kbDve2p8SGbrOnEDl68wK7VNDUMv3OAYQ33KMG8DuJW9rzz50HbbCML+kgH72 QCSKkn2Qg+BMBl+SZFni8TKViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeWCAN+ csL+fDzBIiwwkGyStFIbMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvHW7jDp2b+4bXzDk8to3mmNUeC0y93LdHwDs3PVw9zplS3XhZa/QJ PM9Rdy0K+etla/WdoNY8wCGQm5pOBrey6zueHsgN2U0y+MBvlZmgnfAeowVfXUTX 92iIOscsePw93dk3ERTpurOHHjwWE2B80cXzssMLfITxaDk7D9OqjiKI99Ssm2Lq 66A6PzcSuhcq8k9AQnuaHvma1FnNS9gvHJIOqniCQxwLV6aNlQQu3zN4Xi4bcaK5 C0cB+/bykUQoM79mbguzV9TbaceCigHeXFa2c9fNOn74UHkSBh3mdABUsHreA/zj 0nozM0AixG8wXxL84VLzNBIdRvLDjAdG -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:13 2025 by rpki-client