$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: jl7vOMCxrXlPDZSkB+erWSdnf9iXZHJgvEMR5ADoUYY= Subject key identifier: 52:E3:D8:C3:E5:A5:05:37:5E:61:DB:19:06:17:4E:19:C9:85:DC:7B Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: 0126 Signing time: Sun 19 Oct 2025 07:32:46 +0000 Manifest this update: Sun 19 Oct 2025 07:32:45 +0000 Manifest next update: Sun 26 Oct 2025 07:32:45 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: uFF8BTL+OYmBzbQ3eIBce6HmM7m4szeyvKT5HDof1cM=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Oct 19 07:32:45 2025 GMT Not After : Oct 26 07:32:45 2025 GMT Subject: CN=68f4941e-3c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:3f:f5:09:01:78:47:e6:59:ec:82:45:43: e9:41:65:e4:98:81:68:e8:a6:29:a1:5f:b1:17:4f: 65:95:8d:65:73:aa:19:fb:8a:77:8b:d7:78:e7:d9: f1:d3:3e:84:67:25:21:46:e6:05:6c:97:35:4d:29: ca:f9:07:21:00:08:4f:5d:39:04:ee:8a:b8:df:f1: 7b:c3:fb:38:10:c7:77:e3:fd:68:23:ec:23:a6:8c: b3:8a:89:94:3e:43:a3:f6:54:ca:23:63:a9:c5:04: ea:e2:c0:08:e7:dc:a7:8c:02:52:dc:dd:a6:a2:06: 02:11:be:39:15:4e:f0:c3:b9:3f:60:c9:ce:1f:74: 1f:ba:fd:68:95:9c:68:8d:6a:0f:7b:d1:aa:5f:9e: bd:21:cc:0c:67:4b:3d:b8:db:8c:6a:dc:ff:51:11: cb:c2:dd:0f:f1:55:bd:11:44:d1:2b:94:2d:71:9f: 38:03:6a:74:3e:cd:20:2a:83:ab:8c:1f:25:4a:f2: de:82:c6:cb:7f:e7:0d:c4:6f:87:dd:bd:58:ce:00: 50:a8:8d:7c:18:86:16:72:38:02:c4:30:05:3a:58: f6:5f:c5:04:f1:a3:cc:35:e6:a4:95:d5:2a:dd:3f: 27:7d:ec:7f:aa:80:4d:36:58:ce:dd:24:cd:3d:68: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:D8:C3:E5:A5:05:37:5E:61:DB:19:06:17:4E:19:C9:85:DC:7B X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:2f:b7:2c:d2:a0:ff:12:eb:22:0c:52:d1:81:79:46:8b:16: 8f:ab:76:c8:8c:87:fc:5b:52:7c:1c:98:3c:bc:21:61:7a:36: 6b:81:16:6f:de:ff:83:b4:53:d0:12:1a:99:88:47:06:19:21: 4c:7e:df:f8:cb:82:2c:ab:e0:a5:26:01:be:b8:c6:7f:6d:e2: 08:6c:d6:e2:d8:14:dc:79:85:2b:2a:43:60:ee:69:8a:11:c3: 01:0e:7f:60:27:11:3d:76:28:5f:29:10:70:7e:31:dd:ce:dc: 38:c1:81:11:fa:b8:dd:5e:23:75:ba:fe:8c:f7:3e:81:04:7e: 18:d0:1d:18:9f:39:61:f5:fb:2a:ed:48:76:bf:76:51:c2:3f: 64:75:23:b5:b1:ec:a2:df:ae:06:16:8f:8a:e6:2f:d0:c6:ca: 54:2c:ad:48:ba:78:b7:a7:c8:27:b7:1c:a2:c7:c7:09:52:96: 9d:b1:ae:61:23:30:a4:dd:55:d0:cf:28:77:a6:9e:20:fe:81: a1:7a:23:cf:5b:82:eb:ca:66:93:84:a8:8d:c2:4f:55:48:be: b9:87:7a:e0:50:cc:3e:df:37:8d:23:cb:25:68:31:8c:9b:dc: 24:a7:27:ea:a3:92:03:67:fe:75:b6:51:5f:c7:3c:0a:ee:65: 6e:95:af:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUxMDE5MDczMjQ1WhcNMjUxMDI2MDczMjQ1WjAYMRYwFAYD VQQDEw02OGY0OTQxZS0zYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sA/9QkBeEfmWeyCRUPpQWXkmIFo6KYpoV+xF09llY1lc6oZ+4p3i9d459nx 0z6EZyUhRuYFbJc1TSnK+QchAAhPXTkE7oq43/F7w/s4EMd34/1oI+wjpoyziomU PkOj9lTKI2OpxQTq4sAI59ynjAJS3N2mogYCEb45FU7ww7k/YMnOH3Qfuv1olZxo jWoPe9GqX569IcwMZ0s9uNuMatz/URHLwt0P8VW9EUTRK5QtcZ84A2p0Ps0gKoOr jB8lSvLegsbLf+cNxG+H3b1YzgBQqI18GIYWcjgCxDAFOlj2X8UE8aPMNeakldUq 3T8nfex/qoBNNljO3STNPWiwAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLj2MPl pQU3XmHbGQYXThnJhdx7MB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjL7cs0qD/EusiDFLRgXlGixaPq3bIjIf8W1J8HJg8vCFhejZrgRZv 3v+DtFPQEhqZiEcGGSFMft/4y4Isq+ClJgG+uMZ/beIIbNbi2BTceYUrKkNg7mmK EcMBDn9gJxE9dihfKRBwfjHdztw4wYER+rjdXiN1uv6M9z6BBH4Y0B0Ynzlh9fsq 7Uh2v3ZRwj9kdSO1seyi364GFo+K5i/QxspULK1Iuni3p8gntxyix8cJUpadsa5h IzCk3VXQzyh3pp4g/oGheiPPW4LrymaThKiNwk9VSL65h3rgUMw+3zeNI8slaDGM m9wkpyfqo5IDZ/51tlFfxzwK7mVula/f -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:40 2025 by rpki-client