$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: 4e8E0sGM2Mgs/dPjE/ZkXjoGlW4FrTzgcdJayZQokP0= Subject key identifier: FF:1B:41:C3:37:E9:FB:5F:FD:F4:F6:B0:F8:9D:05:E6:C6:FD:1F:77 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E3F Signing time: Sat 18 Oct 2025 18:27:01 +0000 Manifest this update: Sat 18 Oct 2025 18:27:00 +0000 Manifest next update: Sat 25 Oct 2025 18:27:00 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: fc8XhB4JR+D75nYd/skUAT4li38rT+3jp94hUu/Oisg=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3656 (0xe48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Oct 18 18:27:00 2025 GMT Not After : Oct 25 18:27:00 2025 GMT Subject: CN=68f3dbf4-3d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:12:05:fc:1f:74:a2:76:f7:e9:ca:97:cd: 11:78:63:db:f6:29:76:67:d9:8d:ca:f9:05:75:f8: 95:d0:36:08:67:06:57:e1:9c:7f:6d:77:18:5c:53: 13:50:65:e8:dc:b5:6a:eb:18:4e:75:6f:02:d2:1b: e3:4c:4d:9e:7f:e6:6f:e6:84:3a:f1:b0:16:58:61: fb:6d:76:89:68:60:c9:ff:fd:3f:18:35:a5:16:97: a0:b1:72:bd:00:de:24:73:18:89:8b:4a:ec:bb:66: e1:21:69:93:55:fc:93:2d:2d:7b:13:b6:3b:e0:c2: e0:eb:32:f5:9d:71:f4:4b:0f:23:a3:7e:0b:08:51: 75:59:96:25:07:23:ec:85:24:01:23:b8:5e:23:ee: e6:e9:ea:af:d3:44:6a:7b:c5:7c:80:cc:23:0c:d0: 7c:45:9c:6a:db:db:4b:96:45:dc:18:d7:e8:3d:ee: 72:c3:be:77:da:0b:b5:18:ea:17:9a:b5:da:13:d4: 73:03:fc:55:ae:8b:90:de:c1:10:1d:a6:d9:db:31: 09:c4:59:fe:c6:48:8d:da:09:be:bb:fd:c3:9e:1f: 78:58:af:da:c3:c3:30:09:06:dc:52:43:4d:74:66: 30:ee:69:b6:d5:23:85:d0:9c:c6:3e:3e:79:c6:24: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:41:C3:37:E9:FB:5F:FD:F4:F6:B0:F8:9D:05:E6:C6:FD:1F:77 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1f:03:ff:ac:3e:45:fd:a6:ea:75:9d:5d:a7:f0:79:40:e1: c2:d2:ef:a3:64:e1:29:97:01:f0:78:f9:1d:0d:8e:f2:10:cb: b5:43:d5:ee:2c:c4:46:c9:27:2f:a3:69:ba:7d:ce:59:c4:48: 96:8b:94:02:57:32:ae:4d:f8:61:cc:99:bf:d4:c9:70:b6:ee: 96:21:ca:6c:bf:32:8b:21:3c:88:05:88:e9:ef:58:9c:e1:47: 7a:5e:93:2b:dc:1e:77:fa:d6:73:35:e5:f8:8d:4c:8d:b9:c3: 0b:5b:05:91:62:d2:0e:d7:cd:91:df:f7:87:34:9f:5b:b7:7c: 6f:fc:7c:55:33:81:3a:3d:13:03:6b:2b:26:fe:1e:dc:6b:8b: b8:7a:cc:32:1b:53:66:11:1f:f0:2a:17:89:99:2b:8c:5e:c7: 36:33:d3:40:54:ff:b5:92:56:24:fd:65:fb:47:58:87:58:8d: 5c:ee:ff:e5:65:28:4f:1a:78:34:41:cd:ca:97:83:06:ce:25: e8:c3:41:f0:e1:10:2e:1b:ce:87:82:42:d5:fa:14:32:ae:cc: 37:29:34:81:a6:57:c7:11:2a:a9:56:ea:33:c9:1c:24:0d:43: 3d:78:39:2c:7a:7a:19:82:3e:ba:cb:20:eb:3d:81:76:51:b4: dd:77:91:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUxMDE4MTgyNzAwWhcNMjUxMDI1MTgyNzAwWjAYMRYwFAYD VQQDEw02OGYzZGJmNC0zZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9wSBfwfdKJ29+nKl80ReGPb9il2Z9mNyvkFdfiV0DYIZwZX4Zx/bXcYXFMT UGXo3LVq6xhOdW8C0hvjTE2ef+Zv5oQ68bAWWGH7bXaJaGDJ//0/GDWlFpegsXK9 AN4kcxiJi0rsu2bhIWmTVfyTLS17E7Y74MLg6zL1nXH0Sw8jo34LCFF1WZYlByPs hSQBI7heI+7m6eqv00Rqe8V8gMwjDNB8RZxq29tLlkXcGNfoPe5yw7532gu1GOoX mrXaE9RzA/xVrouQ3sEQHabZ2zEJxFn+xkiN2gm+u/3Dnh94WK/aw8MwCQbcUkNN dGYw7mm21SOF0JzGPj55xiQcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8bQcM3 6ftf/fT2sPidBebG/R93MB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHwP/rD5F/abqdZ1dp/B5QOHC0u+jZOEplwHwePkdDY7yEMu1Q9Xu LMRGyScvo2m6fc5ZxEiWi5QCVzKuTfhhzJm/1Mlwtu6WIcpsvzKLITyIBYjp71ic 4Ud6XpMr3B53+tZzNeX4jUyNucMLWwWRYtIO182R3/eHNJ9bt3xv/HxVM4E6PRMD aysm/h7ca4u4eswyG1NmER/wKheJmSuMXsc2M9NAVP+1klYk/WX7R1iHWI1c7v/l ZShPGng0Qc3Kl4MGziXow0Hw4RAuG86HgkLV+hQyrsw3KTSBplfHESqpVuozyRwk DUM9eDksenoZgj66yyDrPYF2UbTdd5H7 -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:42 2025 by rpki-client