$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: LHgBZED9xaFik6sKZu7sLkzfSXN+Yj/HZKUACPLy+3s= Subject key identifier: 30:2D:1D:52:70:05:80:C8:4E:B8:A3:A6:56:F2:05:A7:A7:2C:C9:49 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 20D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 281D Signing time: Sat 18 Oct 2025 16:13:11 +0000 Manifest this update: Sat 18 Oct 2025 16:13:10 +0000 Manifest next update: Sat 25 Oct 2025 16:13:10 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: 7hugKqmxVfUmYokp6PdwNvAYQxTvAZUIJXpySEvug3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8403 (0x20d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Oct 18 16:13:10 2025 GMT Not After : Oct 25 16:13:10 2025 GMT Subject: CN=68f3bc97-9771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:0e:0b:f9:31:ab:61:a0:28:0b:ee:af:6f: e1:32:64:e3:c2:53:ef:94:a7:33:18:3b:f7:9b:3d: 1e:75:ff:dc:74:a4:6a:e2:95:11:fb:7e:a4:cc:1d: e0:4e:0e:f3:0a:5e:8e:bb:65:35:ba:27:f6:a6:51: 95:e5:44:d1:6e:c6:5d:9e:40:64:bb:70:ee:70:ed: 40:75:ab:ef:94:9b:8b:04:08:71:8d:71:67:25:ff: 45:24:13:92:93:1c:d9:97:51:ce:f0:0a:77:74:e7: d3:fe:f4:d7:6c:f3:19:ca:01:72:81:a9:2c:bc:db: 09:17:d4:69:26:53:9f:40:79:1d:cd:00:57:26:06: e7:02:8e:f6:b4:6f:79:49:9b:71:4d:6d:99:bb:32: 53:5b:24:09:87:88:62:39:d4:30:8b:f3:83:da:e2: 4e:63:c9:bd:a9:c5:79:00:03:10:d6:2a:d2:fa:f3: 18:94:ec:34:56:fd:f4:58:85:0a:d8:3c:7e:b5:2c: df:71:7a:8a:b0:46:fa:b4:54:eb:09:10:90:0a:ab: 55:5f:09:b1:40:82:07:90:99:83:4a:b8:f8:7b:d7: fb:e4:a5:5e:04:52:18:8a:db:d6:a2:f7:a9:e1:0e: 91:53:a9:25:7b:23:3b:be:a5:3c:99:a9:d4:b5:31: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:1D:52:70:05:80:C8:4E:B8:A3:A6:56:F2:05:A7:A7:2C:C9:49 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5b:4a:bb:27:f2:2f:a7:28:ed:8d:76:ae:f0:ed:ac:59:a6: 76:da:24:bc:25:ca:58:5f:9b:a7:12:b5:00:4d:95:a1:06:73: 54:ac:a5:f6:4c:d0:4f:dc:57:86:b6:9b:d6:29:9d:34:1f:6b: e6:1b:4c:ff:d4:02:b2:7c:28:20:1a:b3:42:bc:25:9d:9d:e6: f5:7d:87:6d:c3:6e:20:40:aa:9b:6e:6f:c8:4e:85:f7:13:06: 5b:e3:e4:81:0c:58:b7:2e:85:1e:2e:8f:ae:4d:e7:33:54:f4: 80:c6:59:25:0d:b5:b4:3e:db:9c:9d:b5:67:e4:fb:18:b4:04: b9:7f:a1:2b:58:ca:de:d1:be:06:0b:06:77:62:ca:27:dd:05: 88:a1:f2:df:f9:2c:0c:5b:66:86:f3:a8:fc:0a:65:a9:e2:ec: 7c:07:1d:83:30:26:f3:e1:7e:23:9d:39:56:69:78:e0:54:8e: 33:94:25:c8:9f:79:f1:63:ef:64:78:d7:73:61:14:c9:d4:ba: 0a:32:f9:bb:52:7d:8b:c2:a9:f6:6f:57:49:da:10:80:0b:7b: 83:bc:c1:d0:da:81:f5:6a:27:d1:b1:3b:2d:90:c4:7d:b0:1f: b7:92:74:b0:3d:eb:eb:da:46:b6:3f:38:a6:b9:5f:27:ca:7f: 7f:8b:0c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICINMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUxMDE4MTYxMzEwWhcNMjUxMDI1MTYxMzEwWjAYMRYwFAYD VQQDEw02OGYzYmM5Ny05NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK8OC/kxq2GgKAvur2/hMmTjwlPvlKczGDv3mz0edf/cdKRq4pUR+36kzB3g Tg7zCl6Ou2U1uif2plGV5UTRbsZdnkBku3DucO1AdavvlJuLBAhxjXFnJf9FJBOS kxzZl1HO8Ap3dOfT/vTXbPMZygFygaksvNsJF9RpJlOfQHkdzQBXJgbnAo72tG95 SZtxTW2ZuzJTWyQJh4hiOdQwi/OD2uJOY8m9qcV5AAMQ1irS+vMYlOw0Vv30WIUK 2Dx+tSzfcXqKsEb6tFTrCRCQCqtVXwmxQIIHkJmDSrj4e9f75KVeBFIYitvWovep 4Q6RU6kleyM7vqU8manUtTHq2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAtHVJw BYDITrijplbyBaenLMlJMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGW0q7J/IvpyjtjXau8O2sWaZ22iS8JcpYX5unErUATZWhBnNUrKX2 TNBP3FeGtpvWKZ00H2vmG0z/1AKyfCggGrNCvCWdneb1fYdtw24gQKqbbm/IToX3 EwZb4+SBDFi3LoUeLo+uTeczVPSAxlklDbW0PtucnbVn5PsYtAS5f6ErWMre0b4G CwZ3Yson3QWIofLf+SwMW2aG86j8CmWp4ux8Bx2DMCbz4X4jnTlWaXjgVI4zlCXI n3nxY+9keNdzYRTJ1LoKMvm7Un2Lwqn2b1dJ2hCAC3uDvMHQ2oH1aifRsTstkMR9 sB+3knSwPevr2ka2PzimuV8nyn9/iwzV -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:16 2025 by rpki-client