$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: 6H69Pw/aaQGxaql4Ca0aeTYgpu1wO4nZXGa+BAxiUT0= Subject key identifier: 8C:AE:B4:CE:4A:06:C3:9D:08:BE:A5:D9:0F:B0:9E:1F:9F:23:B2:61 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 01EA Signing time: Mon 20 Oct 2025 16:08:46 +0000 Manifest this update: Mon 20 Oct 2025 16:08:45 +0000 Manifest next update: Mon 27 Oct 2025 16:08:45 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: V7eqTehFW6+yhEUtsT//MmiCjqpcG9yOzN1hZh3btr0=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Oct 20 16:08:45 2025 GMT Not After : Oct 27 16:08:45 2025 GMT Subject: CN=68f65e8d-540a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:7e:58:ff:35:fc:60:d0:49:82:b8:2f:99: 5d:82:d1:a3:45:db:14:21:4b:3d:0b:85:bf:3b:f2: 8a:12:4d:ef:f1:64:60:5c:24:61:2e:3c:71:13:95: 7a:96:82:68:da:4c:c1:78:6c:ac:fb:06:6c:68:94: 21:95:5e:59:6a:df:cd:04:90:cc:5a:9e:bc:29:59: 35:29:19:f0:b8:ab:f6:29:51:cc:89:3e:de:80:94: ae:c2:1d:26:47:a0:69:db:18:e1:bf:1e:7f:a7:8b: 52:49:bd:7f:68:70:54:be:d8:1c:ae:4f:a9:a4:1a: fd:a2:c2:8e:a7:fe:07:c1:e5:fa:40:9f:5e:b5:02: 31:5b:aa:81:99:1a:4b:42:5c:40:55:9c:70:d9:55: 53:2e:59:0a:9f:84:57:31:2b:bf:3e:0c:71:ee:76: 8e:bf:fb:c9:49:3e:98:f2:16:80:19:db:ce:84:5b: 98:5b:d5:bd:77:b3:f1:40:62:b9:32:a9:cd:1d:7a: 25:92:82:ae:12:e2:8d:bb:b5:ba:03:0e:4e:54:e7: 96:28:76:33:77:e9:6c:47:7e:a1:9a:13:c5:c8:18: 3f:0d:f1:3c:e1:d6:06:55:16:77:5b:16:b0:a5:ec: 32:70:e4:d9:0f:ef:2a:70:6b:00:01:08:2a:04:f8: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AE:B4:CE:4A:06:C3:9D:08:BE:A5:D9:0F:B0:9E:1F:9F:23:B2:61 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:55:94:d1:83:c7:a8:43:44:05:2d:a1:e3:a6:2d:10:c6: 1e:12:4a:b9:90:98:a0:4f:df:81:d3:00:83:6a:a0:84:9a:ba: b2:92:df:07:44:25:90:2e:d6:af:ca:03:23:d4:48:5a:52:da: 60:45:1d:21:40:8e:b6:27:68:01:28:05:62:dd:97:bc:6e:5a: ca:ff:07:11:ea:8c:83:ab:85:41:57:11:21:aa:56:73:cc:3c: bf:b3:7d:b1:52:8f:01:cc:d2:c2:03:fd:80:cb:09:46:12:c8: eb:4f:93:1d:b4:dd:57:23:26:bb:9b:df:76:ac:ed:30:f7:88: 8a:26:20:20:dc:10:77:b0:e8:b2:4c:d4:f9:d2:e8:f5:d3:9e: af:34:cb:d8:8c:68:cc:96:40:7c:4b:c7:cd:7b:f0:a8:6c:d3: 45:a6:06:83:e7:ca:1c:12:b0:1d:3b:16:dd:e9:bf:e1:58:39: bf:d0:52:85:b5:0f:2e:fd:6e:ec:b4:a0:c7:16:a7:17:ec:6e: 99:75:e3:41:97:cd:82:b2:2f:10:8d:2a:9b:f8:34:43:7f:ef: cb:76:ca:35:33:49:89:5b:7f:f3:e5:74:17:16:77:80:42:cd: 90:f2:a6:16:d5:c5:2a:91:c0:27:34:1b:4f:fd:15:a7:37:a0: 68:ac:c0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUxMDIwMTYwODQ1WhcNMjUxMDI3MTYwODQ1WjAYMRYwFAYD VQQDEw02OGY2NWU4ZC01NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlp5+WP81/GDQSYK4L5ldgtGjRdsUIUs9C4W/O/KKEk3v8WRgXCRhLjxxE5V6 loJo2kzBeGys+wZsaJQhlV5Zat/NBJDMWp68KVk1KRnwuKv2KVHMiT7egJSuwh0m R6Bp2xjhvx5/p4tSSb1/aHBUvtgcrk+ppBr9osKOp/4HweX6QJ9etQIxW6qBmRpL QlxAVZxw2VVTLlkKn4RXMSu/Pgxx7naOv/vJST6Y8haAGdvOhFuYW9W9d7PxQGK5 MqnNHXolkoKuEuKNu7W6Aw5OVOeWKHYzd+lsR36hmhPFyBg/DfE84dYGVRZ3Wxaw pewycOTZD+8qcGsAAQgqBPj15wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyutM5K BsOdCL6l2Q+wnh+fI7JhMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADt1WU0YPHqENEBS2h46YtEMYeEkq5kJigT9+B0wCDaqCEmrqykt8H RCWQLtavygMj1EhaUtpgRR0hQI62J2gBKAVi3Ze8blrK/wcR6oyDq4VBVxEhqlZz zDy/s32xUo8BzNLCA/2AywlGEsjrT5MdtN1XIya7m992rO0w94iKJiAg3BB3sOiy TNT50uj1056vNMvYjGjMlkB8S8fNe/CobNNFpgaD58ocErAdOxbd6b/hWDm/0FKF tQ8u/W7stKDHFqcX7G6ZdeNBl82Csi8QjSqb+DRDf+/Ldso1M0mJW3/z5XQXFneA Qs2Q8qYW1cUqkcAnNBtP/RWnN6BorMDF -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:35 2025 by rpki-client