$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: aU7tc+kamUI6ybO2JudciQCEWTAxGLqvBwLyB135X7I= Subject key identifier: 13:7C:CB:9A:A3:23:F4:B7:FB:D0:C4:61:E6:91:9C:4F:46:AC:6C:3A Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: AD Signing time: Sun 19 Oct 2025 09:19:34 +0000 Manifest this update: Sun 19 Oct 2025 09:19:34 +0000 Manifest next update: Sun 26 Oct 2025 09:19:34 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: qI8tcELbXpO7U9MuvU5EINkF1kPXW4Fzg2Y7UkmEqAQ=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Oct 19 09:19:34 2025 GMT Not After : Oct 26 09:19:34 2025 GMT Subject: CN=68f4ad26-d2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:b5:2b:b0:3e:8d:1d:8d:3f:41:f3:22:37: cb:ad:23:df:07:2e:21:56:8b:cc:72:a7:af:00:e8: 18:99:e0:cd:2e:fb:7a:49:ee:df:97:03:c5:54:0e: 5c:0a:d0:de:c5:4f:09:58:0d:b2:b2:db:77:dc:2d: 43:43:d1:27:83:56:b0:6a:02:17:20:13:09:35:c5: 4a:a1:e1:32:ba:85:b4:cb:3c:92:9f:59:49:6d:ce: 11:e8:c0:4c:b0:e9:f7:46:b7:16:b3:35:7b:30:4a: 3a:90:fb:99:85:44:2b:c0:3b:28:90:61:3e:2c:c3: 43:fe:9a:cf:ac:72:63:40:1b:bc:4a:17:23:84:bb: 9e:d0:8b:ba:85:f1:29:1c:b2:f1:ea:64:bf:95:69: 76:cd:4b:ef:f9:cf:2f:88:cd:a3:ca:85:2c:e2:5b: 0d:93:03:f2:41:fe:6a:ef:83:1b:b5:d7:4f:45:11: b9:3d:5a:b9:d9:93:62:b8:87:c2:d1:0d:97:aa:34: b6:b1:3a:11:ee:d7:d0:98:b1:34:b6:5a:f9:bc:8f: 76:4a:f1:9c:ec:a3:ea:dc:10:68:6b:39:10:68:9b: a4:b7:f0:b2:3a:dc:b3:9b:a8:aa:05:18:5f:4f:8c: 20:b0:72:5e:d2:cd:66:fa:b2:75:65:21:29:d2:0a: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:CB:9A:A3:23:F4:B7:FB:D0:C4:61:E6:91:9C:4F:46:AC:6C:3A X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:d8:98:00:c5:9e:6f:8c:68:b0:eb:d3:07:80:0f:41:42: 9b:51:b4:1b:0d:a0:c0:ff:40:c8:51:ee:19:f7:19:c6:a4:d3: 82:46:ce:9e:51:86:7b:dd:5e:e1:d7:20:1d:6b:e6:35:a3:b4: 69:76:bb:e8:4d:90:8d:c0:53:d6:1b:6e:a1:58:c3:9e:56:55: 3e:98:0e:ef:03:3c:ef:20:c9:d8:c3:65:b9:4d:ae:48:ee:62: 38:d3:5b:77:89:dc:ba:af:db:b7:62:9a:fd:b8:88:cd:50:20: da:2a:7e:f4:e4:ec:2f:11:12:49:2c:74:76:06:b9:71:29:9b: 9d:91:1c:16:f9:c3:dc:c0:f9:98:89:90:e9:28:f9:a6:04:c0: ae:29:af:a4:fd:32:ce:e1:65:df:2b:aa:50:5d:3a:3f:5f:52: f7:03:18:91:a9:8c:d1:fa:5d:dc:ac:01:7b:73:2c:74:17:4c: 98:b5:ab:c9:7f:8b:28:e4:91:56:6e:9f:12:cd:16:a2:07:34: 02:76:dc:1e:98:70:e3:af:59:ff:44:10:44:5c:e3:60:6e:81: c1:6b:ce:97:b0:e5:15:b6:b8:e3:6c:96:1d:67:a9:ce:b1:5e: f2:d6:2b:0c:14:e9:84:e9:c3:0a:77:85:2f:56:5a:39:a8:8f: 5c:9f:72:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKEE4MjkyRjYyMDRDODIxM0Q3OTFGQTZDQ0FBRjU3ODUx OTRFRjgxQTAwHhcNMjUxMDE5MDkxOTM0WhcNMjUxMDI2MDkxOTM0WjAYMRYwFAYD VQQDEw02OGY0YWQyNi1kMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uO1K7A+jR2NP0HzIjfLrSPfBy4hVovMcqevAOgYmeDNLvt6Se7flwPFVA5c CtDexU8JWA2ystt33C1DQ9Eng1awagIXIBMJNcVKoeEyuoW0yzySn1lJbc4R6MBM sOn3RrcWszV7MEo6kPuZhUQrwDsokGE+LMND/prPrHJjQBu8ShcjhLue0Iu6hfEp HLLx6mS/lWl2zUvv+c8viM2jyoUs4lsNkwPyQf5q74MbtddPRRG5PVq52ZNiuIfC 0Q2XqjS2sToR7tfQmLE0tlr5vI92SvGc7KPq3BBoazkQaJukt/CyOtyzm6iqBRhf T4wgsHJe0s1m+rJ1ZSEp0gpQqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN8y5qj I/S3+9DEYeaRnE9GrGw6MB8GA1UdIwQYMBaAFKgpL2IEyCE9eR+mzKr1eFGU74Gg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xMTY0Q0FFMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlUMTVINmJNcXZWNFVaVHZn YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlU MTVINmJNcXZWNFVaVHZnYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB63tiYAMWeb4xosOvTB4APQUKbUbQbDaDA/0DIUe4Z9xnGpNOCRs6e UYZ73V7h1yAda+Y1o7RpdrvoTZCNwFPWG26hWMOeVlU+mA7vAzzvIMnYw2W5Ta5I 7mI401t3idy6r9u3Ypr9uIjNUCDaKn705OwvERJJLHR2BrlxKZudkRwW+cPcwPmY iZDpKPmmBMCuKa+k/TLO4WXfK6pQXTo/X1L3AxiRqYzR+l3crAF7cyx0F0yYtavJ f4so5JFWbp8SzRaiBzQCdtwemHDjr1n/RBBEXONgboHBa86XsOUVtrjjbJYdZ6nO sV7y1isMFOmE6cMKd4UvVlo5qI9cn3LI -----END CERTIFICATE-----Generated at Tue Oct 21 09:20:23 2025 by rpki-client