$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: 0i9rzPgDoPZYM930geBCuoPLH5emVZx1GLp8VYLA3OQ= Subject key identifier: D0:65:DC:FE:ED:E2:A6:85:F9:B8:B9:A4:A8:7B:8E:9E:9E:B3:7E:02 Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 063A Signing time: Sun 02 Nov 2025 22:42:01 +0000 Manifest this update: Sun 02 Nov 2025 22:42:00 +0000 Manifest next update: Sun 09 Nov 2025 22:42:00 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: bQvwpF33ghzr0Ak9ip+XnquLm9YPYYiModnR32lZKUc=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: ttRZLKoMySXPeabXatArFdOxpzq9cRtpWwNwu6sfYas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Nov 2 22:42:00 2025 GMT Not After : Nov 9 22:42:00 2025 GMT Subject: CN=6907de38-225c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:a6:b0:0a:8f:2c:36:cf:35:55:6f:aa:dc: 90:ab:36:6a:a7:30:63:53:a1:86:e3:31:8a:ef:bd: de:d4:bb:03:4e:9d:f1:bf:f2:e5:fb:c7:cc:9e:26: ff:07:d3:e8:67:d8:cf:9f:9d:75:a5:38:ab:e2:41: 8c:af:53:ba:21:3d:3e:2e:0f:a4:d5:d1:f8:20:85: 3e:b6:c9:cc:f0:57:be:da:a9:05:3f:44:56:51:6b: 7f:b2:53:1a:4f:ea:82:97:dc:2a:f6:59:23:39:9e: c1:95:ed:97:6f:12:01:92:7e:3a:eb:bb:8e:df:45: ca:84:61:0d:0e:48:fe:93:64:72:aa:a3:2d:00:89: 72:59:44:e8:d4:a3:22:e9:8f:8d:15:36:8b:51:6c: 50:35:d2:a2:a3:1e:c9:cb:38:9d:39:21:da:da:0e: 9e:72:45:08:4a:ca:59:c3:44:fb:a1:c8:13:4c:c7: ac:e4:48:08:7d:a5:20:90:7c:24:38:f8:a7:f0:4d: 14:cd:98:38:0f:7c:f9:ac:dd:dc:fa:05:0a:c0:d7: 44:f1:d4:82:d7:63:1f:a0:f0:68:1e:95:54:6e:8a: 1f:4b:82:d8:3a:66:55:38:61:e6:b6:c6:33:33:8d: 91:62:ba:c5:b4:10:48:8a:fc:9b:87:2b:e5:58:a1: 7e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:65:DC:FE:ED:E2:A6:85:F9:B8:B9:A4:A8:7B:8E:9E:9E:B3:7E:02 X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ee:f2:58:18:16:b3:4c:cd:7e:05:ce:4e:5e:79:f8:12:a2: 0c:c1:1f:0e:f2:09:e9:a0:36:c2:19:ac:6b:c8:a7:20:0e:8e: 69:a5:27:b4:06:21:e4:9f:77:25:d5:02:97:b7:5b:c1:5b:ad: eb:71:f6:ad:b8:f1:63:7d:4c:44:4e:b0:52:ae:03:26:c6:f2: ec:3c:80:3e:34:97:63:bc:53:45:99:ea:f6:46:ab:0b:b9:f1: d5:65:7b:62:a5:f4:d9:93:9c:e9:c9:d1:bd:7e:99:46:fa:15: 26:d2:83:72:5f:0b:7c:90:b7:a8:24:95:49:bc:49:ad:e3:54: 9d:25:37:95:e6:63:e7:ca:16:d9:dd:55:3e:78:4d:13:f7:ae: 13:e0:93:12:73:18:10:03:16:4c:01:20:e0:b0:d9:d4:ec:7f: ec:a7:66:cf:9e:6e:da:da:4a:37:59:b3:aa:ef:4a:ca:82:df: 99:c5:6e:6d:90:30:03:ed:d2:e8:ed:86:f0:b9:16:c8:43:d9: 00:c2:61:b3:0b:b3:72:17:52:aa:02:92:3c:35:7f:8f:bd:3e: c6:bb:24:20:47:0b:60:93:82:b2:72:12:f8:62:54:f1:f7:62: 0d:ba:bc:1b:42:f9:83:54:e2:85:89:38:41:86:b2:fd:c1:69: df:40:ed:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjUxMTAyMjI0MjAwWhcNMjUxMTA5MjI0MjAwWjAYMRYwFAYD VQQDEw02OTA3ZGUzOC0yMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eamsAqPLDbPNVVvqtyQqzZqpzBjU6GG4zGK773e1LsDTp3xv/Ll+8fMnib/ B9PoZ9jPn511pTir4kGMr1O6IT0+Lg+k1dH4IIU+tsnM8Fe+2qkFP0RWUWt/slMa T+qCl9wq9lkjOZ7Ble2XbxIBkn4667uO30XKhGENDkj+k2RyqqMtAIlyWUTo1KMi 6Y+NFTaLUWxQNdKiox7JyzidOSHa2g6eckUISspZw0T7ocgTTMes5EgIfaUgkHwk OPin8E0UzZg4D3z5rN3c+gUKwNdE8dSC12MfoPBoHpVUboofS4LYOmZVOGHmtsYz M42RYrrFtBBIivybhyvlWKF+twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBl3P7t 4qaF+bi5pKh7jp6es34CMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC97vJYGBazTM1+Bc5OXnn4EqIMwR8O8gnpoDbCGaxryKcgDo5ppSe0 BiHkn3cl1QKXt1vBW63rcfatuPFjfUxETrBSrgMmxvLsPIA+NJdjvFNFmer2RqsL ufHVZXtipfTZk5zpydG9fplG+hUm0oNyXwt8kLeoJJVJvEmt41SdJTeV5mPnyhbZ 3VU+eE0T964T4JMScxgQAxZMASDgsNnU7H/sp2bPnm7a2ko3WbOq70rKgt+ZxW5t kDAD7dLo7YbwuRbIQ9kAwmGzC7NyF1KqApI8NX+PvT7GuyQgRwtgk4KychL4YlTx 92INurwbQvmDVOKFiThBhrL9wWnfQO20 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:19 2025 by rpki-client