$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: KVY3+ABaBOtEUf3hIS9ms0nYGOoalifibiWT5e49u20= Subject key identifier: D0:00:36:62:B1:75:C2:BE:AD:E1:88:53:EE:1D:8E:2F:75:83:BF:E8 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 07D6 Signing time: Tue 04 Nov 2025 21:16:43 +0000 Manifest this update: Tue 04 Nov 2025 21:16:42 +0000 Manifest next update: Tue 11 Nov 2025 21:16:42 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: o1FQWW8Xmlm/QaThhzM/QtlwJfIRro/zG3WUqqi+1/E=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Nov 4 21:16:42 2025 GMT Not After : Nov 11 21:16:42 2025 GMT Subject: CN=690a6d3b-5430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:f4:95:8c:0a:6f:d0:18:ed:85:39:68:7d: 60:a6:a8:f5:16:61:25:89:4d:6b:40:6e:cc:ef:54: 48:d4:30:9b:46:47:3a:61:87:fa:02:09:a4:ff:e3: 9c:7b:9a:1e:d5:24:6e:00:13:21:9a:3e:be:95:e8: 35:6c:27:db:2d:36:15:18:32:98:61:b3:41:14:e4: 37:9f:db:b3:7f:76:7b:8c:51:58:e9:e8:f7:c5:9b: 06:91:f8:7d:da:20:f6:b0:9b:3a:16:f8:4f:26:6a: 28:b2:a8:42:a3:b6:03:d1:8d:90:fe:48:19:4e:50: 37:d4:fc:1e:8a:8b:75:ef:24:7e:b1:c6:ee:51:75: c4:7e:11:cd:60:fb:31:34:0c:6e:d0:d7:f3:ad:46: a8:fc:90:bd:a2:fb:14:ed:ab:ba:05:58:2c:b3:09: d1:b8:ce:90:25:63:dd:67:63:36:c0:47:6e:ad:30: fa:98:23:b9:93:30:61:c6:e7:1a:05:f6:be:4e:c1: cb:52:3e:ce:0b:31:bc:8e:d6:38:e5:5a:52:75:09: 0a:20:c9:be:11:69:e6:a5:f1:96:82:98:ac:86:08: ca:62:d9:e6:5f:45:31:06:35:5a:3c:ed:01:34:7e: 88:ca:68:5f:96:0c:77:9e:45:66:c1:2a:d1:98:32: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:36:62:B1:75:C2:BE:AD:E1:88:53:EE:1D:8E:2F:75:83:BF:E8 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:be:27:0d:c0:cd:03:d8:d2:f3:4f:92:71:00:db:56:9c:3d: ab:5d:d6:8b:ac:d6:e9:e2:54:05:c5:e6:7d:20:6c:0a:84:10: 38:da:81:a8:b4:96:c9:fd:88:8a:34:dd:5a:75:61:2a:c3:64: fe:f9:d1:11:b0:99:34:99:04:ed:7f:c0:39:93:e7:6c:41:1f: 86:8a:1c:22:d5:ac:e8:4e:d1:7d:b5:8b:c1:52:b9:89:1c:13: 7f:49:a5:7b:a0:b0:68:65:55:b2:ba:de:a4:6a:de:69:4e:57: 00:94:06:05:af:b7:a3:a1:f0:27:85:a1:ee:31:7c:62:27:38: 08:77:8c:cb:d4:c1:54:bb:64:06:6b:e3:0a:c4:fb:65:c0:d4: 08:4b:33:50:8b:b1:d4:3f:84:bf:a6:59:58:75:7d:17:63:89: a4:13:72:b8:c9:d4:22:81:23:00:ed:a6:d1:65:21:b7:e4:9f: 10:1f:5c:b9:d3:98:e9:92:11:fd:38:1e:a8:02:fc:b0:62:46: e8:51:8b:bc:1f:65:bb:bd:bd:bc:08:23:46:3b:fe:4c:67:65: 4d:9f:d8:d2:22:dd:bc:08:df:26:ea:23:61:35:cf:c0:d8:7a: ed:91:3d:f1:f5:49:30:51:4b:50:51:a4:0d:9c:47:7a:04:e6: bd:3d:c9:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUxMTA0MjExNjQyWhcNMjUxMTExMjExNjQyWjAYMRYwFAYD VQQDEw02OTBhNmQzYi01NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdz0lYwKb9AY7YU5aH1gpqj1FmEliU1rQG7M71RI1DCbRkc6YYf6Agmk/+Oc e5oe1SRuABMhmj6+leg1bCfbLTYVGDKYYbNBFOQ3n9uzf3Z7jFFY6ej3xZsGkfh9 2iD2sJs6FvhPJmoosqhCo7YD0Y2Q/kgZTlA31Pweiot17yR+scbuUXXEfhHNYPsx NAxu0NfzrUao/JC9ovsU7au6BVgsswnRuM6QJWPdZ2M2wEdurTD6mCO5kzBhxuca Bfa+TsHLUj7OCzG8jtY45VpSdQkKIMm+EWnmpfGWgpishgjKYtnmX0UxBjVaPO0B NH6Iymhflgx3nkVmwSrRmDIV/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAANmKx dcK+reGIU+4dji91g7/oMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvvicNwM0D2NLzT5JxANtWnD2rXdaLrNbp4lQFxeZ9IGwKhBA42oGo tJbJ/YiKNN1adWEqw2T++dERsJk0mQTtf8A5k+dsQR+Gihwi1azoTtF9tYvBUrmJ HBN/SaV7oLBoZVWyut6kat5pTlcAlAYFr7ejofAnhaHuMXxiJzgId4zL1MFUu2QG a+MKxPtlwNQISzNQi7HUP4S/pllYdX0XY4mkE3K4ydQigSMA7abRZSG35J8QH1y5 05jpkhH9OB6oAvywYkboUYu8H2W7vb28CCNGO/5MZ2VNn9jSIt28CN8m6iNhNc/A 2HrtkT3x9UkwUUtQUaQNnEd6BOa9Pckn -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:50 2025 by rpki-client