$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json) Hash identifier: tIAZBMaUCvn4iJkv/LzBhFwnkY6+wR4yUSX1KoV9KEY= Subject key identifier: CB:A2:23:7E:83:6E:58:CF:1B:EF:A2:41:5B:BC:C0:77:71:D7:6E:37 Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft Manifest number: 34 Signing time: Sat 25 Oct 2025 11:37:44 +0000 Manifest this update: Sat 25 Oct 2025 11:37:44 +0000 Manifest next update: Sat 01 Nov 2025 11:37:44 +0000 Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: SK7+FZVqlkFEYGLfwdewez+daV11mwBWQ0VcHuYlf3s=) 2: C9479880646611F0B371D156C4F9AE02.roa (hash: ebNb1cqmZBUz7WL9tCF2PExl+FU65/gDmGjSUW9LYDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Validity Not Before: Oct 25 11:37:44 2025 GMT Not After : Nov 1 11:37:44 2025 GMT Subject: CN=68fcb688-1860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:33:6c:97:f9:08:cf:a1:66:fb:f5:0a:5e: 26:62:9a:d7:e5:6f:79:d8:8b:88:8f:30:ad:57:67: dc:ef:1e:78:f0:bb:d6:73:2a:e5:e9:24:d5:ff:61: cb:65:f9:25:17:37:cb:a6:d5:dc:6f:2e:6c:cd:22: 62:11:b1:55:8d:b1:b5:2e:51:c1:35:cd:35:ac:58: 4e:c0:5c:77:4f:76:27:e7:50:50:d0:0c:75:68:0c: bf:05:9b:48:5e:24:b9:7c:c8:24:8a:23:cc:27:6d: e7:26:2e:00:d1:ed:1d:d3:fa:a4:b0:72:0a:eb:5d: ca:bc:63:a6:1c:d4:12:19:e1:1f:41:57:7d:7f:2c: f0:99:16:f5:74:8e:56:1a:46:5f:f6:1c:8d:a0:16: b1:e1:91:58:0c:83:67:d1:24:60:13:aa:57:9d:8b: 5d:97:ef:92:79:25:c1:ff:2d:e5:2c:78:03:2e:08: b3:f4:a7:75:9b:59:85:fb:1f:d9:c8:3c:c1:ea:9d: 75:41:78:94:32:1d:97:9b:a7:14:5c:df:0f:e2:46: e5:03:03:a0:22:76:53:91:6c:63:c2:3b:2a:43:6d: bb:7a:37:ff:89:3a:fb:5a:40:1f:f2:1a:ee:a5:9c: b8:2d:a4:77:fc:3a:5d:88:6f:64:a2:94:f1:b2:5b: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:23:7E:83:6E:58:CF:1B:EF:A2:41:5B:BC:C0:77:71:D7:6E:37 X509v3 Authority Key Identifier: keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:77:af:ee:ff:31:a4:f4:f5:4b:4a:93:37:0d:35:80:76:a4: 63:d8:ef:0a:65:91:7e:39:77:7b:37:e1:81:cb:6a:90:c5:f8: 16:e2:65:14:ea:72:53:60:d3:23:08:78:7a:a7:32:ef:cc:9b: af:d4:dd:f5:a9:91:81:6e:00:3a:12:75:0a:cc:74:35:96:e8: a8:d2:aa:e3:df:f1:a8:4f:f6:62:1c:8c:28:e0:08:4d:ef:a1: 64:9c:52:13:58:17:e5:06:80:c5:c6:0b:74:e9:36:eb:fb:30: ab:8b:c0:4c:20:e0:b1:b8:cb:44:8c:79:0b:c7:dd:07:e6:6e: c3:ac:fe:74:a9:af:f4:36:8f:65:d9:64:b7:be:82:a8:c1:6e: 06:fa:ec:d4:2a:bf:3d:ab:0e:2b:00:65:a8:85:61:a9:87:de: 70:e0:aa:cf:08:af:ea:1b:07:01:c2:5a:29:c9:30:cb:0d:bd: 57:d6:72:93:c4:a4:ae:4e:77:8e:22:4c:f3:29:b0:f1:47:63: 12:a3:4d:7f:39:c6:7a:11:5d:0a:df:e4:fc:8b:c3:ce:10:02: 41:b8:ec:f3:19:68:25:96:22:27:23:87:a6:78:1e:10:6c:fc: 36:07:4c:58:43:9a:bb:46:a7:0b:c0:0b:6c:b8:e5:06:20:10: 9e:9e:9c:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQTlGMEFDOTdCOUMxOEMzMkUyMTY5QzAxQTQ5ODZDN0E2 QzI1NUZGRTAeFw0yNTEwMjUxMTM3NDRaFw0yNTExMDExMTM3NDRaMBgxFjAUBgNV BAMTDTY4ZmNiNjg4LTE4NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFRTNsl/kIz6Fm+/UKXiZimtflb3nYi4iPMK1XZ9zvHnjwu9ZzKuXpJNX/Yctl +SUXN8um1dxvLmzNImIRsVWNsbUuUcE1zTWsWE7AXHdPdifnUFDQDHVoDL8Fm0he JLl8yCSKI8wnbecmLgDR7R3T+qSwcgrrXcq8Y6Yc1BIZ4R9BV31/LPCZFvV0jlYa Rl/2HI2gFrHhkVgMg2fRJGATqledi12X75J5JcH/LeUseAMuCLP0p3WbWYX7H9nI PMHqnXVBeJQyHZebpxRc3w/iRuUDA6AidlORbGPCOypDbbt6N/+JOvtaQB/yGu6l nLgtpHf8Ol2Ib2SilPGyW+DhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy6IjfoNu WM8b76JBW7zAd3HXbjcwHwYDVR0jBBgwFoAUqfCsl7nBjDLiFpwBpJhsemwlX/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzU2MzU2Q0Q0NjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWZDc2w3bkJqRExpRnB3QnBKaHNlbXdsWF80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzU2MzU2Q0Q0NjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRM aUZwd0JwSmhzZW13bFhfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADB3r+7/MaT09UtKkzcNNYB2pGPY7wplkX45d3s34YHLapDF+BbiZRTq clNg0yMIeHqnMu/Mm6/U3fWpkYFuADoSdQrMdDWW6KjSquPf8ahP9mIcjCjgCE3v oWScUhNYF+UGgMXGC3TpNuv7MKuLwEwg4LG4y0SMeQvH3QfmbsOs/nSpr/Q2j2XZ ZLe+gqjBbgb67NQqvz2rDisAZaiFYamH3nDgqs8Ir+obBwHCWinJMMsNvVfWcpPE pK5Od44iTPMpsPFHYxKjTX85xnoRXQrf5PyLw84QAkG47PMZaCWWIicjh6Z4HhBs /DYHTFhDmrtGpwvAC2y45QYgEJ6enAo= -----END CERTIFICATE-----Generated at Sat Oct 25 17:38:14 2025 by rpki-client