$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: sbqYMQqrI372eHqH7qAXTlmmJk/pi1RdVd8r3CJwXIU= Subject key identifier: B3:EA:C9:A1:29:D4:EF:99:72:04:91:4B:F8:31:58:81:DF:FE:A8:FA Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0247 Signing time: Tue 04 Nov 2025 22:18:24 +0000 Manifest this update: Tue 04 Nov 2025 22:18:24 +0000 Manifest next update: Tue 11 Nov 2025 22:18:24 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: v3FDGwR2zj2Mtc7Afn5m0YqN/YW8mahqzKRWxQCxPr8=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Nov 4 22:18:24 2025 GMT Not After : Nov 11 22:18:24 2025 GMT Subject: CN=690a7bb0-751d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:df:a4:2e:a9:01:7d:5e:6e:e7:3b:82:81: 2d:c0:5a:3c:20:2a:24:15:94:33:8a:21:c7:fb:a9: 1f:b6:5d:83:a0:81:45:8d:dd:c0:a9:cc:cd:56:56: 82:04:ee:dc:a4:4c:8e:c5:f8:46:34:99:62:6a:9f: 33:8d:40:ed:75:09:ad:04:51:ab:78:80:27:3b:31: fc:21:36:30:b5:29:89:93:3b:cc:31:61:d7:10:69: d1:f6:96:a8:a0:7d:53:19:4b:b8:fa:b6:88:92:2f: 4e:2c:6f:c2:4e:ec:b8:84:19:d1:61:09:66:11:c9: 80:f2:77:f5:4b:c7:3a:3e:e6:89:95:af:54:11:65: 3c:26:5b:77:a5:53:c5:82:3d:c8:7b:f2:31:f3:11: 7c:ba:b0:9a:77:f4:fb:7f:eb:7c:5e:e5:da:fc:78: 50:1d:cb:98:32:3e:96:d7:04:98:fc:f5:22:5d:42: 2a:d7:3d:17:9c:c8:1b:77:3b:2d:62:b8:33:33:e7: 20:a1:c7:0f:91:bf:a6:83:3b:a3:4e:35:0b:6b:a3: 73:66:3e:b3:5c:ac:8d:bc:d7:71:89:76:46:c6:f7: d9:f9:4b:1f:51:3c:96:87:bf:5b:7a:8d:3c:3a:48: 91:82:5a:26:a3:62:23:6a:2d:07:3d:d5:2a:db:e8: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:C9:A1:29:D4:EF:99:72:04:91:4B:F8:31:58:81:DF:FE:A8:FA X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7f:5e:03:9f:16:81:11:ae:33:70:34:13:26:b0:2d:c1:60: c3:54:93:f3:3a:86:5d:c4:2f:b0:2e:82:47:a7:d1:9d:36:c4: d6:e2:fe:1e:e6:37:a6:34:8e:f2:fe:7a:95:8c:fb:8f:3e:25: 7c:78:a6:6a:51:22:fe:c8:5a:85:a5:81:f6:3d:d8:17:36:a2: 0e:5c:3a:18:41:aa:97:3d:3e:3d:47:f1:77:fb:67:52:c0:30: 86:07:1f:ad:bc:8b:af:cb:ae:8b:fd:28:45:e0:7e:ee:aa:65: 2b:cc:4e:0a:40:75:d4:18:72:fa:03:67:d6:cd:36:6f:04:b3: 46:97:1c:0f:20:8e:1a:bd:7a:0e:a0:1f:25:d9:cb:26:d2:ce: bc:c6:a5:4d:47:bc:19:82:79:be:3f:fb:b9:ab:67:47:27:34: 4f:cb:9a:8b:32:c4:42:10:6d:c5:6c:a6:a7:e2:60:30:86:cf: 71:03:ca:96:b6:6f:b1:27:28:19:99:d8:7a:e7:3d:93:72:ce: cd:2b:b6:fe:f3:33:66:86:bc:b9:83:69:3d:bd:af:c0:5a:70: 69:10:f0:ac:38:32:ac:01:9f:01:ac:46:b2:92:2e:27:aa:96: db:9f:ac:a6:ee:d4:b9:fb:21:b7:3f:ef:73:2a:52:e2:b0:0d: e0:2f:a3:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUxMTA0MjIxODI0WhcNMjUxMTExMjIxODI0WjAYMRYwFAYD VQQDEw02OTBhN2JiMC03NTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsrfpC6pAX1ebuc7goEtwFo8ICokFZQziiHH+6kftl2DoIFFjd3AqczNVlaC BO7cpEyOxfhGNJliap8zjUDtdQmtBFGreIAnOzH8ITYwtSmJkzvMMWHXEGnR9pao oH1TGUu4+raIki9OLG/CTuy4hBnRYQlmEcmA8nf1S8c6PuaJla9UEWU8Jlt3pVPF gj3Ie/Ix8xF8urCad/T7f+t8XuXa/HhQHcuYMj6W1wSY/PUiXUIq1z0XnMgbdzst YrgzM+cgoccPkb+mgzujTjULa6NzZj6zXKyNvNdxiXZGxvfZ+UsfUTyWh79beo08 OkiRglomo2Ijai0HPdUq2+jsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPqyaEp 1O+ZcgSRS/gxWIHf/qj6MB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKf14DnxaBEa4zcDQTJrAtwWDDVJPzOoZdxC+wLoJHp9GdNsTW4v4e 5jemNI7y/nqVjPuPPiV8eKZqUSL+yFqFpYH2PdgXNqIOXDoYQaqXPT49R/F3+2dS wDCGBx+tvIuvy66L/ShF4H7uqmUrzE4KQHXUGHL6A2fWzTZvBLNGlxwPII4avXoO oB8l2csm0s68xqVNR7wZgnm+P/u5q2dHJzRPy5qLMsRCEG3FbKan4mAwhs9xA8qW tm+xJygZmdh65z2Tcs7NK7b+8zNmhry5g2k9va/AWnBpEPCsODKsAZ8BrEayki4n qpbbn6ym7tS5+yG3P+9zKlLisA3gL6MP -----END CERTIFICATE-----Generated at Wed Nov 5 10:17:39 2025 by rpki-client