$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: IA+9dO0vIiVhWND3nxyYeO+MRn7W2r3jifZwzKMkVgs= Subject key identifier: 47:A3:51:C1:6B:64:9F:A6:69:C4:3F:FA:F2:C8:0E:97:0F:07:21:D5 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 077D Signing time: Sun 02 Nov 2025 21:47:58 +0000 Manifest this update: Sun 02 Nov 2025 21:47:57 +0000 Manifest next update: Sun 09 Nov 2025 21:47:57 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: ACab4FKSVVUC+kU+gpK5F1ZH4dtsx3QC5UMEjTu65DA=) 2: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) 3: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: N+wwXOK9gDgn7rK/IyLVoV5vGXUsHM3EL0gIoN4TwM4=) 4: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: kwV8hhlNLXw0fqo5GXhukzzyuE6LyZO1Y35yZzYd4Pk=) 5: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: xcv2mpFGfangjKYY2vbEm6RbSQ1lS7sMyZ3S+/1HCdM=) 6: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: kAk6kjL+iK4SBo72pkG0PU0h0fM1Y3JSaas9S8BeqPU=) 7: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: lXMyXIdfvbwQROqw/pE3PgGn2BRu07uMklJZGHe93PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Nov 2 21:47:57 2025 GMT Not After : Nov 9 21:47:57 2025 GMT Subject: CN=6907d18d-01dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:04:06:8b:7e:d4:3f:4f:51:57:bf:8e:8a: 03:07:40:c1:e1:a9:6e:b5:4a:db:a5:1f:b4:f1:74: 8f:23:63:e3:70:30:d5:b7:24:76:43:68:23:43:42: c1:70:77:9d:04:4a:a0:67:91:0e:2b:8c:b5:0d:3b: b0:12:e8:20:47:d9:25:83:1b:2f:a3:f4:d3:70:0b: 45:db:89:3c:2d:af:bc:d7:36:86:e9:58:e0:71:6a: e5:7c:83:c5:ab:e4:72:b0:be:67:da:db:b7:22:fd: c9:c2:6b:e5:42:97:0e:6e:53:a6:47:ed:3f:a2:69: c5:6e:72:d3:cf:4a:c2:9f:6c:08:28:73:49:ba:88: 1c:16:75:c2:60:d5:12:f9:06:dd:9c:7d:d5:f7:30: 6c:10:cd:fd:8a:ee:34:62:d0:20:9f:09:7e:7c:29: 13:c8:49:de:ea:9b:9c:90:16:7d:47:92:d6:91:d6: d2:5b:b3:eb:d8:dd:82:80:26:71:58:fc:d9:93:23: 92:0d:22:62:c0:d4:15:db:ad:a9:26:7b:5d:bf:06: 4b:9b:34:3c:5a:88:8c:3c:db:5f:67:8c:44:c5:04: a0:53:0e:31:b2:5a:62:78:1d:f1:b8:4a:d8:f9:e9: 62:94:f6:3d:47:27:b3:0b:8f:7d:05:84:91:e0:ef: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:51:C1:6B:64:9F:A6:69:C4:3F:FA:F2:C8:0E:97:0F:07:21:D5 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:ee:b9:2f:29:9c:80:f4:37:14:d5:29:82:10:93:8a:60:9b: e5:d2:37:0b:3d:5d:5f:1e:45:4b:7b:5d:33:be:5b:99:8b:87: 7d:57:93:01:83:a0:7a:ff:27:54:0b:7f:8d:e4:8d:69:90:c7: d2:4f:8f:fb:4f:af:4b:a7:4c:d2:fa:f2:d8:e0:a3:86:08:04: 1c:ca:f3:ac:e9:c3:99:09:50:80:bf:5d:49:2c:c5:92:c2:96: a8:0a:3d:af:82:ee:28:7f:b0:02:d4:c5:26:b3:6d:a4:6b:e4: 27:f6:40:a9:fb:ed:f9:4e:33:99:b2:da:be:de:17:7e:8c:50: d3:04:23:9f:40:87:a4:92:a4:8e:c2:ef:a7:64:4d:6c:68:57: a0:e5:94:02:52:d2:db:1b:8c:be:3b:47:5f:fe:4c:8f:a2:4c: 47:12:71:b0:e1:5a:29:e9:16:1f:d7:14:f8:1c:a2:27:53:3c: 79:02:ea:47:3b:e6:b1:61:d4:1e:64:50:2a:e6:4e:2e:ad:2c: 87:ee:2e:59:7d:5d:8b:17:6b:96:e0:87:96:ff:d4:9c:11:cd: 0a:a0:36:0b:d4:78:19:ac:d2:e9:6c:97:ea:80:ee:86:c0:23: c6:63:ed:dc:de:4e:9c:04:4e:4a:3f:eb:3f:d8:5f:8e:5c:5f: 44:f4:cd:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUxMTAyMjE0NzU3WhcNMjUxMTA5MjE0NzU3WjAYMRYwFAYD VQQDEw02OTA3ZDE4ZC0wMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi0EBot+1D9PUVe/jooDB0DB4alutUrbpR+08XSPI2PjcDDVtyR2Q2gjQ0LB cHedBEqgZ5EOK4y1DTuwEuggR9klgxsvo/TTcAtF24k8La+81zaG6VjgcWrlfIPF q+RysL5n2tu3Iv3JwmvlQpcOblOmR+0/omnFbnLTz0rCn2wIKHNJuogcFnXCYNUS +QbdnH3V9zBsEM39iu40YtAgnwl+fCkTyEne6puckBZ9R5LWkdbSW7Pr2N2CgCZx WPzZkyOSDSJiwNQV262pJntdvwZLmzQ8WoiMPNtfZ4xExQSgUw4xslpieB3xuErY +elilPY9RyezC499BYSR4O/HkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEejUcFr ZJ+macQ/+vLIDpcPByHVMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ7rkvKZyA9DcU1SmCEJOKYJvl0jcLPV1fHkVLe10zvluZi4d9V5MB g6B6/ydUC3+N5I1pkMfST4/7T69Lp0zS+vLY4KOGCAQcyvOs6cOZCVCAv11JLMWS wpaoCj2vgu4of7AC1MUms22ka+Qn9kCp++35TjOZstq+3hd+jFDTBCOfQIekkqSO wu+nZE1saFeg5ZQCUtLbG4y+O0df/kyPokxHEnGw4Vop6RYf1xT4HKInUzx5AupH O+axYdQeZFAq5k4urSyH7i5ZfV2LF2uW4IeW/9ScEc0KoDYL1HgZrNLpbJfqgO6G wCPGY+3c3k6cBE5KP+s/2F+OXF9E9M2s -----END CERTIFICATE-----Generated at Mon Nov 3 13:47:58 2025 by rpki-client