$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: 0fybA17VFtQctP+dygyqG03r1SqQdwDUSNkiGJulrOk= Subject key identifier: A2:18:D1:32:93:7B:FF:52:1D:3B:3A:09:7A:ED:F3:B3:08:B5:DC:AD Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 0142 Signing time: Wed 05 Nov 2025 04:31:13 +0000 Manifest this update: Wed 05 Nov 2025 04:31:13 +0000 Manifest next update: Wed 12 Nov 2025 04:31:13 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: X8pzmpzOQcWboEJTHZ3oGUIF4sbrw0hf4bRIi7+Ny1c=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Nov 5 04:31:13 2025 GMT Not After : Nov 12 04:31:13 2025 GMT Subject: CN=690ad311-f38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:1a:ae:ef:89:ad:04:19:3c:68:c5:7b:5e: 81:d9:19:78:74:fa:49:1d:06:95:6f:bf:d7:d6:28: 8d:68:18:ca:37:b6:eb:6d:5f:59:73:90:28:d8:42: a8:de:0e:16:a4:3f:86:9c:85:86:54:db:48:8a:84: 5f:b1:9b:c4:c2:a7:58:cc:d5:1f:33:4f:44:05:c6: 63:ae:18:75:a2:37:34:4c:d2:90:64:13:da:81:87: 70:59:d3:13:cb:fc:a5:a2:3e:55:c0:8c:ff:69:19: 08:77:b4:6f:83:f8:e9:6f:14:a4:0a:15:47:20:3b: dc:f4:29:16:db:bd:6e:1e:eb:95:b0:58:4b:29:ce: 99:2f:96:f9:83:f6:ce:96:1b:37:69:68:b1:55:ec: c8:62:3f:42:82:4b:5d:3a:b8:95:24:d3:36:29:57: 31:9c:78:0f:d7:a7:b5:6c:38:4a:68:b9:34:af:70: 68:bd:a8:60:f0:1b:d6:2a:fb:1d:bc:92:fd:c2:63: 3e:5e:79:8b:22:92:b3:24:c5:38:6c:32:d2:89:7e: 9c:8e:5d:24:a8:4f:99:30:0c:b1:d4:5b:fd:38:f8: 56:5d:b6:93:6c:94:d8:3b:19:bc:77:7e:a7:fa:16: db:72:8b:10:5a:a7:e7:b5:28:25:62:1b:e0:67:9b: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:D1:32:93:7B:FF:52:1D:3B:3A:09:7A:ED:F3:B3:08:B5:DC:AD X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:69:df:bf:51:fd:e5:22:8b:5d:36:95:12:1a:0c:7c:14:b2: 9f:b8:87:34:9e:76:e8:25:c7:01:74:a5:77:e9:17:06:e3:1a: d2:f3:66:a8:ec:77:ca:04:d7:36:cd:85:76:db:70:41:b3:71: 7a:f8:1d:75:fa:f6:a0:dc:0e:27:e1:95:c2:3b:91:e5:d5:ef: db:ef:4a:e1:06:38:de:ed:a8:e1:5d:1c:17:d1:29:1c:17:d7: 91:ad:28:ff:8e:9a:6b:2d:32:3c:f5:65:3b:1a:28:0a:81:c0: 98:30:99:96:39:c4:b8:92:b6:d4:3c:6c:16:43:53:9a:81:13: 18:a8:88:ab:d0:e8:b2:1e:58:fd:b8:31:3d:8b:f1:a7:23:33: bc:6f:53:a2:98:61:b4:ef:3e:43:14:18:f2:d3:8a:d4:ca:6b: 8e:97:21:b2:c7:86:da:9d:18:12:4d:01:8e:88:63:bf:5f:eb: ad:29:35:46:17:16:2b:14:3e:71:a4:74:ec:4d:e3:fb:92:09: 74:a9:dc:5d:3b:f7:df:d0:8b:f9:3f:b3:43:ba:17:93:53:bf: ff:d4:b9:f3:84:78:0a:4b:1a:fa:f7:d2:01:cc:bb:e7:19:d9: 59:d3:af:96:3e:13:24:ec:d6:e7:48:5a:78:bc:a2:d2:21:f1: 88:bb:0d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUxMTA1MDQzMTEzWhcNMjUxMTEyMDQzMTEzWjAYMRYwFAYD VQQDEw02OTBhZDMxMS1mMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAEaru+JrQQZPGjFe16B2Rl4dPpJHQaVb7/X1iiNaBjKN7brbV9Zc5Ao2EKo 3g4WpD+GnIWGVNtIioRfsZvEwqdYzNUfM09EBcZjrhh1ojc0TNKQZBPagYdwWdMT y/yloj5VwIz/aRkId7Rvg/jpbxSkChVHIDvc9CkW271uHuuVsFhLKc6ZL5b5g/bO lhs3aWixVezIYj9CgktdOriVJNM2KVcxnHgP16e1bDhKaLk0r3Bovahg8BvWKvsd vJL9wmM+XnmLIpKzJMU4bDLSiX6cjl0kqE+ZMAyx1Fv9OPhWXbaTbJTYOxm8d36n +hbbcosQWqfntSglYhvgZ5vFhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIY0TKT e/9SHTs6CXrt87MItdytMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRad+/Uf3lIotdNpUSGgx8FLKfuIc0nnboJccBdKV36RcG4xrS82ao 7HfKBNc2zYV223BBs3F6+B11+vag3A4n4ZXCO5Hl1e/b70rhBjje7ajhXRwX0Skc F9eRrSj/jpprLTI89WU7GigKgcCYMJmWOcS4krbUPGwWQ1OagRMYqIir0OiyHlj9 uDE9i/GnIzO8b1OimGG07z5DFBjy04rUymuOlyGyx4banRgSTQGOiGO/X+utKTVG FxYrFD5xpHTsTeP7kgl0qdxdO/ff0Iv5P7NDuheTU7//1LnzhHgKSxr699IBzLvn GdlZ06+WPhMk7NbnSFp4vKLSIfGIuw3F -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:33 2025 by rpki-client