$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json) Hash identifier: XcOG2abcxJsDEWluyr4N1F98pZn/EnbKkJuLlovelUc= Subject key identifier: 73:89:C5:7F:47:DF:EE:7A:BE:C2:A0:B4:89:69:97:0B:D3:0D:48:F2 Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft Manifest number: 22 Signing time: Mon 03 Nov 2025 07:44:25 +0000 Manifest this update: Mon 03 Nov 2025 07:44:25 +0000 Manifest next update: Mon 10 Nov 2025 07:44:25 +0000 Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: hrGWACbVjXytabUDUuDlx3gGWAPwRR2tOJWEPt72Rlk=) 2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: Crg6eEA+ImfPHspcxe55nFPiMJ47NKQMZB7ytChE440=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Validity Not Before: Nov 3 07:44:25 2025 GMT Not After : Nov 10 07:44:25 2025 GMT Subject: CN=69085d59-1464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:4f:15:75:07:34:91:67:3f:c3:49:9a:cb: 40:1d:f6:d6:95:b1:08:b1:b2:50:fd:f3:70:bb:d3: 31:6f:e3:59:c4:f3:c8:63:a4:14:bc:ed:76:1d:aa: 03:2a:b3:61:5b:dc:1d:0a:de:69:5a:ae:41:e6:de: 98:49:0e:dd:60:c3:13:24:67:7d:2f:05:e5:52:68: b4:12:b6:b0:0b:3f:0d:17:b6:7d:36:b1:b4:5c:c8: 80:f2:97:8d:e4:c6:7c:40:6a:67:7e:e1:79:9f:51: 75:4a:9b:b8:93:9c:42:5e:b4:c7:50:20:5e:ad:8c: f3:f7:7f:8a:1e:48:7c:a9:af:e1:4e:03:f9:18:f0: 27:67:ed:a4:77:c7:37:45:88:76:b6:89:92:b2:38: 59:8d:50:40:3a:81:89:c4:4b:16:3a:c2:a7:73:02: af:2c:87:a2:85:67:0c:51:eb:9c:77:90:ee:3f:42: 4c:a7:2b:9d:bf:81:8d:01:7e:e6:ee:9e:4a:45:ae: 51:86:4d:28:16:c2:60:d6:dd:56:ff:09:5d:0d:9d: 45:4a:ea:f7:d6:7a:cb:ad:3e:0d:18:f1:3b:c8:5f: 3b:85:0f:a6:2d:ed:88:78:09:f1:bd:59:5a:dc:fe: ab:4b:5d:30:b5:db:93:e0:5f:94:8c:c0:e9:4b:5e: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:89:C5:7F:47:DF:EE:7A:BE:C2:A0:B4:89:69:97:0B:D3:0D:48:F2 X509v3 Authority Key Identifier: keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:45:92:31:72:50:33:e7:fa:77:c0:ad:ce:99:d6:50:fd:5d: 7e:78:82:37:2f:a5:c4:63:3f:91:f8:6c:ff:25:6c:b4:2c:97: ac:3e:aa:dd:67:16:ee:fd:60:05:7f:48:59:30:66:4a:64:6f: 7b:76:de:68:16:33:08:70:61:26:6c:86:d3:e4:4a:b7:0f:64: 07:36:aa:21:86:94:3d:6f:77:96:da:ce:ce:de:77:0b:67:6c: dc:ad:48:ae:b6:47:22:97:55:03:53:a4:a2:c9:6e:e4:91:d7: b1:de:56:56:ac:71:fc:63:c3:fa:30:81:c9:8c:4d:a9:e3:8c: ea:1b:fa:43:7f:71:d0:3d:b5:7f:82:c8:40:72:a8:02:e9:13: 1d:8c:38:c9:85:60:75:4a:36:dd:58:f0:f6:60:d3:c2:b3:ac: 62:f5:86:60:83:89:d3:ad:9a:b7:f7:be:28:2a:08:43:b9:dd: 2f:e4:64:ed:73:ee:50:4c:07:ad:e7:92:f3:dc:8d:cb:59:ae: 1f:ce:b5:0e:67:62:6d:52:69:b6:ed:04:22:56:38:f9:61:c6: c4:a5:d7:17:fe:c9:4a:31:41:c0:71:40:0b:1d:76:f1:63:09: df:dd:b9:79:26:ea:64:40:39:c9:a5:f2:d9:ec:37:00:00:ec: b4:99:1c:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTVCMzExMC8GA1UEBRMoNDNCQzAzQTk5NzMxNzlFN0VFMjM0NkIyOEU3NERFMTEz RjYzMzU2QzAeFw0yNTExMDMwNzQ0MjVaFw0yNTExMTAwNzQ0MjVaMBgxFjAUBgNV BAMTDTY5MDg1ZDU5LTE0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaWE8VdQc0kWc/w0may0Ad9taVsQixslD983C70zFv41nE88hjpBS87XYdqgMq s2Fb3B0K3mlarkHm3phJDt1gwxMkZ30vBeVSaLQStrALPw0Xtn02sbRcyIDyl43k xnxAamd+4XmfUXVKm7iTnEJetMdQIF6tjPP3f4oeSHypr+FOA/kY8Cdn7aR3xzdF iHa2iZKyOFmNUEA6gYnESxY6wqdzAq8sh6KFZwxR65x3kO4/QkynK52/gY0Bfubu nkpFrlGGTSgWwmDW3Vb/CV0NnUVK6vfWesutPg0Y8TvIXzuFD6Yt7Yh4CfG9WVrc /qtLXTC125PgX5SMwOlLXrhPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc4nFf0ff 7nq+wqC0iWmXC9MNSPIwHwYDVR0jBBgwFoAUQ7wDqZcxeefuI0ayjnTeET9jNWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUIzL0Y3QjI0ODhFODRB RDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVmdUkwYXlqblRlRVQ5ak5X dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTd3RHFaY3hlZWZ1STBheWpuVGVFVDlqTld3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx NUIzL0Y3QjI0ODhFODRBRDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVm dUkwYXlqblRlRVQ5ak5Xdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVFkjFyUDPn+nfArc6Z1lD9XX54gjcvpcRjP5H4bP8lbLQsl6w+qt1n Fu79YAV/SFkwZkpkb3t23mgWMwhwYSZshtPkSrcPZAc2qiGGlD1vd5bazs7edwtn bNytSK62RyKXVQNTpKLJbuSR17HeVlascfxjw/owgcmMTanjjOob+kN/cdA9tX+C yEByqALpEx2MOMmFYHVKNt1Y8PZg08KzrGL1hmCDidOtmrf3vigqCEO53S/kZO1z 7lBMB63nkvPcjctZrh/OtQ5nYm1SabbtBCJWOPlhxsSl1xf+yUoxQcBxQAsddvFj Cd/duXkm6mRAOcml8tnsNwAA7LSZHPA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:23 2025 by rpki-client