$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: EqVCeMa7U68JcvUkmyxzIdYUm1vWZ9mBCcAgdDg3ISo= Subject key identifier: C9:75:E5:86:BE:32:94:00:3C:D2:A3:7B:D4:4A:83:16:82:9A:E9:2D Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 017B Signing time: Thu 23 Oct 2025 05:57:30 +0000 Manifest this update: Thu 23 Oct 2025 05:57:29 +0000 Manifest next update: Thu 30 Oct 2025 05:57:29 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: qmCgvqDE8iKQ9H4A3zxguhX4m8Ov7BWjQHVANvV0+WE=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Oct 23 05:57:29 2025 GMT Not After : Oct 30 05:57:29 2025 GMT Subject: CN=68f9c3ca-e1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:34:d3:2d:6f:34:92:f6:9a:eb:c1:cf:a4: 8d:4a:9e:da:f3:78:a0:a3:bb:97:9c:4c:32:50:41: 54:70:47:bb:3d:26:5a:e3:ad:4e:9d:01:ce:2c:4f: fb:15:4f:83:72:d3:65:c9:fa:d0:6f:42:8c:35:a3: 48:49:38:ea:63:c0:12:d0:14:33:c3:b2:47:43:9f: 3c:e8:fe:63:f8:05:ae:c2:6e:7d:cd:b1:d4:00:02: 8a:72:27:b7:ed:a2:23:1b:b6:56:c9:36:a4:83:c7: c2:0b:34:f4:80:bb:04:89:52:07:c7:c2:29:37:04: 67:63:c2:0d:1e:10:53:7f:05:8e:e8:d8:86:5b:ba: 95:46:ed:5c:69:7e:61:73:ff:b2:4d:6f:43:1b:53: e7:20:fa:74:9e:f5:fe:21:50:76:93:95:75:70:6b: 2e:21:7a:1d:d8:a5:59:f9:37:20:95:51:59:82:c1: 99:f1:47:d5:2a:a0:6f:ec:8e:03:4c:84:67:e3:81: 06:cc:df:ec:7f:c6:20:bf:ab:58:d1:cb:6c:b6:0f: 6d:1f:71:79:7b:1c:49:b2:5a:dc:66:a9:53:75:8d: 73:c3:b6:ba:f5:99:d6:82:e9:c2:68:c0:ad:0f:eb: ae:9e:c0:bc:d7:93:d3:5a:42:02:d3:78:86:7e:8b: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:E5:86:BE:32:94:00:3C:D2:A3:7B:D4:4A:83:16:82:9A:E9:2D X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ba:71:7c:a2:e9:5c:ab:de:fe:99:ff:b3:cd:d1:d4:5c:40: 4f:9c:28:4e:c6:07:1c:d9:71:69:12:d7:f5:79:05:9f:fb:bc: 84:1c:b0:12:48:29:f6:23:37:e1:27:45:a1:8c:c5:bf:64:53: a3:1f:fd:8f:4d:96:a6:12:73:5e:8f:8c:33:23:d0:e5:e7:d2: c5:6c:d1:f7:d1:de:f2:b2:e9:16:23:79:90:d9:91:b5:71:65: 2f:50:14:f8:9b:4e:f8:b2:f0:2a:b2:22:da:00:a4:0e:f0:6e: f8:87:54:07:c8:09:c0:7c:df:a7:75:a4:e6:74:1d:89:54:ff: 19:b2:c1:86:00:0c:91:a3:ea:5c:bb:cd:73:8b:0d:cc:c3:f1: 9c:19:ea:6d:8e:5d:d7:55:4c:62:94:d3:dd:bc:e4:6c:0c:87: c9:d8:33:f9:2c:31:bb:3a:30:1f:4d:08:7d:fd:b0:a5:1a:7e: 4e:3d:ec:e4:cc:32:80:37:e8:9c:4d:3f:db:0c:b0:a9:49:f6: 73:20:ca:41:b2:0b:f8:2c:15:20:4a:6b:f2:66:a9:6e:6b:3c: 94:b9:51:09:45:ae:2e:50:c6:8f:fb:6e:6d:c5:be:6b:f0:46: 9c:80:c5:f6:78:5d:4e:51:75:1a:57:54:2f:d6:53:00:a8:a9: be:17:0a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUxMDIzMDU1NzI5WhcNMjUxMDMwMDU1NzI5WjAYMRYwFAYD VQQDEw02OGY5YzNjYS1lMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+Y00y1vNJL2muvBz6SNSp7a83igo7uXnEwyUEFUcEe7PSZa461OnQHOLE/7 FU+DctNlyfrQb0KMNaNISTjqY8AS0BQzw7JHQ5886P5j+AWuwm59zbHUAAKKcie3 7aIjG7ZWyTakg8fCCzT0gLsEiVIHx8IpNwRnY8INHhBTfwWO6NiGW7qVRu1caX5h c/+yTW9DG1PnIPp0nvX+IVB2k5V1cGsuIXod2KVZ+TcglVFZgsGZ8UfVKqBv7I4D TIRn44EGzN/sf8Ygv6tY0ctstg9tH3F5exxJslrcZqlTdY1zw7a69ZnWgunCaMCt D+uunsC815PTWkIC03iGfovsiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl15Ya+ MpQAPNKje9RKgxaCmuktMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzunF8oulcq97+mf+zzdHUXEBPnChOxgcc2XFpEtf1eQWf+7yEHLAS SCn2IzfhJ0WhjMW/ZFOjH/2PTZamEnNej4wzI9Dl59LFbNH30d7ysukWI3mQ2ZG1 cWUvUBT4m074svAqsiLaAKQO8G74h1QHyAnAfN+ndaTmdB2JVP8ZssGGAAyRo+pc u81ziw3Mw/GcGeptjl3XVUxilNPdvORsDIfJ2DP5LDG7OjAfTQh9/bClGn5OPezk zDKAN+icTT/bDLCpSfZzIMpBsgv4LBUgSmvyZqluazyUuVEJRa4uUMaP+25txb5r 8EacgMX2eF1OUXUaV1Qv1lMAqKm+Fwrh -----END CERTIFICATE-----Generated at Fri Oct 24 20:33:06 2025 by rpki-client