$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: vQS4+yo1iyCLZAKQKdP9Jqk+/LdVd5IDjrux97PZXB4= Subject key identifier: E0:2C:8C:65:A1:94:8B:7E:FE:0E:7C:96:0B:74:D5:D7:E2:0B:A0:77 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 01C7 Signing time: Wed 05 Nov 2025 03:04:39 +0000 Manifest this update: Wed 05 Nov 2025 03:04:38 +0000 Manifest next update: Wed 12 Nov 2025 03:04:38 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: PF1dzwLj3Z27XttQi6Y716HZPLPjV4Aalzr974yU6xw=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Nov 5 03:04:38 2025 GMT Not After : Nov 12 03:04:38 2025 GMT Subject: CN=690abec6-b2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:47:0e:3f:8e:8e:0c:1e:f9:03:1d:88:16: 54:fd:07:a5:fe:2d:2c:c3:e0:c0:a0:6f:11:fa:ff: b7:ed:3e:17:8d:98:71:b7:1b:35:cb:54:a1:8b:de: 62:38:f1:24:83:57:4f:51:a1:51:99:b4:be:18:c8: e3:d7:02:33:41:6b:b8:0f:18:53:58:b9:73:77:5c: 7d:6d:36:ce:e8:87:eb:d3:94:e6:f0:5e:60:11:24: a7:15:31:ae:6d:0c:24:b7:be:37:b4:a6:8c:88:03: dc:7a:ad:54:cf:72:af:06:f7:c3:26:9f:21:41:6f: c9:f0:34:93:84:aa:0f:f1:8c:a7:84:03:04:f1:9a: e3:8d:9f:b1:a3:e4:d8:fe:44:1b:66:e7:e3:ea:08: 30:a3:08:f0:de:27:09:e9:7f:43:7b:cf:a9:49:9c: 6a:90:c7:09:e4:9b:44:b9:c1:7a:9b:e0:ef:61:73: b9:2c:4d:54:af:9f:8b:07:6d:3b:1e:c9:cb:90:a6: 73:4a:0c:2d:cc:66:eb:f2:77:f6:27:2d:14:65:fb: 2c:10:6f:a3:2d:e2:30:30:9f:46:44:82:4e:99:32: c0:a4:86:cb:e1:ec:62:28:37:d2:e3:f2:50:d8:e5: d0:9d:49:b4:07:b1:8a:5f:9c:43:9b:b9:13:dd:6c: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:8C:65:A1:94:8B:7E:FE:0E:7C:96:0B:74:D5:D7:E2:0B:A0:77 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fc:d2:ac:7f:50:00:30:e3:66:65:9b:33:de:64:68:6e:60: 7c:a6:17:0c:64:e9:f9:c2:e2:0e:ee:c1:8d:75:88:fc:85:47: 54:d9:d2:81:32:16:2d:14:b0:60:b8:64:b0:fe:17:1b:04:85: 28:d1:e1:1e:61:37:7c:ea:ec:e5:b0:c4:cb:25:a8:99:43:c6: 9e:f0:99:7e:38:6f:ec:34:97:b6:b2:0f:40:0d:34:d7:d2:a5: ab:0e:6f:f3:85:59:79:39:cd:fa:3e:ca:c3:c7:5e:19:15:cf: 4a:0c:02:ae:eb:06:0e:cf:c1:88:05:a2:df:1b:95:98:97:97: 89:c8:01:80:81:26:d8:8e:12:a5:12:da:0a:1b:df:36:1e:18: 34:ca:1e:e7:3a:52:6a:06:9f:78:f4:34:eb:01:2a:bb:cc:14: 46:dc:e8:b1:2a:4a:26:0a:ca:3a:f1:00:38:26:9b:da:fd:bf: 67:08:a1:50:9c:f3:7e:45:4d:fe:42:29:43:34:3e:17:f1:f8: c0:ee:fc:24:ce:8c:41:ea:d1:e7:da:82:ef:96:72:1b:d9:09: cb:db:63:be:47:e4:13:94:9b:fc:c7:7c:ee:25:9e:8a:aa:dd: 71:1b:3d:c1:4e:6c:16:76:e0:2f:96:2e:1d:58:2e:bf:90:10: b3:f4:48:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUxMTA1MDMwNDM4WhcNMjUxMTEyMDMwNDM4WjAYMRYwFAYD VQQDEw02OTBhYmVjNi1iMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mVHDj+Ojgwe+QMdiBZU/Qel/i0sw+DAoG8R+v+37T4XjZhxtxs1y1Shi95i OPEkg1dPUaFRmbS+GMjj1wIzQWu4DxhTWLlzd1x9bTbO6Ifr05Tm8F5gESSnFTGu bQwkt743tKaMiAPceq1Uz3KvBvfDJp8hQW/J8DSThKoP8YynhAME8ZrjjZ+xo+TY /kQbZufj6ggwowjw3icJ6X9De8+pSZxqkMcJ5JtEucF6m+DvYXO5LE1Ur5+LB207 HsnLkKZzSgwtzGbr8nf2Jy0UZfssEG+jLeIwMJ9GRIJOmTLApIbL4exiKDfS4/JQ 2OXQnUm0B7GKX5xDm7kT3WxDHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAsjGWh lIt+/g58lgt01dfiC6B3MB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt/NKsf1AAMONmZZsz3mRobmB8phcMZOn5wuIO7sGNdYj8hUdU2dKB MhYtFLBguGSw/hcbBIUo0eEeYTd86uzlsMTLJaiZQ8ae8Jl+OG/sNJe2sg9ADTTX 0qWrDm/zhVl5Oc36PsrDx14ZFc9KDAKu6wYOz8GIBaLfG5WYl5eJyAGAgSbYjhKl EtoKG982Hhg0yh7nOlJqBp949DTrASq7zBRG3OixKkomCso68QA4Jpva/b9nCKFQ nPN+RU3+QilDND4X8fjA7vwkzoxB6tHn2oLvlnIb2QnL22O+R+QTlJv8x3zuJZ6K qt1xGz3BTmwWduAvli4dWC6/kBCz9Eh+ -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:30 2025 by rpki-client