$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft File: qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json) Hash identifier: ZF9RndoS8GaVOQeK3wi+G1X+uw7MiIXxLRK8k8uqcNY= Subject key identifier: 52:71:3C:30:F9:A7:F6:1B:4C:6B:39:9E:91:1B:40:73:EF:C0:9F:D0 Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft Manifest number: 013D Signing time: Mon 03 Nov 2025 04:28:04 +0000 Manifest this update: Mon 03 Nov 2025 04:28:03 +0000 Manifest next update: Mon 10 Nov 2025 04:28:03 +0000 Files and hashes: 1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: c9OzcICPpeKxtXMF0C0OPN3NXbX5dEL+klFVPPqfmYQ=) 2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Nov 3 04:28:03 2025 GMT Not After : Nov 10 04:28:03 2025 GMT Subject: CN=69082f53-84f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:a4:6f:df:9e:25:05:c5:9a:0e:c3:4a:41: 93:c1:30:d1:bd:1a:17:47:c1:3e:55:a1:c1:97:61: ed:68:0a:65:d4:af:ba:2d:cd:68:e3:a5:b8:fb:31: 2a:d6:d3:38:41:b4:d9:c8:bf:4e:fa:35:f1:e8:c9: 7e:d5:38:b1:12:fc:ed:ea:5d:ef:57:9a:75:85:fb: 1e:fb:c0:0a:84:30:1e:d9:f2:41:48:04:df:25:c8: 58:9b:dc:34:28:ed:29:a7:5a:dd:df:b9:f6:9e:1a: 8e:c0:6e:65:e1:56:8b:e4:09:f5:33:e9:f7:89:c6: 97:f8:45:c1:44:86:e2:65:ce:05:5c:4f:1c:ee:d8: e2:f6:b8:91:ec:50:10:86:a6:4e:10:04:56:51:27: 4b:2f:14:6d:98:b1:1c:11:c3:3d:df:18:de:7e:b5: b3:91:b0:ba:d8:14:11:c3:c9:24:69:f7:fa:fc:2e: 03:c5:75:9b:03:3d:02:c2:ce:99:a2:29:19:98:a8: 26:06:df:56:5a:fa:7b:ee:38:14:c4:d1:aa:eb:f9: ed:b8:b4:5f:de:7f:27:29:62:ac:a6:6a:ca:ae:b7: d3:e7:47:dd:e5:06:e0:3d:6e:6b:f0:1a:27:5f:a8: 03:b9:df:f2:54:bd:ee:de:4a:23:8b:2f:91:8a:05: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:3C:30:F9:A7:F6:1B:4C:6B:39:9E:91:1B:40:73:EF:C0:9F:D0 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e8:c9:c2:f9:18:3e:ee:96:4b:00:4e:26:1a:70:5a:a3:d3: 7d:78:f4:8e:0e:cc:e8:78:84:89:bb:8c:ac:26:72:66:09:1b: 5d:53:c2:fb:27:06:e3:08:63:98:a5:90:b5:b2:d5:90:31:31: b0:2f:66:ea:23:2b:b8:13:14:62:25:12:ba:5e:61:87:87:76: 32:56:2f:cd:2c:cf:52:a3:33:a4:62:47:36:44:30:96:47:ab: dd:32:62:e7:72:9f:c0:c3:2e:11:5a:f8:51:5c:ba:e1:25:b8: b9:29:85:cb:dd:59:54:13:fa:9f:26:8b:62:09:54:f1:0b:8f: f1:f3:55:7c:69:be:64:5c:69:04:29:22:c0:05:6d:83:b8:8d: b2:3a:10:eb:d8:62:c0:ce:15:4a:fa:75:67:7b:13:e4:5a:34: bf:a4:7f:b0:2c:80:1a:d0:9f:47:b4:5e:d9:11:24:6b:f6:10: 7e:d7:86:20:17:00:45:be:9f:05:51:c6:5b:b7:9b:86:59:72: 71:ac:7b:31:70:e3:de:f9:54:b2:09:f3:c8:88:70:a3:d1:5b: 4e:b2:9e:6f:8e:3b:32:e7:64:86:9a:6d:f0:2d:38:d0:d9:e7: 56:12:2d:da:ce:b6:85:e3:97:67:90:e6:ce:9d:12:ee:5e:49: a6:66:c0:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2 NjE1RjI2RjEwHhcNMjUxMTAzMDQyODAzWhcNMjUxMTEwMDQyODAzWjAYMRYwFAYD VQQDEw02OTA4MmY1My04NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Sikb9+eJQXFmg7DSkGTwTDRvRoXR8E+VaHBl2HtaApl1K+6Lc1o46W4+zEq 1tM4QbTZyL9O+jXx6Ml+1TixEvzt6l3vV5p1hfse+8AKhDAe2fJBSATfJchYm9w0 KO0pp1rd37n2nhqOwG5l4VaL5An1M+n3icaX+EXBRIbiZc4FXE8c7tji9riR7FAQ hqZOEARWUSdLLxRtmLEcEcM93xjefrWzkbC62BQRw8kkaff6/C4DxXWbAz0Cws6Z oikZmKgmBt9WWvp77jgUxNGq6/ntuLRf3n8nKWKspmrKrrfT50fd5QbgPW5r8Bon X6gDud/yVL3u3kojiy+RigVU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJxPDD5 p/YbTGs5npEbQHPvwJ/QMB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3 MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQx ajhaWm1HMndWRXhtRmZKdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg6MnC+Rg+7pZLAE4mGnBao9N9ePSODszoeISJu4ysJnJmCRtdU8L7 JwbjCGOYpZC1stWQMTGwL2bqIyu4ExRiJRK6XmGHh3YyVi/NLM9SozOkYkc2RDCW R6vdMmLncp/Awy4RWvhRXLrhJbi5KYXL3VlUE/qfJotiCVTxC4/x81V8ab5kXGkE KSLABW2DuI2yOhDr2GLAzhVK+nVnexPkWjS/pH+wLIAa0J9HtF7ZESRr9hB+14Yg FwBFvp8FUcZbt5uGWXJxrHsxcOPe+VSyCfPIiHCj0VtOsp5vjjsy52SGmm3wLTjQ 2edWEi3azraF45dnkObOnRLuXkmmZsDy -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:51 2025 by rpki-client