$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: 6FXyi3q1lUE9GoSG7Hgk34YWc5NH/pWDaH67LMDwBWU= Subject key identifier: 8D:FB:19:57:87:D7:39:A2:09:4C:16:DA:CE:CC:1B:67:B4:40:C2:3A Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 047A Signing time: Mon 03 Nov 2025 00:07:55 +0000 Manifest this update: Mon 03 Nov 2025 00:07:54 +0000 Manifest next update: Mon 10 Nov 2025 00:07:54 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: K8qv48Z+Gp20W8QjgWJs9/fgGtS/3KXMy62yIyiQ4qM=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Nov 3 00:07:54 2025 GMT Not After : Nov 10 00:07:54 2025 GMT Subject: CN=6907f25b-40d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:8c:49:a0:fe:38:08:8d:e0:ec:43:db:60: a4:04:38:ea:1a:66:e7:63:63:7d:ba:62:df:d1:ad: 3a:13:cc:76:07:c8:3c:d4:6f:09:27:60:ff:d2:85: 7c:28:bd:8e:43:6d:57:a4:8f:60:ae:0f:37:83:84: 40:36:02:e2:dd:b5:d8:1b:1e:e6:34:52:35:4d:0e: c6:55:65:f2:29:4f:fe:29:8c:62:4f:94:9a:21:be: 36:35:30:e1:07:07:75:16:dd:a6:be:13:f2:68:a8: 9c:66:67:dd:5f:d7:ee:8a:a3:13:0a:d1:f3:66:d5: 02:ff:bc:a5:f1:e4:b6:66:5d:2c:81:14:3d:d5:ef: ca:c8:00:c5:28:48:57:4e:bf:73:de:83:5b:b1:10: 59:04:ef:f5:10:a4:82:05:75:ac:d6:d5:23:e3:4d: fa:c2:95:4c:e7:2d:2c:dc:26:67:a5:15:d7:d9:3c: 56:b5:19:f8:63:37:2a:e6:2c:ce:10:05:f2:3a:d0: 14:df:5c:64:e7:a2:e3:0c:3e:10:45:8c:3f:d4:e4: 88:23:ce:be:7f:c4:3e:0c:27:39:33:b9:40:e7:8f: b7:a1:76:47:94:f8:7d:11:0e:d1:28:b6:b1:85:34: 51:7e:15:9f:f2:3e:c4:09:6b:15:68:0d:cb:88:97: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FB:19:57:87:D7:39:A2:09:4C:16:DA:CE:CC:1B:67:B4:40:C2:3A X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a0:ad:81:b7:b7:7b:b5:eb:d3:2e:de:64:74:a3:98:a1:53: 41:b6:a6:98:2f:ee:e2:9e:fd:b5:ef:0b:96:6f:95:b2:92:c8: 84:58:80:3d:c2:3e:13:82:b0:2a:ca:5a:81:51:d6:fc:67:8a: 39:18:83:71:24:58:9c:12:32:8f:9b:2f:30:8f:55:28:2d:30: 04:96:4c:4b:60:d7:3c:f0:6d:6f:a7:34:a1:98:03:58:22:c9: 26:4f:89:a3:03:30:1c:8c:dc:83:a6:75:d9:bf:4f:8a:ea:08: 2d:67:8c:2c:7e:a3:6d:af:85:94:ef:01:e1:b3:3a:bb:d2:73: 91:f9:5c:e7:26:58:cc:ca:98:a2:6a:b0:5f:41:a8:b4:e7:38: 92:0c:0a:5a:a3:39:a3:b6:0a:12:0e:c9:e5:18:8d:ee:cb:a8: 4f:bd:f3:bd:d2:46:b5:15:ac:be:41:ee:37:1c:65:e9:78:6a: d7:ab:ac:82:78:51:a9:19:ef:6a:28:ed:e6:27:30:a6:54:7d: 69:78:ff:a4:cd:4f:ca:0f:fd:d9:4d:c3:7f:af:84:1d:af:c5: e1:2d:12:2b:5d:95:f2:56:37:73:c3:5c:e3:3a:a5:50:68:6c: 55:de:5f:3a:4a:fb:0f:28:61:af:08:b8:94:cc:16:b9:56:54: 4d:ce:7a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUxMTAzMDAwNzU0WhcNMjUxMTEwMDAwNzU0WjAYMRYwFAYD VQQDEw02OTA3ZjI1Yi00MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ruMSaD+OAiN4OxD22CkBDjqGmbnY2N9umLf0a06E8x2B8g81G8JJ2D/0oV8 KL2OQ21XpI9grg83g4RANgLi3bXYGx7mNFI1TQ7GVWXyKU/+KYxiT5SaIb42NTDh Bwd1Ft2mvhPyaKicZmfdX9fuiqMTCtHzZtUC/7yl8eS2Zl0sgRQ91e/KyADFKEhX Tr9z3oNbsRBZBO/1EKSCBXWs1tUj4036wpVM5y0s3CZnpRXX2TxWtRn4Yzcq5izO EAXyOtAU31xk56LjDD4QRYw/1OSII86+f8Q+DCc5M7lA54+3oXZHlPh9EQ7RKLax hTRRfhWf8j7ECWsVaA3LiJfthwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI37GVeH 1zmiCUwW2s7MG2e0QMI6MB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBToK2Bt7d7tevTLt5kdKOYoVNBtqaYL+7inv217wuWb5WyksiEWIA9 wj4TgrAqylqBUdb8Z4o5GINxJFicEjKPmy8wj1UoLTAElkxLYNc88G1vpzShmANY IskmT4mjAzAcjNyDpnXZv0+K6ggtZ4wsfqNtr4WU7wHhszq70nOR+VznJljMypii arBfQai05ziSDApaozmjtgoSDsnlGI3uy6hPvfO90ka1Fay+Qe43HGXpeGrXq6yC eFGpGe9qKO3mJzCmVH1peP+kzU/KD/3ZTcN/r4Qdr8XhLRIrXZXyVjdzw1zjOqVQ aGxV3l86SvsPKGGvCLiUzBa5VlRNznpq -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:23 2025 by rpki-client