$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft File: qEiFS7_Ou01JgBuyrj2EQIscPSc.mft (raw, json) Hash identifier: mCVgJg9zmeg0MJmld36q76RkrN24BCSh6HPy3zJyFRI= Subject key identifier: 5E:6E:08:D3:FA:CD:88:13:92:A2:00:82:20:A1:38:1E:E7:11:1A:4E Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27 Certificate issuer: /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft Manifest number: 15 Signing time: Mon 03 Nov 2025 07:54:35 +0000 Manifest this update: Mon 03 Nov 2025 07:54:35 +0000 Manifest next update: Mon 10 Nov 2025 07:54:35 +0000 Files and hashes: 1: qEiFS7_Ou01JgBuyrj2EQIscPSc.crl (hash: nhhkh3umlE30jbiPVfGbAev/MRRjHQqMKmEnPHrtX10=) 2: ABD937089D6511F0A6A3E74BC4F9AE02.roa (hash: Jkbb7HkAq8iDWnzG+rvThhFx1fDkJFLk00mNMZ+k2pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27 Validity Not Before: Nov 3 07:54:35 2025 GMT Not After : Nov 10 07:54:35 2025 GMT Subject: CN=69085fbb-c156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:99:9c:76:00:c3:4d:4b:45:a9:1d:c1:5a: b4:85:42:17:b4:9c:2c:62:90:14:bd:ec:0f:cc:e5: fd:3f:20:47:f7:1c:28:44:dc:0e:fc:18:20:1e:e7: fc:87:47:db:12:67:29:eb:28:2c:c5:71:61:5d:aa: 0d:b1:0a:c9:af:e5:b7:1f:9d:53:f4:c6:f7:e6:e8: 59:43:34:d3:9c:73:c3:2a:fb:df:d6:a7:bc:66:fa: 70:56:d5:27:92:10:24:8c:3c:f6:e0:f2:4a:f4:0f: 70:e9:bf:70:e0:99:98:6e:6f:6c:24:b4:47:b0:67: 65:ed:d6:b5:43:1b:f1:95:d3:cd:2a:74:18:9f:90: 20:fd:64:d4:6f:86:8d:7e:6b:52:e3:ca:d3:e6:84: 5a:a5:67:27:75:2a:3a:53:e9:ea:16:a7:e0:34:40: 1d:97:5a:05:2d:39:a0:f9:94:19:41:d5:16:f6:af: 10:40:f1:54:91:60:f3:78:dd:a9:6e:27:78:b7:c0: 8f:e2:ba:13:05:e0:4c:d2:8e:0d:c9:9a:d9:c0:fb: 76:42:0c:b4:c2:89:a3:7d:17:8b:0a:39:ce:5d:40: 29:1e:de:d2:02:6f:07:7b:71:e6:7f:af:43:12:c8: eb:e6:85:56:ae:2e:8a:ad:14:77:c4:ba:c5:f1:18: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6E:08:D3:FA:CD:88:13:92:A2:00:82:20:A1:38:1E:E7:11:1A:4E X509v3 Authority Key Identifier: keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:d2:41:08:2b:76:4e:39:ef:f2:82:e4:38:7f:15:1c:c7: 22:20:60:28:fc:da:22:59:66:d7:d4:ad:26:5f:05:fb:4d:ca: cc:bd:a3:86:fa:8a:e7:30:36:7f:4b:fa:e3:5f:c3:c6:02:d6: 76:ea:ee:da:f5:e7:3c:dc:58:d5:4f:90:db:b4:18:d8:96:20: 96:e5:9f:63:87:9f:14:00:46:79:45:64:a4:ee:d3:23:3b:c6: 02:00:56:ce:46:35:82:68:8d:a1:b5:25:0f:a5:08:fd:a4:07: 44:f1:83:98:dd:07:89:89:d3:a1:ec:5d:79:32:d2:de:63:ca: a8:10:aa:79:cc:66:7b:74:88:a8:35:0e:68:36:ac:5a:4a:12: a1:c5:02:30:19:36:78:5c:ee:f3:9e:cb:fb:0a:be:20:ac:90: 8b:26:4e:cd:34:ff:bb:51:e8:ee:0c:c8:b8:1a:b2:21:c7:ea: 2d:c9:2f:d9:95:ba:2c:ec:07:f8:d5:6a:4b:bb:a4:4c:dc:13: 30:17:e4:d7:c6:19:0b:2f:c9:0d:16:39:d4:6b:a9:0a:c8:4f: 71:27:e5:61:1a:45:2f:fe:38:26:f2:46:3c:3f:9f:62:cb:4e: 2e:b0:28:6b:93:0f:fd:a0:96:83:3b:49:97:47:4c:cd:f6:21: 51:cb:84:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDkzOTExMC8GA1UEBRMoQTg0ODg1NEJCRkNFQkI0RDQ5ODAxQkIyQUUzRDg0NDA4 QjFDM0QyNzAeFw0yNTExMDMwNzU0MzVaFw0yNTExMTAwNzU0MzVaMBgxFjAUBgNV BAMTDTY5MDg1ZmJiLWMxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzypmcdgDDTUtFqR3BWrSFQhe0nCxikBS97A/M5f0/IEf3HChE3A78GCAe5/yH R9sSZynrKCzFcWFdqg2xCsmv5bcfnVP0xvfm6FlDNNOcc8Mq+9/Wp7xm+nBW1SeS ECSMPPbg8kr0D3Dpv3DgmZhub2wktEewZ2Xt1rVDG/GV080qdBifkCD9ZNRvho1+ a1LjytPmhFqlZyd1KjpT6eoWp+A0QB2XWgUtOaD5lBlB1Rb2rxBA8VSRYPN43alu J3i3wI/iuhMF4EzSjg3JmtnA+3ZCDLTCiaN9F4sKOc5dQCke3tICbwd7ceZ/r0MS yOvmhVauLoqtFHfEusXxGADTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXm4I0/rN iBOSogCCIKE4HucRGk4wHwYDVR0jBBgwFoAUqEiFS7/Ou01JgBuyrj2EQIscPScw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEOTM5L0QxNURDMDhBOUQ2 NDExRjA5Mjc5OTM0N0M0RjlBRTAyL3FFaUZTN19PdTAxSmdCdXlyajJFUUlzY1BT Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUVpRlM3X091MDFKZ0J1eXJqMkVRSXNjUFNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE OTM5L0QxNURDMDhBOUQ2NDExRjA5Mjc5OTM0N0M0RjlBRTAyL3FFaUZTN19PdTAx SmdCdXlyajJFUUlzY1BTYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCx0kEIK3ZOOe/yguQ4fxUcxyIgYCj82iJZZtfUrSZfBftNysy9o4b6 iucwNn9L+uNfw8YC1nbq7tr15zzcWNVPkNu0GNiWIJbln2OHnxQARnlFZKTu0yM7 xgIAVs5GNYJojaG1JQ+lCP2kB0Txg5jdB4mJ06HsXXky0t5jyqgQqnnMZnt0iKg1 Dmg2rFpKEqHFAjAZNnhc7vOey/sKviCskIsmTs00/7tR6O4MyLgasiHH6i3JL9mV uizsB/jVaku7pEzcEzAX5NfGGQsvyQ0WOdRrqQrIT3En5WEaRS/+OCbyRjw/n2LL Ti6wKGuTD/2gloM7SZdHTM32IVHLhHA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:55 2025 by rpki-client