$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json) Hash identifier: t3lStcbXcr9N7DkCDryiA4hZtOoeS8IleEiVH/AxB1w= Subject key identifier: D7:FB:F1:7D:4E:9A:06:8C:1A:50:64:E2:47:6B:75:3B:33:7D:DE:2C Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft Manifest number: 062D Signing time: Sun 02 Nov 2025 22:48:19 +0000 Manifest this update: Sun 02 Nov 2025 22:48:19 +0000 Manifest next update: Sun 09 Nov 2025 22:48:19 +0000 Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: p5wY7NwTQgQpanstJKUR7ivGzuH6oXf3S8kcWg5cShU=) 2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: FrN9o1lFg/xEbU5z0+woTSKpRYhEXE4ng2cT+urUy+w=) 3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: p2SDVbwBZwxr3yJ4yGh7aCxA4CeficP3aVklyI/yKDc=) 4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: LIJfkhB+FEnFSom6qGXtkQF2GYNSzLyM4CrNqHpDKAI=) 5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Nov 2 22:48:19 2025 GMT Not After : Nov 9 22:48:19 2025 GMT Subject: CN=6907dfb3-a941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:03:c2:95:29:0f:9f:0f:6d:b8:19:82:69: ac:af:1a:86:79:50:c5:4b:b1:8c:e7:e1:b2:5b:22: 2b:81:ad:8d:e9:3c:37:e7:87:8f:7f:0d:ab:19:b3: 72:ad:e5:de:18:59:67:31:e3:ed:be:dc:1d:e0:4c: b4:8a:0e:d3:06:94:cc:e6:1d:17:5f:32:85:4f:dd: 19:08:7f:74:a7:f4:2b:01:97:22:20:95:a4:2f:54: a2:6e:ff:44:1f:5b:43:c9:dd:fe:6f:36:dd:40:72: e4:49:47:84:5c:73:59:df:88:d1:ad:ce:ab:db:71: 3f:75:2e:bf:0c:04:43:be:01:10:ff:fd:b7:5c:79: 30:34:4f:4a:f3:19:8c:bf:b3:3d:50:7b:39:47:25: b8:ed:60:15:18:4e:a3:e1:c2:31:59:85:66:89:1c: 82:00:79:8a:f4:ec:ce:ee:b9:65:72:ab:b1:51:a1: 56:98:38:49:35:e4:62:35:1d:39:e1:1f:c2:74:4f: 8d:37:9a:db:f7:40:6d:22:b2:47:35:11:66:f6:23: ab:6a:31:f5:a1:03:0c:4e:c2:ec:d0:ce:67:62:47: be:86:1b:70:62:47:2d:48:88:3d:6b:1e:d0:07:29: 3c:6a:a1:ef:24:74:78:1c:d7:bc:92:76:75:db:d2: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FB:F1:7D:4E:9A:06:8C:1A:50:64:E2:47:6B:75:3B:33:7D:DE:2C X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:15:cc:c2:1d:42:96:11:21:9a:05:62:63:4c:d9:25:76:d7: 6d:a9:86:8d:81:e1:b4:3d:e5:a4:e6:7f:4c:40:f9:0d:9f:b0: fe:6a:19:86:44:8b:13:49:b2:3a:56:32:3b:6a:31:fb:00:99: 1f:04:be:2d:56:72:52:85:5b:1c:e0:4d:7b:e9:f2:11:5b:3c: 2b:54:02:cc:1c:58:4b:f4:cb:bf:ca:4e:2a:7a:74:9d:58:5f: e7:15:8d:2e:50:f3:4e:d9:9b:b8:a9:ec:83:39:58:20:d7:d4: f8:1e:e1:5b:4c:12:79:da:08:dc:c3:30:70:2d:ba:b2:4a:fd: b9:dd:1c:0d:76:f3:24:c2:3d:a6:a6:d3:95:db:12:62:c3:83: 8b:d3:1e:81:82:c2:ea:f6:61:b7:d5:34:db:fb:36:36:ce:c6: d6:73:88:0a:fe:7a:b0:87:0d:3a:d7:fe:eb:38:fd:d4:68:65: cf:95:fc:6d:56:8c:b4:fc:ac:43:df:2e:48:02:9b:4d:e9:8b: f4:35:85:4a:f4:4f:be:23:c6:77:c1:3d:4c:6f:1a:33:66:47: 4f:61:53:de:87:4f:27:e5:4b:74:53:12:55:f6:c1:04:14:3d: 4c:28:ad:0d:06:9d:2c:97:67:4f:df:8d:24:55:e0:4c:1e:16: c7:5f:d0:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUxMTAyMjI0ODE5WhcNMjUxMTA5MjI0ODE5WjAYMRYwFAYD VQQDEw02OTA3ZGZiMy1hOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7asDwpUpD58PbbgZgmmsrxqGeVDFS7GM5+GyWyIrga2N6Tw354ePfw2rGbNy reXeGFlnMePtvtwd4Ey0ig7TBpTM5h0XXzKFT90ZCH90p/QrAZciIJWkL1Sibv9E H1tDyd3+bzbdQHLkSUeEXHNZ34jRrc6r23E/dS6/DARDvgEQ//23XHkwNE9K8xmM v7M9UHs5RyW47WAVGE6j4cIxWYVmiRyCAHmK9OzO7rllcquxUaFWmDhJNeRiNR05 4R/CdE+NN5rb90BtIrJHNRFm9iOrajH1oQMMTsLs0M5nYke+hhtwYkctSIg9ax7Q Byk8aqHvJHR4HNe8knZ129LdiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf78X1O mgaMGlBk4kdrdTszfd4sMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzFczCHUKWESGaBWJjTNkldtdtqYaNgeG0PeWk5n9MQPkNn7D+ahmG RIsTSbI6VjI7ajH7AJkfBL4tVnJShVsc4E176fIRWzwrVALMHFhL9Mu/yk4qenSd WF/nFY0uUPNO2Zu4qeyDOVgg19T4HuFbTBJ52gjcwzBwLbqySv253RwNdvMkwj2m ptOV2xJiw4OL0x6BgsLq9mG31TTb+zY2zsbWc4gK/nqwhw061/7rOP3UaGXPlfxt Voy0/KxD3y5IAptN6Yv0NYVK9E++I8Z3wT1MbxozZkdPYVPeh08n5Ut0UxJV9sEE FD1MKK0NBp0sl2dP340kVeBMHhbHX9B4 -----END CERTIFICATE-----Generated at Mon Nov 3 06:44:49 2025 by rpki-client