$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: xAyR2exQedZqglYGIYlFx5zPgVaxPg5Yn8/BygyWbNo= Subject key identifier: CA:10:73:AB:31:AB:94:82:5E:55:9C:2C:22:59:0C:1C:4B:FC:70:D0 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 1077 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 105F Signing time: Wed 22 Oct 2025 17:49:09 +0000 Manifest this update: Wed 22 Oct 2025 17:49:08 +0000 Manifest next update: Wed 29 Oct 2025 17:49:08 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: dzQo9ttW/hca+2XTIFu9Xif0cHtJDTlwn79S6aHx8T8=) 2: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: 5Yz7qxk1jdgn6P7lka9rnOmBSo28tqIS5zv1OkL6X7A=) 3: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 4: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 5: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Oct 22 17:49:08 2025 GMT Not After : Oct 29 17:49:08 2025 GMT Subject: CN=68f91915-00f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:46:93:da:9c:44:b5:93:bc:08:5b:54:21:4c: 84:eb:75:a3:3a:6d:ba:b1:2b:49:cd:77:9e:c7:68: 55:e0:f8:fd:d2:40:73:bf:d3:f2:dc:de:76:a1:a2: e2:17:ab:fb:6c:d3:77:e4:3b:b3:30:44:37:b4:64: 3c:e1:50:46:3e:50:b8:10:dc:be:16:90:11:2c:04: c5:40:26:65:bb:6c:4a:c6:7b:48:e2:82:0c:38:21: a9:f8:a9:7f:af:7f:a7:56:19:b8:ba:8b:06:fb:7d: 54:6f:23:28:e0:82:bf:2a:b5:fc:30:16:67:27:28: 88:dc:8b:2f:48:c9:4a:a2:18:17:85:d2:ea:27:21: be:4f:c5:96:df:90:cb:57:29:2b:97:57:37:d2:51: 21:dd:b4:4c:0a:d7:52:f9:46:e3:63:9b:7b:ec:72: 92:59:ca:42:f3:b3:67:00:1a:07:82:35:45:cb:60: 64:5d:46:76:ef:36:10:86:77:9c:78:ff:69:8b:7b: 96:29:a9:89:4d:ad:62:3d:44:c1:3c:a0:e8:03:ee: c1:62:e8:3d:97:a1:ad:60:d1:c9:04:78:bb:cf:14: 0e:8d:b1:bc:bd:5f:e6:3d:c4:c0:c5:78:60:5a:98: 17:d4:9f:6e:17:e7:b3:36:ff:35:9b:8e:dd:c3:04: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:10:73:AB:31:AB:94:82:5E:55:9C:2C:22:59:0C:1C:4B:FC:70:D0 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d7:1d:07:27:69:cf:5c:7d:de:e8:3b:9f:25:d9:ad:b5:da: 2d:d9:33:85:76:62:71:6f:fe:0e:ff:fa:b1:27:64:18:b5:71: 8f:44:85:00:ce:88:37:5a:f1:81:a1:a6:d3:53:d1:ec:2a:e6: e4:0e:12:3a:61:f6:9c:ba:1b:a0:3a:57:bd:9a:12:a1:67:87: b9:0d:9e:62:89:8a:ca:66:75:d2:ed:75:18:66:0e:f2:0f:a7: fe:e5:be:62:ae:97:74:e6:81:3c:38:e7:25:19:f5:90:ab:ee: 64:10:24:33:ff:90:6a:df:ca:37:ed:7f:04:48:65:3a:ef:d7: 0f:3c:87:42:7f:e4:7d:8b:60:86:1d:4c:17:c2:c1:4a:c1:ed: 9f:8a:c9:ff:9c:7a:30:d7:4e:17:21:b3:ae:0e:4f:fb:e5:25: 3a:5c:3b:28:e5:6a:4f:84:25:5a:cb:6f:48:1b:e0:54:e2:66: 79:ef:14:41:3b:71:b4:6c:3b:ba:0c:60:e3:78:bb:9a:11:18: 8c:e2:a5:15:22:d1:38:90:16:a5:ac:d6:73:1d:77:a7:ee:e2: e8:7e:f7:69:9e:c5:0f:5a:8a:82:00:58:e4:38:c6:29:6f:14: d1:d5:29:ba:3c:26:1e:f1:00:a9:ec:c8:96:5f:a5:b7:33:39: 6f:ee:b6:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUxMDIyMTc0OTA4WhcNMjUxMDI5MTc0OTA4WjAYMRYwFAYD VQQDEw02OGY5MTkxNS0wMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kaT2pxEtZO8CFtUIUyE63WjOm26sStJzXeex2hV4Pj90kBzv9Py3N52oaLi F6v7bNN35DuzMEQ3tGQ84VBGPlC4ENy+FpARLATFQCZlu2xKxntI4oIMOCGp+Kl/ r3+nVhm4uosG+31UbyMo4IK/KrX8MBZnJyiI3IsvSMlKohgXhdLqJyG+T8WW35DL Vykrl1c30lEh3bRMCtdS+UbjY5t77HKSWcpC87NnABoHgjVFy2BkXUZ27zYQhnec eP9pi3uWKamJTa1iPUTBPKDoA+7BYug9l6GtYNHJBHi7zxQOjbG8vV/mPcTAxXhg WpgX1J9uF+ezNv81m47dwwSLPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoQc6sx q5SCXlWcLCJZDBxL/HDQMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg1x0HJ2nPXH3e6DufJdmttdot2TOFdmJxb/4O//qxJ2QYtXGPRIUA zog3WvGBoabTU9HsKubkDhI6YfacuhugOle9mhKhZ4e5DZ5iiYrKZnXS7XUYZg7y D6f+5b5irpd05oE8OOclGfWQq+5kECQz/5Bq38o37X8ESGU679cPPIdCf+R9i2CG HUwXwsFKwe2fisn/nHow104XIbOuDk/75SU6XDso5WpPhCVay29IG+BU4mZ57xRB O3G0bDu6DGDjeLuaERiM4qUVItE4kBalrNZzHXen7uLofvdpnsUPWoqCAFjkOMYp bxTR1Sm6PCYe8QCp7MiWX6W3Mzlv7ra6 -----END CERTIFICATE-----Generated at Thu Oct 23 06:43:35 2025 by rpki-client