$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: sSfgsebl0xJdYzfVc/1+nMYyxrmo0kj6rkCsVedndFI= Subject key identifier: 7A:C0:AD:D3:FC:00:0B:72:48:CF:16:F9:EF:AD:4A:D3:5B:58:9C:C9 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: 4C Signing time: Thu 23 Oct 2025 09:29:46 +0000 Manifest this update: Thu 23 Oct 2025 09:29:45 +0000 Manifest next update: Thu 30 Oct 2025 09:29:45 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: 1bYKIPM5Lzc3FuMZSd+Yr5kYPLzswwnDZUijPoiNzjk=) 2: 765A9AEC3C6F11F0A83E954EC4F9AE02.roa (hash: 1LK4ltfDfUObnmcEpgqLd5X9zDYVgPh3Q6BVcaMlN3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Oct 23 09:29:45 2025 GMT Not After : Oct 30 09:29:45 2025 GMT Subject: CN=68f9f589-af74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:6c:f0:12:59:6e:88:24:00:6d:05:20:15: 09:af:9f:57:40:d6:83:98:01:62:27:b5:d0:2d:d5: 29:2a:3c:07:ef:33:0d:94:83:ac:ed:a9:c2:1e:c5: 0d:70:7d:90:79:d7:af:f4:68:17:55:11:7b:b7:6d: a5:a8:c1:b9:22:a1:59:97:d1:4a:23:e3:8c:c2:bf: fc:82:00:2a:ac:98:75:24:20:96:fd:e3:c9:f6:03: 69:66:b0:85:f6:01:8e:78:14:a7:d1:ab:91:e2:d6: 22:fb:ef:b3:00:bf:b1:7b:3c:a9:f4:3e:64:8d:c5: ea:bf:2c:50:8d:84:0a:1e:23:f8:ec:65:09:ba:ad: 05:5b:17:75:73:51:b3:24:f3:6b:d5:94:71:dc:f7: d0:61:af:ae:be:8a:ab:23:a3:d8:fd:aa:ea:ee:4b: 8e:5b:b9:a3:24:27:df:3c:73:0c:cd:8a:9f:06:14: e4:5a:6d:55:a0:d0:4b:b4:2e:ca:eb:1a:17:20:e2: 4d:2c:79:71:a4:86:08:0b:a7:95:ce:77:5c:ae:b4: c2:0d:9b:06:fb:0e:55:3e:55:4d:37:df:cb:a7:2c: e1:90:80:75:15:33:41:f2:6a:c1:bf:96:51:d8:2d: 96:9e:f2:3a:98:fb:7a:83:3c:32:43:e9:a8:67:84: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:AD:D3:FC:00:0B:72:48:CF:16:F9:EF:AD:4A:D3:5B:58:9C:C9 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:d3:d1:6e:d8:0d:86:3c:54:79:e8:2c:40:54:6d:b0:76:2c: 21:83:b7:1d:21:3a:0a:de:e3:da:c3:54:3e:5e:97:0a:0d:33: b7:86:10:08:6e:3d:e6:5c:00:aa:6b:c4:e3:7e:42:18:c3:48: 66:72:92:5f:0c:05:85:49:d0:36:e3:23:ee:55:53:15:b5:fd: ad:4f:3d:a5:bd:19:30:ba:70:0e:83:20:56:25:2c:6d:c6:84: a2:3f:85:c6:8b:18:a1:49:80:24:1b:50:19:0e:95:c1:c7:c1: 4a:2c:ca:ae:db:d7:2b:4c:09:86:5c:2c:74:53:16:39:2d:3a: 87:7b:6e:bb:63:54:f9:c9:a5:d7:f2:a4:67:6f:a4:de:c3:d8: 29:73:72:24:ea:cc:8b:02:b8:d0:44:59:53:42:a0:0e:e7:5b: 18:03:ca:d9:a3:85:b5:9f:b3:7c:18:bb:24:79:dc:da:0f:72: e3:45:40:70:ea:6e:64:03:9f:9b:50:b4:9f:b1:e7:b7:58:e8: 65:b5:7e:2c:14:3a:1d:39:ec:3e:7b:16:be:7b:0c:d6:27:bd: a7:86:c8:1c:38:23:0c:26:93:30:18:20:85:28:9d:90:68:2f: 27:33:26:26:a4:37:e6:15:09:71:3f:09:be:c2:f3:20:12:17: 60:19:4b:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoQUI1M0Q5OTI4MTAyQjkxOURCN0M1NDY1QzhERDVGRjI2 Njc0NDNCMzAeFw0yNTEwMjMwOTI5NDVaFw0yNTEwMzAwOTI5NDVaMBgxFjAUBgNV BAMTDTY4ZjlmNTg5LWFmNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9WGzwElluiCQAbQUgFQmvn1dA1oOYAWIntdAt1SkqPAfvMw2Ug6ztqcIexQ1w fZB516/0aBdVEXu3baWowbkioVmX0Uoj44zCv/yCACqsmHUkIJb948n2A2lmsIX2 AY54FKfRq5Hi1iL777MAv7F7PKn0PmSNxeq/LFCNhAoeI/jsZQm6rQVbF3VzUbMk 82vVlHHc99Bhr66+iqsjo9j9quruS45buaMkJ988cwzNip8GFORabVWg0Eu0Lsrr Ghcg4k0seXGkhggLp5XOd1yutMINmwb7DlU+VU0338unLOGQgHUVM0HyasG/llHY LZae8jqY+3qDPDJD6ahnhA/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUesCt0/wA C3JIzxb5761K01tYnMkwHwYDVR0jBBgwFoAUq1PZkoECuRnbfFRlyN1f8mZ0Q7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0Q4NEU3QkYyM0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcTFQWmtvRUN1Um5iZkZSbHlOMWY4bVowUTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0Q4NEU3QkYyM0M2RTExRjA5RDc2QTI0REM0RjlBRTAyL3ExUFprb0VDdVJu YmZGUmx5TjFmOG1aMFE3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANXT0W7YDYY8VHnoLEBUbbB2LCGDtx0hOgre49rDVD5elwoNM7eGEAhu PeZcAKprxON+QhjDSGZykl8MBYVJ0DbjI+5VUxW1/a1PPaW9GTC6cA6DIFYlLG3G hKI/hcaLGKFJgCQbUBkOlcHHwUosyq7b1ytMCYZcLHRTFjktOod7brtjVPnJpdfy pGdvpN7D2ClzciTqzIsCuNBEWVNCoA7nWxgDytmjhbWfs3wYuyR53NoPcuNFQHDq bmQDn5tQtJ+x57dY6GW1fiwUOh057D57Fr57DNYnvaeGyBw4IwwmkzAYIIUonZBo LyczJiakN+YVCXE/Cb7C8yASF2AZS7c= -----END CERTIFICATE-----Generated at Sat Oct 25 04:21:12 2025 by rpki-client