$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft File: qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json) Hash identifier: rEpbvaOTaUrU2yDHKK5PlEuAhb8cziPaXV2u98F4gb8= Subject key identifier: 51:17:B4:DF:CC:E5:58:0C:7F:D7:D0:AD:57:FD:44:DC:87:9C:89:B5 Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B Certificate issuer: /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft Manifest number: 0695 Signing time: Sun 02 Nov 2025 22:20:03 +0000 Manifest this update: Sun 02 Nov 2025 22:20:03 +0000 Manifest next update: Sun 09 Nov 2025 22:20:03 +0000 Files and hashes: 1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: YMpmKHvV5NtYu/HcCQSCU5WNH/csiYkSF6tb4YwOknY=) 2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: Tp6yV6aNCHUMLxFxEsezUBZI5iOsrCF8OtHjSK1vpw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Validity Not Before: Nov 2 22:20:03 2025 GMT Not After : Nov 9 22:20:03 2025 GMT Subject: CN=6907d913-ecb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:22:ad:34:5b:46:66:26:4f:52:f0:06:d3: 58:59:f3:7d:90:44:1d:d3:1d:99:db:75:58:d2:c1: fe:4e:72:41:2e:f8:25:40:66:ea:87:93:eb:be:92: 72:77:f3:53:7f:5f:ca:14:b6:07:41:bc:b2:35:36: c9:71:38:75:f8:39:33:88:1e:0c:67:71:a1:43:59: 9d:5e:60:4d:b8:d1:9c:90:62:79:33:81:51:88:a9: 0e:0b:4f:e7:54:8b:29:e3:2f:e9:74:f1:be:c6:ea: b3:cf:97:f8:9f:a0:22:41:fc:7a:8f:8c:a8:cf:f1: 97:f4:54:c7:68:af:e8:ce:f8:ae:b9:9b:11:13:e2: 13:97:69:fb:9d:48:1e:13:6b:45:fd:cd:3f:58:df: 79:41:05:c2:5c:9f:b6:dd:5a:85:ef:c4:e4:87:bd: b7:19:c5:e4:d6:fe:32:75:14:b2:e5:57:fd:7b:39: 8f:df:49:e1:92:a1:63:34:92:04:a5:b6:62:c9:94: a2:1d:55:ec:bc:6d:c9:fe:71:a9:15:da:ce:4a:38: 02:5b:43:1a:f4:06:0a:73:21:52:13:2a:b8:e2:bb: 10:4d:b2:90:23:2a:44:59:a2:0b:23:ec:88:3b:b1: e9:ed:51:eb:0c:9b:bd:47:38:3f:1f:43:85:b9:fe: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:B4:DF:CC:E5:58:0C:7F:D7:D0:AD:57:FD:44:DC:87:9C:89:B5 X509v3 Authority Key Identifier: keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:30:55:7a:48:38:4a:17:75:58:b7:8f:28:24:81:c4:5a:ff: 25:ef:77:fb:12:84:c5:07:ad:32:98:8d:2c:3c:4d:62:f5:eb: 6d:2a:62:02:58:7f:c8:c1:c8:0f:46:bd:eb:90:31:e4:22:8c: ad:43:d1:63:5a:d7:41:6f:97:ca:04:b1:8e:e1:42:57:81:50: 2d:f4:31:ce:f4:92:57:31:e8:29:46:18:80:f8:e3:50:10:79: 85:4d:06:4f:15:10:87:48:b2:ee:7b:f1:1d:08:89:64:42:68: b9:1c:7d:71:fc:eb:f9:ee:4b:d2:8e:17:0c:6f:1b:6f:16:4f: 3c:a4:76:db:b1:ae:0c:41:01:b5:e1:8f:44:38:69:7d:4f:b5: 4e:02:2c:bc:44:fa:72:5c:9b:d2:eb:b5:c4:ba:1c:dd:00:6a: 44:81:c3:d1:a3:b0:63:47:05:8f:fa:3b:c9:c8:a5:f6:23:fe: 59:eb:e8:88:b3:0d:37:73:fa:d4:eb:eb:ff:e7:ac:b1:e5:69: a6:0d:27:f7:36:0e:6d:7f:34:05:62:d0:5b:99:40:10:1e:9e: 71:54:65:30:5f:22:28:7d:ee:23:d6:5c:60:60:37:a5:ab:4a: 55:58:d0:4b:a8:b6:d6:55:d8:98:53:ae:de:a8:10:10:8d:29: 7e:55:7c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2NTkzQjkxQjQ0 MjBCQUE3MEIwHhcNMjUxMTAyMjIyMDAzWhcNMjUxMTA5MjIyMDAzWjAYMRYwFAYD VQQDEw02OTA3ZDkxMy1lY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPcirTRbRmYmT1LwBtNYWfN9kEQd0x2Z23VY0sH+TnJBLvglQGbqh5PrvpJy d/NTf1/KFLYHQbyyNTbJcTh1+DkziB4MZ3GhQ1mdXmBNuNGckGJ5M4FRiKkOC0/n VIsp4y/pdPG+xuqzz5f4n6AiQfx6j4yoz/GX9FTHaK/ozviuuZsRE+ITl2n7nUge E2tF/c0/WN95QQXCXJ+23VqF78Tkh723GcXk1v4ydRSy5Vf9ezmP30nhkqFjNJIE pbZiyZSiHVXsvG3J/nGpFdrOSjgCW0Ma9AYKcyFSEyq44rsQTbKQIypEWaILI+yI O7Hp7VHrDJu9Rzg/H0OFuf4/ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEXtN/M 5VgMf9fQrVf9RNyHnIm1MB8GA1UdIwQYMBaAFKmnVVXtcGcvcdUvZZO5G0QguqcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDUxOS8wNDI2NDkxRThD QUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5OXgxUzlsazdrYlJDQzZw d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZFZWZTF3Wnk5eDFTOWxrN2tiUkNDNnB3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDUxOS8wNDI2NDkxRThDQUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5 OXgxUzlsazdrYlJDQzZwd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHMFV6SDhKF3VYt48oJIHEWv8l73f7EoTFB60ymI0sPE1i9ettKmIC WH/IwcgPRr3rkDHkIoytQ9FjWtdBb5fKBLGO4UJXgVAt9DHO9JJXMegpRhiA+ONQ EHmFTQZPFRCHSLLue/EdCIlkQmi5HH1x/Ov57kvSjhcMbxtvFk88pHbbsa4MQQG1 4Y9EOGl9T7VOAiy8RPpyXJvS67XEuhzdAGpEgcPRo7BjRwWP+jvJyKX2I/5Z6+iI sw03c/rU6+v/56yx5WmmDSf3Ng5tfzQFYtBbmUAQHp5xVGUwXyIofe4j1lxgYDel q0pVWNBLqLbWVdiYU67eqBAQjSl+VXxE -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:32 2025 by rpki-client