$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: cSItNJxPOsGzwvy2sSvquTfhzvVeXwi3i4FJ9zdcjGk= Subject key identifier: 1E:50:1F:E2:9B:97:87:2F:58:72:09:D8:AE:F7:39:6A:7A:2B:F2:B5 Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B64 Signing time: Wed 22 Oct 2025 16:32:27 +0000 Manifest this update: Wed 22 Oct 2025 16:32:26 +0000 Manifest next update: Wed 29 Oct 2025 16:32:26 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: 0v8XxBK6/b9UtkYTtPnxj2L39Qu/STs+H3/8kKgBjXU=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: PfaBGPnkUgsWEXBDryvUqr89XZWDUPWxeZUL3rzB4xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7024 (0x1b70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Oct 22 16:32:26 2025 GMT Not After : Oct 29 16:32:26 2025 GMT Subject: CN=68f9071b-2908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:cb:f0:f9:99:31:45:ca:3c:79:10:19:a9: 85:97:0b:61:58:c8:4f:ea:56:81:ea:40:00:74:1e: bb:b8:86:27:0e:4d:d7:a1:63:6f:21:ad:e0:df:ee: 7a:4e:79:78:11:73:ae:90:5d:87:43:10:25:9a:a2: 30:71:48:bd:30:06:2f:53:fd:35:8e:43:52:48:28: 4f:09:1e:d0:af:5c:ab:bd:b5:0a:36:54:66:c7:f2: ca:f6:69:3d:0c:9b:28:b3:cc:4f:5d:e0:f9:f9:2a: 0c:27:de:b7:f6:a0:a6:f1:be:ab:75:5e:f9:7b:d1: 43:c9:e1:da:88:e2:dc:62:b5:40:a2:52:90:eb:06: 11:57:eb:e2:91:ec:91:35:89:5a:5c:1b:37:5f:f8: 0e:d2:2b:18:de:ca:2a:cf:41:d9:7c:a6:b8:f0:0a: 4e:81:81:fd:35:b6:5b:c7:09:cd:92:0e:87:ee:28: 94:0d:d3:10:7f:11:16:ff:d1:f8:ce:28:95:43:2f: 92:02:0f:8f:9c:75:8d:9a:0e:a8:46:75:ff:b0:d1: ff:d7:d1:73:1a:32:b5:1f:5e:7b:e7:45:5a:aa:11: 3b:f5:88:95:66:2b:d6:c3:26:56:a6:fe:9d:4c:ec: 49:ef:b2:97:a7:8c:b7:66:7c:43:25:94:a2:a9:c6: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:1F:E2:9B:97:87:2F:58:72:09:D8:AE:F7:39:6A:7A:2B:F2:B5 X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8d:77:3d:03:9e:01:67:6c:c5:9f:33:56:d7:2f:7d:f0:7a: be:67:4f:1f:bf:47:a2:f0:d5:38:e9:40:a1:ed:e5:9a:52:7e: 9e:88:f5:bd:1b:eb:44:ee:17:6b:e2:9c:7c:7a:8b:95:c4:5c: 82:26:23:91:07:e4:0b:4b:9e:fb:32:f2:a7:df:c8:31:c1:ad: 94:31:dd:b0:82:80:46:e9:6d:8a:0d:38:57:90:96:36:eb:6d: 78:97:8f:88:9a:10:fe:19:15:df:36:3f:6e:41:0a:bb:5d:81: 2e:48:f1:64:6a:a8:1e:41:9f:90:3c:d9:f5:35:da:26:e8:8e: f4:6f:26:cc:4c:09:f9:ba:0b:6a:4d:0f:a5:b1:8c:04:bd:0c: 9d:37:9f:bd:2b:eb:1b:51:2a:bc:a7:ce:61:d6:7c:12:fa:f9: 75:80:4d:23:14:13:99:26:7e:95:f5:66:18:54:af:c7:46:35: 43:b1:bc:9d:3d:ba:6c:93:a2:77:a6:7b:b0:a0:98:92:a8:f9: bd:9b:6f:f3:d0:43:c4:b2:9e:ed:86:65:47:0e:41:a4:e5:f8: d7:61:c8:4d:20:74:fa:74:e9:ed:6a:f2:b7:0e:7f:77:52:e9: 5b:a5:38:36:73:65:d3:ac:d0:7b:c1:73:65:61:ae:ff:32:8a: 31:11:4f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUxMDIyMTYzMjI2WhcNMjUxMDI5MTYzMjI2WjAYMRYwFAYD VQQDEw02OGY5MDcxYi0yOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCPL8PmZMUXKPHkQGamFlwthWMhP6laB6kAAdB67uIYnDk3XoWNvIa3g3+56 Tnl4EXOukF2HQxAlmqIwcUi9MAYvU/01jkNSSChPCR7Qr1yrvbUKNlRmx/LK9mk9 DJsos8xPXeD5+SoMJ9639qCm8b6rdV75e9FDyeHaiOLcYrVAolKQ6wYRV+vikeyR NYlaXBs3X/gO0isY3soqz0HZfKa48ApOgYH9NbZbxwnNkg6H7iiUDdMQfxEW/9H4 ziiVQy+SAg+PnHWNmg6oRnX/sNH/19FzGjK1H15750VaqhE79YiVZivWwyZWpv6d TOxJ77KXp4y3ZnxDJZSiqcaOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5QH+Kb l4cvWHIJ2K73OWp6K/K1MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYjXc9A54BZ2zFnzNW1y998Hq+Z08fv0ei8NU46UCh7eWaUn6eiPW9 G+tE7hdr4px8eouVxFyCJiORB+QLS577MvKn38gxwa2UMd2wgoBG6W2KDThXkJY2 6214l4+ImhD+GRXfNj9uQQq7XYEuSPFkaqgeQZ+QPNn1Ndom6I70bybMTAn5ugtq TQ+lsYwEvQydN5+9K+sbUSq8p85h1nwS+vl1gE0jFBOZJn6V9WYYVK/HRjVDsbyd Pbpsk6J3pnuwoJiSqPm9m2/z0EPEsp7thmVHDkGk5fjXYchNIHT6dOntavK3Dn93 UulbpTg2c2XTrNB7wXNlYa7/MooxEU+Y -----END CERTIFICATE-----Generated at Thu Oct 23 05:28:15 2025 by rpki-client