$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: 26Q6xV5qnLpjJPRPGmnK/NsLx0Gmma60aQZZ6xHc2rM= Subject key identifier: 7C:FE:73:55:D2:6D:05:AD:1E:09:94:54:68:CF:B2:05:32:5A:BC:AB Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 013D Signing time: Mon 03 Nov 2025 04:27:42 +0000 Manifest this update: Mon 03 Nov 2025 04:27:42 +0000 Manifest next update: Mon 10 Nov 2025 04:27:42 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: /YgjhVXXAWo+E9rQOxKdgX4j1lScKyc0DI6pl94yevA=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: Jluh9mrxLx3CmJG4INslPH8RKZMT0C9KwG0Dzzekk1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: Nov 3 04:27:42 2025 GMT Not After : Nov 10 04:27:42 2025 GMT Subject: CN=69082f3e-7628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:d7:63:b8:2a:82:11:66:07:39:f0:b1:62: e5:cd:cf:ad:e0:4d:60:95:a8:00:e5:e7:c8:40:1e: 78:93:2e:69:b1:56:c4:39:de:18:6e:02:9f:bf:ce: df:4c:ec:0f:a2:8f:9f:83:5f:15:d5:aa:53:b1:67: 0e:c0:f7:72:66:a1:65:4c:16:e4:10:d9:73:a8:34: 66:a8:df:5e:4e:af:73:e5:a5:86:e6:5d:d9:9a:73: eb:3f:b6:b8:41:b9:b5:ee:56:7a:ea:90:9e:de:b2: e3:54:96:ba:77:d2:90:95:9b:7c:a2:5b:50:af:2d: 5b:40:91:3b:9a:b1:48:17:fc:6a:3c:9f:f9:37:2f: eb:6f:e2:57:56:63:4c:5c:7e:55:6a:36:e8:2e:1c: 73:e3:bc:05:69:e6:e6:b4:4d:3f:58:e1:dc:20:b7: d6:10:81:ee:74:d0:78:7c:1e:85:ec:e6:b7:b3:1d: fc:bb:b2:f4:79:2b:f5:3a:dc:21:1e:da:da:b7:1c: 6f:18:50:8c:99:a5:01:18:ae:74:0e:ac:d6:de:19: 51:3c:1a:a6:97:cb:b6:5e:f4:b0:5a:7e:b0:42:4f: e9:22:97:92:af:ab:f1:a1:a6:36:ed:cf:f2:c9:a6: 2b:28:d8:a0:84:4f:77:67:88:6a:cf:16:52:5f:de: f8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FE:73:55:D2:6D:05:AD:1E:09:94:54:68:CF:B2:05:32:5A:BC:AB X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e2:f0:6e:00:df:6e:82:86:a5:3f:58:f8:e7:ea:ca:c5:95: 3f:3a:1b:4b:3e:5c:a9:4c:d0:79:26:06:b6:f3:7a:2a:93:c9: 24:57:07:55:2d:55:5b:84:85:b4:7e:e9:d2:6e:7a:4e:d5:2e: e6:95:a0:eb:b9:22:9b:da:75:4a:a5:61:df:80:92:59:3e:89: 39:26:74:b7:72:c2:77:32:06:75:57:34:37:97:25:8b:70:cc: 2f:14:03:44:02:b1:09:c1:d5:a8:62:41:ac:d8:39:9d:82:ad: 4e:d2:f6:a6:72:ae:b8:77:38:fa:57:30:9d:99:4b:09:a7:bc: 1b:f9:56:f6:ad:68:7f:d3:19:f7:72:cd:84:c0:a9:af:2e:b2: 1c:33:a9:20:ff:3f:8b:38:3a:35:04:0a:bd:a5:30:0e:a0:86: 05:65:73:ef:95:b3:ea:0e:14:9a:b4:43:15:38:05:fb:2a:76: 63:4e:d7:89:4f:64:e0:4e:d3:25:7d:4f:52:80:de:7d:05:b2: ad:7c:b2:40:d3:c2:61:c9:5c:1f:d8:78:7b:f2:ba:59:9a:e0: d2:46:24:20:4c:f5:a9:43:ce:22:9a:6b:d6:36:7c:9f:6a:6a: 68:d3:a0:58:35:ed:87:f4:87:94:89:1f:ac:31:be:2b:c9:ed: ad:55:2b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE ODJDNDhDRTIwHhcNMjUxMTAzMDQyNzQyWhcNMjUxMTEwMDQyNzQyWjAYMRYwFAYD VQQDEw02OTA4MmYzZS03NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIHXY7gqghFmBznwsWLlzc+t4E1glagA5efIQB54ky5psVbEOd4YbgKfv87f TOwPoo+fg18V1apTsWcOwPdyZqFlTBbkENlzqDRmqN9eTq9z5aWG5l3ZmnPrP7a4 Qbm17lZ66pCe3rLjVJa6d9KQlZt8oltQry1bQJE7mrFIF/xqPJ/5Ny/rb+JXVmNM XH5VajboLhxz47wFaebmtE0/WOHcILfWEIHudNB4fB6F7Oa3sx38u7L0eSv1Otwh HtratxxvGFCMmaUBGK50DqzW3hlRPBqml8u2XvSwWn6wQk/pIpeSr6vxoaY27c/y yaYrKNighE93Z4hqzxZSX974dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz+c1XS bQWtHgmUVGjPsgUyWryrMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1 RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15 bkU4RVhETmtjT25ZTEVqT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh4vBuAN9ugoalP1j45+rKxZU/OhtLPlypTNB5Jga283oqk8kkVwdV LVVbhIW0funSbnpO1S7mlaDruSKb2nVKpWHfgJJZPok5JnS3csJ3MgZ1VzQ3lyWL cMwvFANEArEJwdWoYkGs2Dmdgq1O0vamcq64dzj6VzCdmUsJp7wb+Vb2rWh/0xn3 cs2EwKmvLrIcM6kg/z+LODo1BAq9pTAOoIYFZXPvlbPqDhSatEMVOAX7KnZjTteJ T2TgTtMlfU9SgN59BbKtfLJA08JhyVwf2Hh78rpZmuDSRiQgTPWpQ84immvWNnyf ampo06BYNe2H9IeUiR+sMb4rye2tVSu4 -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:46 2025 by rpki-client