$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: 3qDDggF40n1UX4Bg4YFwwsXLlWtwYJyRAAFlx10EZmo= Subject key identifier: 9F:C2:7E:26:83:EC:F8:EE:86:71:98:67:F0:FF:62:31:FD:80:F0:6B Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1401 Signing time: Sun 02 Nov 2025 19:12:49 +0000 Manifest this update: Sun 02 Nov 2025 19:12:49 +0000 Manifest next update: Sun 09 Nov 2025 19:12:49 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: 8zMDEH0iN8lDVYvVr76qvab4pWT4Ol8A8v2CEnZeXFE=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Nov 2 19:12:49 2025 GMT Not After : Nov 9 19:12:49 2025 GMT Subject: CN=6907ad31-105c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:68:18:d6:0b:df:ec:b8:af:d4:9a:c1:8d: c6:d6:bf:9c:60:61:40:32:26:43:2e:82:e8:80:0d: 43:79:5b:28:24:cc:3b:f2:54:ea:cd:7e:c1:b1:4f: e4:ed:36:6d:cf:27:c7:cd:66:cd:26:74:6a:41:2c: 4c:88:05:ff:8e:b0:05:ab:f7:9b:6f:0d:92:00:9c: ce:4c:00:84:ad:9b:b2:6a:ac:ed:93:10:3e:42:02: c6:33:62:e0:4b:b5:32:43:ed:b0:85:58:bb:6f:28: 46:f2:84:70:89:77:5c:4c:a2:35:e6:96:59:5e:91: 79:90:d6:26:bc:4b:6b:b6:be:2b:41:fa:7d:38:95: 34:d6:81:d4:7c:82:25:89:6f:2e:3f:5e:b1:96:a3: ec:ed:ba:6d:73:c0:e6:fd:be:2a:79:ec:90:2d:3a: a0:40:e6:c5:e4:8e:a1:aa:72:2d:7a:54:d2:53:78: 88:66:5e:91:7f:d2:8d:c9:4d:86:e8:47:bc:2a:7d: bc:ab:aa:76:7f:b1:bf:7d:14:9c:ea:bf:88:8c:14: ac:d0:08:31:e7:61:6b:ed:a7:ab:8a:92:d0:75:ec: ba:e3:23:11:1d:76:df:2b:e4:de:ae:ee:48:33:f4: 5b:31:79:36:5d:c4:c4:46:11:8b:78:50:0d:93:a5: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C2:7E:26:83:EC:F8:EE:86:71:98:67:F0:FF:62:31:FD:80:F0:6B X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c5:1e:81:93:87:59:7d:90:7a:0c:83:96:29:9b:b8:e1:6f: 25:29:c0:f2:2b:4d:0f:5a:90:76:3d:07:3e:c3:be:80:5a:56: c5:32:2e:36:5d:cc:c6:ee:4e:c2:fa:df:31:9f:c0:cf:83:5d: 22:b1:84:5e:11:3b:4b:e4:69:42:d0:a7:86:88:39:34:d6:c0: ef:5d:94:f2:b1:9b:b7:3e:a0:8f:a2:55:58:04:91:15:cc:99: 2e:c6:74:f6:8a:7e:d2:4b:9d:0c:10:46:31:64:57:eb:c4:43: e0:7d:fa:a7:67:b3:0f:2e:43:9c:35:95:e9:ef:d7:31:6c:1a: 22:50:60:be:c7:62:ac:8d:f5:ee:0d:cd:5a:dd:78:bd:da:f7: 82:64:d1:7d:96:1f:03:c5:93:18:2b:c4:f8:e3:bb:06:24:40: ec:cf:0f:79:41:a0:ab:1f:34:7d:ec:f4:45:99:43:12:a5:56: 23:02:32:95:7c:27:b9:72:89:cf:1a:1c:2f:19:05:d7:e5:a3: 3d:02:40:86:ae:c1:5d:11:40:3f:8d:f4:81:42:d2:4e:73:29: c2:0c:32:f1:f0:84:ea:a0:64:21:3b:60:c8:89:11:0a:89:49: 6c:f3:e5:0f:90:2b:b9:cf:f0:28:42:94:a7:02:22:5b:19:05: d2:24:6d:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTExMDIxOTEyNDlaFw0yNTExMDkxOTEyNDlaMBgxFjAUBgNV BAMTDTY5MDdhZDMxLTEwNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7eGgY1gvf7Liv1JrBjcbWv5xgYUAyJkMuguiADUN5WygkzDvyVOrNfsGxT+Tt Nm3PJ8fNZs0mdGpBLEyIBf+OsAWr95tvDZIAnM5MAIStm7JqrO2TED5CAsYzYuBL tTJD7bCFWLtvKEbyhHCJd1xMojXmlllekXmQ1ia8S2u2vitB+n04lTTWgdR8giWJ by4/XrGWo+ztum1zwOb9vip57JAtOqBA5sXkjqGqci16VNJTeIhmXpF/0o3JTYbo R7wqfbyrqnZ/sb99FJzqv4iMFKzQCDHnYWvtp6uKktB17LrjIxEddt8r5N6u7kgz 9FsxeTZdxMRGEYt4UA2TpdR3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn8J+JoPs +O6GcZhn8P9iMf2A8GswHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTFHoGTh1l9kHoMg5Ypm7jhbyUpwPIrTQ9akHY9Bz7DvoBaVsUyLjZd zMbuTsL63zGfwM+DXSKxhF4RO0vkaULQp4aIOTTWwO9dlPKxm7c+oI+iVVgEkRXM mS7GdPaKftJLnQwQRjFkV+vEQ+B9+qdnsw8uQ5w1lenv1zFsGiJQYL7HYqyN9e4N zVrdeL3a94Jk0X2WHwPFkxgrxPjjuwYkQOzPD3lBoKsfNH3s9EWZQxKlViMCMpV8 J7lyic8aHC8ZBdfloz0CQIauwV0RQD+N9IFC0k5zKcIMMvHwhOqgZCE7YMiJEQqJ SWzz5Q+QK7nP8ChClKcCIlsZBdIkbaU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:58 2025 by rpki-client