$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: XWUuoWDoPW2fr1EZmWjdwvLCOtzQXLe0fSWRhg0acrY= Subject key identifier: 7C:69:1D:D8:42:92:19:7A:8C:32:01:17:1C:CF:33:AC:33:4D:E8:32 Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 1932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 1908 Signing time: Sun 26 Oct 2025 16:39:20 +0000 Manifest this update: Sun 26 Oct 2025 16:39:19 +0000 Manifest next update: Sun 02 Nov 2025 16:39:19 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: E5uS1kbN17w3rzhnMinmSmW+ET2QLBEP7eVtLIHAMDM=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8=) 3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: irpR0h3jscaijLl59Cc3m/8UUXHvczEBFVSowrAT4Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 16:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6450 (0x1932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: Oct 26 16:39:19 2025 GMT Not After : Nov 2 16:39:19 2025 GMT Subject: CN=68fe4eb8-2c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:62:76:f7:db:dd:e2:ff:d2:37:31:c9:c8:56: eb:7f:ff:74:e7:44:48:c1:e0:7f:c4:c6:aa:4f:ce: 6a:b6:5c:f0:df:98:76:51:40:99:b4:f1:be:07:3c: 70:aa:9c:9b:45:53:c5:18:6a:1e:43:bb:aa:52:92: 50:29:08:c7:f2:f7:3a:62:8b:88:a0:95:27:2b:7d: 31:e4:e4:7c:eb:cb:1c:d6:69:b6:85:78:2e:8e:3b: 3d:05:5a:cd:88:32:1a:22:c1:36:c4:0c:13:24:2f: 68:6c:db:45:92:db:45:81:23:ca:c5:9a:b8:67:cd: b4:f2:eb:b8:e0:7f:f6:5e:af:84:f0:38:6e:27:f8: 5d:e1:61:d3:9d:7e:b7:50:ed:43:4d:2c:d9:4a:8c: bf:8d:c0:f2:03:51:ac:0a:e9:8f:50:38:d0:61:3a: d3:a4:a6:11:e7:0b:23:7b:13:dd:50:b7:00:f6:f0: fd:f4:f0:97:ef:28:81:15:3e:f0:bd:14:f4:26:68: 8a:3f:64:f6:62:14:c9:18:f2:9d:f1:89:83:11:c7: 6e:43:31:fa:21:33:5e:3d:67:63:04:c8:58:0c:4d: 53:d8:19:a2:1f:9e:b4:96:db:57:f9:65:bb:4e:75: 31:f6:1d:4a:13:6a:fc:34:be:6a:bd:02:8a:c7:7a: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:1D:D8:42:92:19:7A:8C:32:01:17:1C:CF:33:AC:33:4D:E8:32 X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cf:06:fe:b4:5d:74:43:fb:44:75:21:2f:5e:37:b1:de:e3: 73:0f:6e:2b:86:34:d6:d5:6a:0e:f2:e9:c5:b5:38:46:68:56: d0:d3:bb:59:87:d3:00:8b:b4:87:b8:e4:d8:b4:77:a4:b4:4e: 75:69:44:d9:7d:de:2f:f0:79:26:85:68:7a:11:43:e0:50:97: 02:14:1e:57:6e:ad:77:ad:be:38:b4:e9:ff:fb:ca:60:ba:c4: 57:7c:b7:f8:d8:62:2e:c1:d7:6f:f0:58:53:d1:94:14:c1:43: fe:8a:8f:b0:5c:f8:16:64:0d:30:07:5a:61:74:db:bf:12:4d: 35:a5:7d:b7:78:0b:68:75:11:ee:1e:cc:e0:5d:4a:0c:34:61: 08:1d:bd:d6:8f:0a:52:eb:17:8c:65:3f:2a:d2:bb:02:dd:b1: 6f:dd:97:21:6b:39:e3:10:89:7f:f1:de:56:3d:c1:ce:3f:da: f8:09:67:ab:88:dd:42:24:14:c0:72:ba:e3:fd:94:61:de:97: 3f:41:6e:cf:d1:00:17:27:b7:bc:5b:2d:42:b6:14:1c:28:f2: 89:71:50:0f:77:eb:e1:d4:42:e1:66:19:b9:9a:51:74:c7:4b: ab:2a:20:e5:af:67:9d:a8:2a:b5:38:d9:ba:1c:86:71:60:f2: f7:5c:67:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjUxMDI2MTYzOTE5WhcNMjUxMTAyMTYzOTE5WjAYMRYwFAYD VQQDEw02OGZlNGViOC0yYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mJ299vd4v/SNzHJyFbrf/9050RIweB/xMaqT85qtlzw35h2UUCZtPG+Bzxw qpybRVPFGGoeQ7uqUpJQKQjH8vc6YouIoJUnK30x5OR868sc1mm2hXgujjs9BVrN iDIaIsE2xAwTJC9obNtFkttFgSPKxZq4Z8208uu44H/2Xq+E8DhuJ/hd4WHTnX63 UO1DTSzZSoy/jcDyA1GsCumPUDjQYTrTpKYR5wsjexPdULcA9vD99PCX7yiBFT7w vRT0JmiKP2T2YhTJGPKd8YmDEcduQzH6ITNePWdjBMhYDE1T2BmiH560lttX+WW7 TnUx9h1KE2r8NL5qvQKKx3pMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxpHdhC khl6jDIBFxzPM6wzTegyMB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHzwb+tF10Q/tEdSEvXjex3uNzD24rhjTW1WoO8unFtThGaFbQ07tZ h9MAi7SHuOTYtHektE51aUTZfd4v8HkmhWh6EUPgUJcCFB5Xbq13rb44tOn/+8pg usRXfLf42GIuwddv8FhT0ZQUwUP+io+wXPgWZA0wB1phdNu/Ek01pX23eAtodRHu HszgXUoMNGEIHb3WjwpS6xeMZT8q0rsC3bFv3ZchaznjEIl/8d5WPcHOP9r4CWer iN1CJBTAcrrj/ZRh3pc/QW7P0QAXJ7e8Wy1CthQcKPKJcVAPd+vh1ELhZhm5mlF0 x0urKiDlr2edqCq1ONm6HIZxYPL3XGeT -----END CERTIFICATE-----Generated at Mon Oct 27 04:26:38 2025 by rpki-client