$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: 4OpqbrKgSKAjDlF8Z8pC0LZGxKkz2Mb+gSxkv7hxIaw= Subject key identifier: 88:61:15:7C:59:96:B4:E9:AC:E1:5B:8C:7A:D1:6E:BE:67:9C:D5:28 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 0221 Signing time: Fri 17 Oct 2025 04:28:41 +0000 Manifest this update: Fri 17 Oct 2025 04:28:41 +0000 Manifest next update: Fri 24 Oct 2025 04:28:41 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: 7NCQilJfe8k29ZQIE0si9jO/wQqZFEbhYJ7r799duVQ=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 04:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Oct 17 04:28:41 2025 GMT Not After : Oct 24 04:28:41 2025 GMT Subject: CN=68f1c5f9-e9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:9c:34:17:47:2f:52:1d:b1:0a:92:18:d0: e1:fb:b7:ae:1c:de:17:41:6c:5a:b3:ee:b1:5f:d5: 45:43:ac:53:3d:d1:47:ca:3e:39:fe:28:68:22:d4: ea:f0:89:1f:1b:2f:75:63:7b:60:bd:35:9a:f7:ed: b3:d6:ff:83:f7:28:0c:aa:71:99:12:36:5c:a3:c3: 74:f2:d1:17:da:7c:f7:0b:cf:28:7d:5a:f3:a8:13: c1:9a:8e:17:83:c2:ca:d6:61:e7:fc:36:c3:99:d1: 4a:95:0f:81:66:48:bc:71:ac:66:85:bb:6e:c9:50: 62:84:8e:e8:6b:f7:cc:2f:c9:b1:f5:fa:f0:92:2e: 4e:6b:09:a3:46:50:8d:a6:99:4a:2a:50:76:3e:c6: 4a:d5:80:2e:af:21:a8:ca:68:31:0e:c2:e0:87:8c: 23:1e:bf:46:68:93:71:a8:ea:e8:08:6e:2b:4c:b3: b1:5d:a3:78:8e:8a:4e:1d:2e:47:68:53:bd:99:77: 8a:f1:b5:d2:13:59:d8:85:0a:a6:bf:68:8f:62:0f: 64:c3:39:1a:21:d0:d5:93:c4:b8:b6:a0:f1:b7:6d: 09:7f:2a:b3:b2:c1:c3:94:20:5d:e8:83:aa:65:50: 27:9d:8c:cf:a8:6a:17:89:b7:a7:e3:a8:2f:23:fb: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:61:15:7C:59:96:B4:E9:AC:E1:5B:8C:7A:D1:6E:BE:67:9C:D5:28 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:49:86:b3:73:2b:d7:f5:74:a2:6a:b1:3d:4c:b9:52:34:05: 5b:fd:ac:be:47:05:6e:f7:63:1e:0a:ec:27:a3:ea:da:bb:0c: 46:1c:a4:d1:23:ef:66:8e:17:ce:0c:9a:e7:f0:0c:7c:23:82: b9:58:42:05:ce:a3:5a:38:94:39:2a:28:1b:dc:99:bb:f0:51: c1:37:b4:74:c3:38:2a:29:31:0d:c9:6a:aa:f3:a1:43:24:6b: 12:0d:90:a3:84:47:2a:cf:3c:89:c3:c8:2d:1e:e6:1d:2a:67: b4:a9:bd:75:ef:bd:06:ce:62:ab:b6:2e:10:39:16:f4:c8:cf: 70:02:bb:b6:b7:34:e0:e2:96:12:2b:84:e9:1c:c4:b2:68:ee: 62:41:98:56:09:33:23:38:0b:c3:00:b9:55:15:33:c7:e1:b4: a3:19:4a:55:08:a7:ec:11:2b:ec:65:1e:05:1b:69:05:99:35: 1a:32:c4:b1:33:06:03:4a:68:b2:08:cc:1d:00:b0:15:b3:38: 7d:ac:2b:6c:85:6a:6f:bc:cd:c4:d2:1b:4d:2b:2c:45:fd:73: 53:9d:1e:5a:5a:09:ff:13:67:57:16:a7:c8:08:66:03:9e:a4: e7:ec:5c:83:21:74:e0:a7:30:33:55:33:23:c6:1a:b2:d3:b9: 66:ee:84:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUxMDE3MDQyODQxWhcNMjUxMDI0MDQyODQxWjAYMRYwFAYD VQQDEw02OGYxYzVmOS1lOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ducNBdHL1IdsQqSGNDh+7euHN4XQWxas+6xX9VFQ6xTPdFHyj45/ihoItTq 8IkfGy91Y3tgvTWa9+2z1v+D9ygMqnGZEjZco8N08tEX2nz3C88ofVrzqBPBmo4X g8LK1mHn/DbDmdFKlQ+BZki8caxmhbtuyVBihI7oa/fML8mx9frwki5OawmjRlCN pplKKlB2PsZK1YAuryGoymgxDsLgh4wjHr9GaJNxqOroCG4rTLOxXaN4jopOHS5H aFO9mXeK8bXSE1nYhQqmv2iPYg9kwzkaIdDVk8S4tqDxt20JfyqzssHDlCBd6IOq ZVAnnYzPqGoXiben46gvI/sErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhhFXxZ lrTprOFbjHrRbr5nnNUoMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbSYazcyvX9XSiarE9TLlSNAVb/ay+RwVu92MeCuwno+rauwxGHKTR I+9mjhfODJrn8Ax8I4K5WEIFzqNaOJQ5Kigb3Jm78FHBN7R0wzgqKTENyWqq86FD JGsSDZCjhEcqzzyJw8gtHuYdKme0qb11770GzmKrti4QORb0yM9wAru2tzTg4pYS K4TpHMSyaO5iQZhWCTMjOAvDALlVFTPH4bSjGUpVCKfsESvsZR4FG2kFmTUaMsSx MwYDSmiyCMwdALAVszh9rCtshWpvvM3E0htNKyxF/XNTnR5aWgn/E2dXFqfICGYD nqTn7FyDIXTgpzAzVTMjxhqy07lm7oQ7 -----END CERTIFICATE-----Generated at Sat Oct 18 23:32:27 2025 by rpki-client