$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: EsGcqqRnxzmztrwVaQxZo7xCuN7fJRmTJADTcugpSOs= Subject key identifier: C8:46:16:40:53:9B:74:2D:04:79:4F:3F:64:89:E3:20:A4:BD:2B:E1 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E47 Signing time: Sun 02 Nov 2025 17:48:02 +0000 Manifest this update: Sun 02 Nov 2025 17:48:01 +0000 Manifest next update: Sun 09 Nov 2025 17:48:01 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: QNTQnOXe+nRYCQJBZHeak73RhX6XvQntGBKXxXOajpg=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3664 (0xe50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Nov 2 17:48:01 2025 GMT Not After : Nov 9 17:48:01 2025 GMT Subject: CN=69079951-519f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9c:64:0a:c2:7e:66:8f:30:a9:3d:ef:fd:5d: f9:e1:35:a1:f8:a3:ac:28:42:07:c0:38:94:88:8f: 3c:b3:68:81:91:89:cb:63:86:9b:e2:6d:77:fe:c8: ae:87:fe:66:f3:8d:18:31:71:24:89:06:eb:57:8a: c5:88:3d:10:e2:ec:be:0c:0f:30:78:2a:2d:be:67: b0:bc:85:da:22:23:e7:2c:19:c2:ce:50:dd:67:5c: 1f:3e:b6:8d:0c:83:46:22:cc:49:43:77:0b:74:4a: 5c:28:08:22:ec:93:c6:ec:15:eb:4e:81:cc:70:e7: b7:18:42:41:e9:e4:5a:94:b2:07:80:09:59:28:c4: 6d:63:1d:13:99:9b:78:36:cd:4c:d3:40:20:65:09: c7:f8:87:13:c5:4d:04:a0:75:74:9a:68:4a:fc:68: 66:f2:0b:b0:46:93:36:f7:8e:fe:ef:e1:93:0d:c1: 2b:30:54:f9:76:ab:4f:d0:e9:f9:cd:31:6b:cd:11: 8c:db:f2:c5:69:70:6d:6c:51:16:1f:34:8a:15:93: be:4a:fa:a3:2d:8e:1b:c7:58:cb:19:ef:fe:ee:59: b4:af:19:50:e6:14:57:a3:11:ff:c5:73:9a:f6:98: eb:0f:84:2c:61:38:0e:e2:6d:40:40:a9:2d:a4:11: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:46:16:40:53:9B:74:2D:04:79:4F:3F:64:89:E3:20:A4:BD:2B:E1 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:da:72:64:9a:77:99:69:79:d3:36:92:16:12:b6:61:3c:72: bb:69:3e:ae:c0:d5:3f:22:1f:8b:64:6f:6f:9d:8b:ed:11:08: 6f:55:7e:1d:e7:8d:fd:17:a9:6a:ca:2e:63:e0:2e:ee:7a:30: ac:8d:e5:e1:61:ad:03:fc:73:db:bd:ee:1b:6b:9b:a1:7a:9c: ee:1f:58:35:29:64:b4:1e:79:8d:81:92:9e:56:7d:3c:12:98: 51:1d:67:9c:7e:c1:cc:18:24:15:74:01:9e:72:3a:e1:55:2f: b6:8b:e2:dd:62:a9:03:21:ef:b1:14:74:b5:69:6f:a0:e5:29: c1:3b:d7:51:e0:29:cf:44:8a:c1:cf:44:9b:10:cc:76:e3:7d: 57:91:d7:11:b7:0b:88:20:16:c9:05:48:12:51:57:60:4f:75: 64:d6:d6:b0:b8:54:0f:75:98:8d:61:63:37:bf:be:3f:a1:41: f0:98:41:63:63:1f:46:67:d6:27:33:a7:f6:13:c3:54:f9:10: 2d:ee:94:b1:8f:cd:a8:e8:7f:84:f2:cf:34:51:bf:d2:52:cf: 4c:a8:da:81:2d:2c:43:17:ef:15:41:d1:c9:48:3e:0e:ec:d1: de:40:b7:60:94:b8:0c:56:fb:fd:88:f0:c7:62:b3:2b:03:e1: 09:53:c2:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUxMTAyMTc0ODAxWhcNMjUxMTA5MTc0ODAxWjAYMRYwFAYD VQQDEw02OTA3OTk1MS01MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65xkCsJ+Zo8wqT3v/V354TWh+KOsKEIHwDiUiI88s2iBkYnLY4ab4m13/siu h/5m840YMXEkiQbrV4rFiD0Q4uy+DA8weCotvmewvIXaIiPnLBnCzlDdZ1wfPraN DINGIsxJQ3cLdEpcKAgi7JPG7BXrToHMcOe3GEJB6eRalLIHgAlZKMRtYx0TmZt4 Ns1M00AgZQnH+IcTxU0EoHV0mmhK/Ghm8guwRpM2947+7+GTDcErMFT5dqtP0On5 zTFrzRGM2/LFaXBtbFEWHzSKFZO+SvqjLY4bx1jLGe/+7lm0rxlQ5hRXoxH/xXOa 9pjrD4QsYTgO4m1AQKktpBFqeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhGFkBT m3QtBHlPP2SJ4yCkvSvhMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs2nJkmneZaXnTNpIWErZhPHK7aT6uwNU/Ih+LZG9vnYvtEQhvVX4d 5439F6lqyi5j4C7uejCsjeXhYa0D/HPbve4ba5uhepzuH1g1KWS0HnmNgZKeVn08 EphRHWecfsHMGCQVdAGecjrhVS+2i+LdYqkDIe+xFHS1aW+g5SnBO9dR4CnPRIrB z0SbEMx2431XkdcRtwuIIBbJBUgSUVdgT3Vk1tawuFQPdZiNYWM3v74/oUHwmEFj Yx9GZ9YnM6f2E8NU+RAt7pSxj82o6H+E8s80Ub/SUs9MqNqBLSxDF+8VQdHJSD4O 7NHeQLdglLgMVvv9iPDHYrMrA+EJU8KF -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:18 2025 by rpki-client