$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: g0euPEgot0q4BaXN2fs6zIO4OnETNkdWA4W4ygvbv2g= Subject key identifier: E2:70:D7:45:F7:BC:85:2B:A1:F7:A0:44:E6:95:C9:9D:3E:39:F3:22 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 01BD Signing time: Mon 03 Nov 2025 03:04:36 +0000 Manifest this update: Mon 03 Nov 2025 03:04:35 +0000 Manifest next update: Mon 10 Nov 2025 03:04:35 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: Mzx5BlzCf5J6LbuW/X08w5cVLNFzfABfJJKWFrikg64=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Nov 3 03:04:35 2025 GMT Not After : Nov 10 03:04:35 2025 GMT Subject: CN=69081bc3-5211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ba:f3:40:fc:0c:34:38:2d:b6:17:1e:6b:c0: 7c:7c:33:b2:d8:08:6d:5e:b6:3d:78:7b:84:01:bf: 40:e3:e4:2e:99:0b:41:25:39:e6:b0:f7:1e:3f:06: c3:07:85:81:ca:fe:3a:8d:e7:b0:19:f9:50:dd:d2: 4b:62:98:72:2b:7e:f0:80:59:58:05:e8:6b:fb:21: 95:79:e9:dc:44:68:7c:0f:ac:05:a0:d6:f7:da:3f: 48:e4:69:ff:89:eb:95:1c:09:c7:ee:e1:e6:c8:cc: fa:6d:61:6e:35:9a:cf:27:84:a4:6b:ae:33:ec:11: 61:eb:12:e7:83:a4:c6:98:9d:9f:ca:40:7c:0f:7c: 5b:76:18:ff:d6:e8:6b:87:54:5c:30:ba:92:e7:e8: 78:ba:27:a1:c2:10:fc:87:ac:0c:52:d8:56:a8:94: ef:20:fb:45:21:22:31:d7:76:ac:28:72:d0:59:84: 50:36:01:da:2d:02:d8:68:d4:cc:28:c5:1a:aa:e1: 75:b1:64:6d:91:6e:58:a9:15:d7:ec:4e:ad:d7:1b: 28:24:57:48:f8:36:50:d1:56:9b:9b:eb:5c:96:d9: c6:36:c5:10:48:c9:d4:09:af:18:e0:39:97:c5:95: 76:51:7f:ae:83:ed:d2:96:57:bf:89:3e:f8:b1:09: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:D7:45:F7:BC:85:2B:A1:F7:A0:44:E6:95:C9:9D:3E:39:F3:22 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2c:67:53:b9:06:7d:55:43:12:b9:28:94:2b:58:fd:75:5f: 66:9c:04:f7:3b:5a:fa:3b:a9:7f:47:e3:e1:50:84:53:b9:c9: 6c:8a:7e:26:68:ae:65:4a:08:11:2c:36:f4:a7:6c:3a:2f:73: 17:e1:59:02:2e:7e:8a:a3:e4:91:11:c4:78:29:32:3c:fb:6c: 6a:1e:cb:7c:9d:46:9c:f7:14:79:fd:82:5e:6b:58:09:50:3a: d2:fb:99:63:57:bd:2e:b8:7d:20:c3:4a:3f:0a:57:04:90:5d: d7:db:26:8f:c7:28:32:ee:7e:a2:00:c2:d8:12:e8:7f:c2:b5: d5:dd:04:2c:de:35:e4:a2:6e:c6:19:14:bb:8d:e9:61:86:ad: 10:b8:b0:96:80:57:9b:72:f2:78:70:d4:8e:35:22:5e:14:1a: 47:38:a3:0e:31:81:d0:d7:f1:71:b3:d9:da:c1:3b:33:fe:5c: 4c:e0:87:01:28:cd:a9:27:c1:65:02:d2:a8:61:c3:af:85:a5: 9c:dc:1c:76:cb:c3:a2:76:79:ea:e5:44:51:35:b5:9f:a4:77: 4c:64:cc:d4:69:01:87:28:87:ac:72:05:bc:38:f9:cf:0a:2a: a2:1c:0f:ea:f4:6c:22:20:48:5a:01:1f:20:77:fa:6b:35:e9: d6:d7:74:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUxMTAzMDMwNDM1WhcNMjUxMTEwMDMwNDM1WjAYMRYwFAYD VQQDEw02OTA4MWJjMy01MjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87rzQPwMNDgtthcea8B8fDOy2AhtXrY9eHuEAb9A4+QumQtBJTnmsPcePwbD B4WByv46jeewGflQ3dJLYphyK37wgFlYBehr+yGVeencRGh8D6wFoNb32j9I5Gn/ ieuVHAnH7uHmyMz6bWFuNZrPJ4Ska64z7BFh6xLng6TGmJ2fykB8D3xbdhj/1uhr h1RcMLqS5+h4uiehwhD8h6wMUthWqJTvIPtFISIx13asKHLQWYRQNgHaLQLYaNTM KMUaquF1sWRtkW5YqRXX7E6t1xsoJFdI+DZQ0Vabm+tcltnGNsUQSMnUCa8Y4DmX xZV2UX+ug+3Slle/iT74sQmFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJw10X3 vIUrofegROaVyZ0+OfMiMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYLGdTuQZ9VUMSuSiUK1j9dV9mnAT3O1r6O6l/R+PhUIRTuclsin4m aK5lSggRLDb0p2w6L3MX4VkCLn6Ko+SREcR4KTI8+2xqHst8nUac9xR5/YJea1gJ UDrS+5ljV70uuH0gw0o/ClcEkF3X2yaPxygy7n6iAMLYEuh/wrXV3QQs3jXkom7G GRS7jelhhq0QuLCWgFebcvJ4cNSONSJeFBpHOKMOMYHQ1/Fxs9nawTsz/lxM4IcB KM2pJ8FlAtKoYcOvhaWc3Bx2y8Oidnnq5URRNbWfpHdMZMzUaQGHKIescgW8OPnP CiqiHA/q9GwiIEhaAR8gd/prNenW13Sv -----END CERTIFICATE-----Generated at Tue Nov 4 16:02:51 2025 by rpki-client