$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json) Hash identifier: EwlkA3vMycyiOXpfLi4DeurxycwPYCsZQYsbYpC3EYU= Subject key identifier: 1A:B2:6E:E9:41:BD:B6:23:8A:CB:AA:7B:BF:EE:B2:59:E4:9B:C4:88 Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft Manifest number: 08DB Signing time: Tue 04 Nov 2025 20:29:07 +0000 Manifest this update: Tue 04 Nov 2025 20:29:06 +0000 Manifest next update: Tue 11 Nov 2025 20:29:06 +0000 Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: Y+FoeJ0hpixYDaufDS5Suubz7J6ttD1kPZaxKn0TA5I=) 2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=) 3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=) 4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=) 5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Validity Not Before: Nov 4 20:29:06 2025 GMT Not After : Nov 11 20:29:06 2025 GMT Subject: CN=690a6212-aaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:28:99:51:ba:0e:15:10:f1:50:1e:31:83: df:96:12:2c:20:d8:b8:60:0e:04:37:d8:82:43:c5: fa:bb:16:5b:05:8b:7e:3d:88:06:a8:0c:fa:c2:67: ff:25:91:b6:de:6c:94:44:e6:e2:24:ce:54:a0:52: c7:c9:c3:5a:04:4e:bc:05:a0:b7:b3:16:1c:f9:5c: 01:b7:d8:b1:76:40:8b:36:0d:bc:fd:e6:c3:04:93: 77:55:43:ed:89:e2:36:9d:99:1d:21:fd:a4:eb:76: 96:d7:85:33:ee:31:25:f6:9e:89:91:e9:d8:28:24: 60:2e:dc:d6:43:21:b0:20:12:d3:34:a9:7f:72:6b: 21:62:6c:ba:d6:3a:4c:b3:57:8f:72:52:94:01:55: 06:aa:1e:01:29:58:f9:4a:d1:cd:a5:69:f8:7a:37: f5:30:46:81:4e:49:e3:93:0d:cf:fe:f2:9c:25:bb: 43:b5:27:1d:e4:78:86:69:b5:8c:6b:92:79:be:b8: b4:46:8a:c1:bc:bd:aa:33:06:63:df:04:b0:c6:07: ce:69:51:d1:46:a8:1d:7f:8d:f3:22:f0:87:65:90: 52:22:21:26:41:92:f3:a0:31:d7:a3:c1:56:fc:f8: 6b:8f:0e:15:7b:fa:79:75:bb:7c:15:ba:2e:26:c1: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:6E:E9:41:BD:B6:23:8A:CB:AA:7B:BF:EE:B2:59:E4:9B:C4:88 X509v3 Authority Key Identifier: keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7f:1d:56:fc:6f:ae:e3:e0:f2:c5:18:3b:7a:55:4a:40:e3: a4:da:e4:aa:e0:76:f0:c5:b3:84:ac:99:ca:fd:97:ca:3c:29: dd:1d:9b:c4:85:86:e2:c4:65:10:5b:06:2f:45:e2:08:4f:c9: 22:90:34:80:74:86:91:c9:f5:f1:45:76:30:bd:61:e7:75:bd: cb:87:24:0b:d6:0f:e1:05:38:24:7f:64:7c:f2:e6:40:64:eb: 86:4c:88:86:e8:0f:14:ee:6d:75:63:6a:40:2a:03:9d:97:b6: 46:d9:af:12:bd:ec:93:d1:d5:c7:e5:fc:cd:33:4d:a8:bf:d1: 8f:5a:5b:4d:7a:4e:a8:92:19:6f:b9:65:20:31:98:80:9a:d0: da:99:8c:cd:13:85:17:e1:a7:a6:d2:c8:b7:7a:56:c2:5f:99: bb:a3:36:d2:ca:aa:4d:25:1b:a7:65:00:0d:c8:34:56:02:63: 0a:ec:b3:0d:72:31:ab:23:12:d9:ce:be:d9:b8:9e:66:5d:92: 60:24:78:1c:4b:ba:9a:ba:d8:b9:de:73:8e:7c:5d:8b:52:46: 9d:6f:7f:6b:b3:c4:9c:7c:99:6f:76:e7:dc:af:c2:2d:ca:a8: 3c:61:b0:db:8a:e3:43:39:82:7d:47:4c:11:a8:0e:33:b0:c2: 3b:2a:93:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1 NTQyMkIxOEUwHhcNMjUxMTA0MjAyOTA2WhcNMjUxMTExMjAyOTA2WjAYMRYwFAYD VQQDEw02OTBhNjIxMi1hYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1AomVG6DhUQ8VAeMYPflhIsINi4YA4EN9iCQ8X6uxZbBYt+PYgGqAz6wmf/ JZG23myURObiJM5UoFLHycNaBE68BaC3sxYc+VwBt9ixdkCLNg28/ebDBJN3VUPt ieI2nZkdIf2k63aW14Uz7jEl9p6JkenYKCRgLtzWQyGwIBLTNKl/cmshYmy61jpM s1ePclKUAVUGqh4BKVj5StHNpWn4ejf1MEaBTknjkw3P/vKcJbtDtScd5HiGabWM a5J5vri0RorBvL2qMwZj3wSwxgfOaVHRRqgdf43zIvCHZZBSIiEmQZLzoDHXo8FW /Phrjw4Ve/p5dbt8FbouJsHB8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqybulB vbYjisuqe7/uslnkm8SIMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjlGQi8yMEFENDgzNEJGMzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19F OFdnYWlTeEhNaUZWUWlzWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvfx1W/G+u4+DyxRg7elVKQOOk2uSq4HbwxbOErJnK/ZfKPCndHZvE hYbixGUQWwYvReIIT8kikDSAdIaRyfXxRXYwvWHndb3LhyQL1g/hBTgkf2R88uZA ZOuGTIiG6A8U7m11Y2pAKgOdl7ZG2a8SveyT0dXH5fzNM02ov9GPWltNek6okhlv uWUgMZiAmtDamYzNE4UX4aem0si3elbCX5m7ozbSyqpNJRunZQANyDRWAmMK7LMN cjGrIxLZzr7ZuJ5mXZJgJHgcS7qauti53nOOfF2LUkadb39rs8ScfJlvdufcr8It yqg8YbDbiuNDOYJ9R0wRqA4zsMI7KpPA -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:54 2025 by rpki-client