$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: 8986ol7435dRaooSSPph9Ffzj2VhHqY0p9nm4jlx2ko= Subject key identifier: D9:58:2C:70:63:F1:A7:B3:2A:32:95:11:E6:52:0F:98:73:7C:E0:48 Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 64 Signing time: Wed 05 Nov 2025 07:21:02 +0000 Manifest this update: Wed 05 Nov 2025 07:21:01 +0000 Manifest next update: Wed 12 Nov 2025 07:21:01 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: ZSUrvpXDaSclbeCmkp02a4bmolvIJUKxe0V/3O0Z9to=) 2: FAB0D026881F11F0AAA2086FC4F9AE02.roa (hash: p6QY5PVIvSx1qqEScHsp8RNr6LjcbKhzpMC+wNmfh+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Nov 5 07:21:01 2025 GMT Not After : Nov 12 07:21:01 2025 GMT Subject: CN=690afade-5dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:cb:2f:59:26:ce:a2:07:48:06:19:02:ba: 20:d7:f4:6f:89:9a:5b:65:d4:2f:93:86:ac:27:06: e9:2e:dc:66:f1:6f:75:12:6d:23:1e:54:a3:35:23: b9:dd:1b:69:a1:04:59:14:d9:3c:57:6c:4d:ef:f8: 35:4d:a8:91:72:8d:56:dc:03:95:11:6e:c1:8b:83: 61:85:ff:ed:9a:94:00:0c:02:d0:5d:54:2d:61:57: 32:0a:fa:de:5d:5e:b6:b0:a7:3e:09:00:38:05:ae: ed:98:3e:18:66:f3:38:40:d3:e2:6a:c8:84:d8:bb: 40:08:29:38:e2:73:2b:a0:30:42:cd:8e:ae:ba:80: 95:8f:06:46:15:41:8a:35:e7:1e:93:e6:c6:c9:6a: 92:3a:ab:fb:f5:65:e8:c4:24:38:0f:66:ab:71:f7: 32:c0:1f:68:84:28:b5:30:f0:b6:a9:3b:b6:a2:9a: 47:c3:3f:eb:9e:a2:49:96:bc:b4:62:83:9f:3c:71: 2e:dd:42:11:e1:89:68:3b:5f:87:1f:67:cd:03:72: 97:53:63:74:5c:77:94:ac:63:28:cf:8a:8b:41:0a: ca:e1:8e:8b:a7:6d:41:73:12:dc:b8:3a:16:d5:f3: 86:dc:fe:ec:f8:03:a6:84:58:42:af:ae:f8:34:e6: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:58:2C:70:63:F1:A7:B3:2A:32:95:11:E6:52:0F:98:73:7C:E0:48 X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ce:78:6f:08:15:bc:35:61:aa:e5:59:12:c5:f6:4c:dd:73: 1c:86:9d:0f:6c:e6:09:0e:37:23:04:c1:67:18:85:03:a1:22: bb:47:ab:6c:c6:44:e1:da:3f:7e:80:95:7b:24:21:8c:3e:d4: 95:b7:c5:a4:7e:30:57:6d:51:8b:c1:85:2f:79:f0:9a:76:a1: aa:ab:3b:66:ae:b7:d5:ec:e6:db:ec:43:0e:52:0b:82:0b:7f: 14:49:1a:a9:90:e1:85:9f:26:ea:82:14:dd:b3:8d:77:d5:db: 4a:a2:ca:76:f7:4e:4d:45:4e:b9:5e:84:c1:b9:27:b9:73:69: d5:89:df:d4:e2:fc:d6:67:79:10:e0:99:00:1f:0c:3d:ad:19: 07:eb:c0:54:76:ed:d5:ef:b8:d1:8b:5c:d7:ce:b2:62:ac:a3: 75:e1:ad:25:22:8f:c7:6c:9e:22:c0:38:ea:a1:fd:12:18:b4: ed:af:a5:0b:b0:40:b7:46:3b:6a:6c:a1:01:6a:22:a1:61:e6: 28:c3:8a:77:e1:cb:b7:32:cc:87:1f:f3:3b:68:d3:9f:26:f5: 13:11:22:ee:db:55:b1:1f:e9:cc:10:56:5d:7a:a7:bc:87:b9: 30:7a:40:59:58:e2:f4:c2:2e:bf:83:18:6b:3d:d0:3a:9b:f2: dd:e1:27:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTExMDUwNzIxMDFaFw0yNTExMTIwNzIxMDFaMBgxFjAUBgNV BAMTDTY5MGFmYWRlLTVkZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUocsvWSbOogdIBhkCuiDX9G+Jmltl1C+ThqwnBuku3Gbxb3USbSMeVKM1I7nd G2mhBFkU2TxXbE3v+DVNqJFyjVbcA5URbsGLg2GF/+2alAAMAtBdVC1hVzIK+t5d Xrawpz4JADgFru2YPhhm8zhA0+JqyITYu0AIKTjicyugMELNjq66gJWPBkYVQYo1 5x6T5sbJapI6q/v1ZejEJDgPZqtx9zLAH2iEKLUw8LapO7aimkfDP+ueokmWvLRi g588cS7dQhHhiWg7X4cfZ80DcpdTY3Rcd5SsYyjPiotBCsrhjounbUFzEty4OhbV 84bc/uz4A6aEWEKvrvg05nY9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2VgscGPx p7MqMpUR5lIPmHN84EgwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHOeG8IFbw1YarlWRLF9kzdcxyGnQ9s5gkONyMEwWcYhQOhIrtHq2zG ROHaP36AlXskIYw+1JW3xaR+MFdtUYvBhS958Jp2oaqrO2aut9Xs5tvsQw5SC4IL fxRJGqmQ4YWfJuqCFN2zjXfV20qiynb3Tk1FTrlehMG5J7lzadWJ39Ti/NZneRDg mQAfDD2tGQfrwFR27dXvuNGLXNfOsmKso3XhrSUij8dsniLAOOqh/RIYtO2vpQuw QLdGO2psoQFqIqFh5ijDinfhy7cyzIcf8zto058m9RMRIu7bVbEf6cwQVl16p7yH uTB6QFlY4vTCLr+DGGs90Dqb8t3hJxo= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:36 2025 by rpki-client