$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: rG6CegitKzULfojfsfnRjgTVBx7amuRW9wZlHeW15iM= Subject key identifier: B8:40:48:9A:C1:4E:6E:12:C1:DD:D7:0F:EB:5F:EA:2A:C1:BA:55:73 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: 0109 Signing time: Mon 03 Nov 2025 05:03:47 +0000 Manifest this update: Mon 03 Nov 2025 05:03:46 +0000 Manifest next update: Mon 10 Nov 2025 05:03:46 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: bJl8nWVCKomLAmqNEhBo7PSQZ5Fstx9HLO18Bv/0E8c=) 2: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: SrRGCeTkPcXvi63UKXsEnuqePLRhHVKqBX2soL9amKI=) 3: C06D45B6961611F0870D4413C4F9AE02.roa (hash: w0+vj4aVz0K4Becg/iBGdIuc8dYR3B+infU6zn+iFnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Validity Not Before: Nov 3 05:03:46 2025 GMT Not After : Nov 10 05:03:46 2025 GMT Subject: CN=690837b2-d1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:3d:28:95:5d:11:ae:28:05:ae:ff:32:f7: e6:5b:40:d4:fe:ca:b9:19:6c:87:20:4b:84:4d:ce: 7a:f8:ee:a0:0a:96:bd:e8:13:3f:86:52:88:d3:8f: d3:95:01:79:f4:7e:b7:1d:8d:14:2a:65:ec:fa:61: 13:cd:2a:b5:54:e9:31:ac:87:a2:3c:4a:08:88:26: a2:54:6f:5d:40:42:15:03:0b:d6:32:67:5d:a9:ef: 8b:36:4e:2e:97:07:22:96:e1:57:76:5b:12:d2:87: 7c:fa:2a:46:b4:78:2d:e0:99:96:0c:43:c2:c6:4f: 19:51:ee:b4:bc:4b:92:f6:75:5b:23:27:19:13:93: e2:4c:46:ac:3d:79:f7:0a:1e:46:de:ae:e5:48:59: 6e:fa:4a:be:8d:01:32:a9:17:e2:76:0e:e7:63:05: bf:27:af:29:69:f4:f1:30:ea:82:1a:b6:37:62:00: b0:15:58:cc:cb:9a:6b:60:cc:78:20:a9:85:63:7b: a7:a3:e3:fd:c6:d7:05:38:87:19:df:88:56:d3:9d: 5d:e2:6b:a7:d2:81:61:79:5e:87:f6:86:c7:c5:4f: 0e:e2:db:3f:b0:94:f2:47:31:4e:85:29:9b:69:a1: fb:e8:43:e1:3e:0c:f7:f2:bf:18:29:44:f6:8b:fb: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:48:9A:C1:4E:6E:12:C1:DD:D7:0F:EB:5F:EA:2A:C1:BA:55:73 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9a:94:6e:39:e0:98:a0:d1:24:28:56:1d:aa:21:f3:77:cb: ad:1b:0b:8c:0f:48:53:f4:f6:d7:f2:95:f7:a3:42:5d:36:88: 3e:06:f4:af:a1:4c:11:25:74:ad:ad:91:30:ef:83:c0:84:5a: 11:98:68:1b:3a:a6:d0:5c:8c:fa:a0:1d:15:c0:c0:40:03:1b: f0:dd:56:6d:f6:ca:ba:9f:bb:7f:33:56:ce:69:86:3f:c0:e3: 14:7c:ef:ff:5c:c5:1e:0a:d6:bc:e9:81:db:d4:cb:4e:89:84: 58:f8:13:88:6a:98:2c:ef:aa:5d:8b:07:38:68:e6:c9:92:f1: d5:07:ab:d9:9d:01:7f:83:2a:57:9d:5f:6e:cc:98:6c:96:5e: 66:9b:b5:9c:8d:f2:91:0e:b9:00:21:69:be:57:76:5d:a3:c3: 07:de:55:67:e6:24:5c:2b:11:a0:f9:1f:73:cf:cf:af:24:07: 4f:2e:02:bf:4b:8e:a6:ed:3b:d6:ed:de:f0:0d:8f:21:ea:f0: b6:9d:43:7e:ee:5d:f9:e8:6e:72:73:95:40:44:33:23:50:bd: 6b:47:dd:6a:d8:05:ab:74:c9:5b:3d:5f:c2:52:2d:ba:fd:a3: 13:64:8b:61:61:03:93:7e:b9:03:27:6f:fe:69:91:0f:d8:67: f2:50:f1:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUxMTAzMDUwMzQ2WhcNMjUxMTEwMDUwMzQ2WjAYMRYwFAYD VQQDEw02OTA4MzdiMi1kMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12Q9KJVdEa4oBa7/MvfmW0DU/sq5GWyHIEuETc56+O6gCpa96BM/hlKI04/T lQF59H63HY0UKmXs+mETzSq1VOkxrIeiPEoIiCaiVG9dQEIVAwvWMmddqe+LNk4u lwciluFXdlsS0od8+ipGtHgt4JmWDEPCxk8ZUe60vEuS9nVbIycZE5PiTEasPXn3 Ch5G3q7lSFlu+kq+jQEyqRfidg7nYwW/J68pafTxMOqCGrY3YgCwFVjMy5prYMx4 IKmFY3uno+P9xtcFOIcZ34hW051d4mun0oFheV6H9obHxU8O4ts/sJTyRzFOhSmb aaH76EPhPgz38r8YKUT2i/ttlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhASJrB Tm4Swd3XD+tf6irBulVzMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHmpRuOeCYoNEkKFYdqiHzd8utGwuMD0hT9PbX8pX3o0JdNog+BvSv oUwRJXStrZEw74PAhFoRmGgbOqbQXIz6oB0VwMBAAxvw3VZt9sq6n7t/M1bOaYY/ wOMUfO//XMUeCta86YHb1MtOiYRY+BOIapgs76pdiwc4aObJkvHVB6vZnQF/gypX nV9uzJhsll5mm7WcjfKRDrkAIWm+V3Zdo8MH3lVn5iRcKxGg+R9zz8+vJAdPLgK/ S46m7TvW7d7wDY8h6vC2nUN+7l356G5yc5VARDMjUL1rR91q2AWrdMlbPV/CUi26 /aMTZIthYQOTfrkDJ2/+aZEP2GfyUPH1 -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:58 2025 by rpki-client