$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json) Hash identifier: XdEpyB3SyzBIopPRBp9hV2DzCycCJED1W7krmuAk1LI= Subject key identifier: 8E:7A:DD:08:5B:0C:E9:E2:3C:63:26:88:D0:1F:37:31:44:E4:CC:47 Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft Manifest number: 3A Signing time: Wed 05 Nov 2025 07:44:45 +0000 Manifest this update: Wed 05 Nov 2025 07:44:44 +0000 Manifest next update: Wed 12 Nov 2025 07:44:44 +0000 Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: hGLcYZFGWRIVzSi0aa8H141F1cnurzyR5R/oWBm6/Ts=) 2: C9479880646611F0B371D156C4F9AE02.roa (hash: ebNb1cqmZBUz7WL9tCF2PExl+FU65/gDmGjSUW9LYDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Validity Not Before: Nov 5 07:44:44 2025 GMT Not After : Nov 12 07:44:44 2025 GMT Subject: CN=690b006d-7a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:4b:e7:df:b6:4b:80:ed:57:96:5c:13:8a: e6:5f:46:bb:f9:7b:73:39:a2:b9:b5:21:25:c4:e9: 96:54:35:c5:c0:5a:f5:78:ea:4a:b0:47:be:f3:a3: 19:8a:56:40:0e:da:fe:9d:60:f2:0d:6b:41:90:e4: c7:f5:95:cf:a4:86:48:f1:af:c5:79:ac:b0:28:66: 0a:97:b6:99:1d:37:2a:c7:b6:29:0d:b9:d0:66:79: e9:69:94:10:16:be:dd:fd:58:db:50:10:0e:40:ae: a3:df:46:db:58:5f:9e:d9:21:3c:9c:d1:1e:8e:b9: e2:12:16:6e:ca:81:06:ce:ab:2e:a4:b4:c9:7b:c1: 77:0b:cc:3e:07:85:3a:6c:d6:63:fd:39:2a:d6:cc: 83:e0:67:09:81:4b:17:8c:c9:c3:77:4b:8b:bd:40: 13:9f:8f:d0:22:be:a3:53:e0:f9:f3:03:a4:ae:0a: cf:bb:11:e1:83:8e:04:c6:1d:26:7a:7e:2c:39:5c: 0e:2d:88:a9:86:83:7f:98:31:23:34:18:51:c5:78: 8d:0e:20:da:ae:9d:db:cd:a7:13:ff:54:9c:a4:b6: 16:77:ea:d8:db:11:2f:7a:51:01:60:33:61:74:7b: 46:34:5c:ea:9e:e0:da:0d:0f:ac:74:d5:01:49:8c: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:DD:08:5B:0C:E9:E2:3C:63:26:88:D0:1F:37:31:44:E4:CC:47 X509v3 Authority Key Identifier: keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e3:f0:79:b8:d2:14:40:17:9f:a4:ce:bc:6f:d2:c4:40:d4: c3:39:9b:f3:d7:7a:8e:e6:fa:ba:47:f3:1e:40:08:90:39:e7: 95:0d:dd:3a:b4:fa:5d:df:70:48:38:19:b1:95:bb:b5:ea:23: 7d:1f:9f:7f:f1:18:1c:85:ad:2d:7e:ed:f7:b9:48:bf:4c:8c: 13:68:e6:6a:d3:f3:a4:c0:7c:46:9c:d8:41:32:67:5e:07:c2: 00:99:a3:60:44:7b:9c:de:f5:63:ae:d8:65:e5:b5:f2:33:7d: 85:3d:a6:8a:b1:ed:29:f2:89:bb:f7:90:1c:cf:02:6a:68:f2: 0f:c5:32:96:7c:86:dc:0b:5b:95:df:46:fc:e4:9f:04:1e:b3: 7f:11:06:10:64:40:57:19:39:9e:05:91:8a:10:29:d7:e9:88: 3a:98:0f:ed:e0:38:12:6d:46:d3:a6:06:7b:7a:97:79:82:11: dc:01:eb:c0:1a:cc:ec:a2:ff:23:8b:fe:3e:45:c2:9e:dd:cc: cc:56:9d:98:dd:6a:a5:43:0b:b7:da:c6:e9:62:40:bf:57:56: 36:88:d3:a5:f9:9f:c5:ca:93:20:fc:84:93:e5:da:2c:77:74: 9b:e2:51:1a:8c:91:71:7d:8c:ac:b4:5b:e5:9b:48:a7:9b:09: 0f:d4:74:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQTlGMEFDOTdCOUMxOEMzMkUyMTY5QzAxQTQ5ODZDN0E2 QzI1NUZGRTAeFw0yNTExMDUwNzQ0NDRaFw0yNTExMTIwNzQ0NDRaMBgxFjAUBgNV BAMTDTY5MGIwMDZkLTdhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvrUvn37ZLgO1XllwTiuZfRrv5e3M5orm1ISXE6ZZUNcXAWvV46kqwR77zoxmK VkAO2v6dYPINa0GQ5Mf1lc+khkjxr8V5rLAoZgqXtpkdNyrHtikNudBmeelplBAW vt39WNtQEA5ArqPfRttYX57ZITyc0R6OueISFm7KgQbOqy6ktMl7wXcLzD4HhTps 1mP9OSrWzIPgZwmBSxeMycN3S4u9QBOfj9AivqNT4PnzA6SuCs+7EeGDjgTGHSZ6 fiw5XA4tiKmGg3+YMSM0GFHFeI0OINqundvNpxP/VJykthZ36tjbES96UQFgM2F0 e0Y0XOqe4NoND6x01QFJjHk/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjnrdCFsM 6eI8YyaI0B83MUTkzEcwHwYDVR0jBBgwFoAUqfCsl7nBjDLiFpwBpJhsemwlX/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzU2MzU2Q0Q0NjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWZDc2w3bkJqRExpRnB3QnBKaHNlbXdsWF80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzU2MzU2Q0Q0NjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRM aUZwd0JwSmhzZW13bFhfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfj8Hm40hRAF5+kzrxv0sRA1MM5m/PXeo7m+rpH8x5ACJA555UN3Tq0 +l3fcEg4GbGVu7XqI30fn3/xGByFrS1+7fe5SL9MjBNo5mrT86TAfEac2EEyZ14H wgCZo2BEe5ze9WOu2GXltfIzfYU9poqx7Snyibv3kBzPAmpo8g/FMpZ8htwLW5Xf RvzknwQes38RBhBkQFcZOZ4FkYoQKdfpiDqYD+3gOBJtRtOmBnt6l3mCEdwB68Aa zOyi/yOL/j5Fwp7dzMxWnZjdaqVDC7faxuliQL9XVjaI06X5n8XKkyD8hJPl2ix3 dJviURqMkXF9jKy0W+WbSKebCQ/UdMk= -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:34 2025 by rpki-client