$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: FWmM3PabU+2CG6OE52YW6+VprAzy4dnuGDJIhiFTDMM= Subject key identifier: A2:B8:D2:4F:BB:6B:97:70:90:D9:D7:1E:F9:3B:FC:A0:63:A4:4C:73 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 0881 Signing time: Tue 04 Nov 2025 20:44:48 +0000 Manifest this update: Tue 04 Nov 2025 20:44:47 +0000 Manifest next update: Tue 11 Nov 2025 20:44:47 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: dgjSv1Pg2E8gx8T7ZsHDEep7iDOC0nPmlJ2rqzJJ20Q=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: dKNk5pPJbrzAnkXqkxI0ZuHUsGDU8sX1yqD52DpKuAQ=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: 0ru7xYrLjnDIEAfDou0iidHCCux0ow/jB57Xp7tPDLw=) 4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: VWbla33K1wl9gTRgnLJYb5WMUbeDQqg2qZKrLOb3zTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Nov 4 20:44:47 2025 GMT Not After : Nov 11 20:44:47 2025 GMT Subject: CN=690a65bf-a267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:99:16:40:09:11:63:93:3a:5d:f7:03:0a:1a: 47:0a:46:85:66:36:b0:31:bf:6b:ee:27:23:ec:3f: c2:2a:cf:25:e3:a3:fa:18:e3:f1:cb:1e:d2:2e:7e: 09:93:cb:3f:0b:8b:b2:ce:12:d2:26:16:c9:5f:82: 58:20:ec:2b:f9:2c:01:33:45:ab:f3:c8:4b:45:6d: 94:75:82:6f:c6:1e:fe:96:e2:db:4b:bd:6b:27:04: 8a:07:f3:58:d8:3f:72:0a:81:1e:41:8a:ef:02:ee: 57:89:a1:31:91:3a:53:f8:b5:db:ce:9f:e0:c7:1f: 8d:06:5e:46:f9:c1:f9:25:aa:9b:f5:51:a3:ca:d1: e1:1e:cf:38:15:7a:78:93:d4:21:47:5f:2b:1a:6a: dc:d5:2e:57:b9:b9:c6:00:4e:d8:03:f9:b1:c0:05: 46:81:62:9a:6e:8f:95:0f:d7:9e:ca:6b:86:34:38: d2:25:ee:a1:80:29:21:c8:d2:8d:a0:b4:ed:55:43: 90:ea:31:f5:e7:ea:8b:aa:65:d6:f7:0f:27:04:eb: 29:70:ad:ea:3f:c1:c3:93:b7:1c:b1:d2:43:d0:8e: 2d:8f:b4:73:ab:18:f7:78:80:7b:cc:3b:f1:17:e9: d1:d1:44:ea:f8:dc:9e:b5:01:ac:82:00:ea:00:60: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:D2:4F:BB:6B:97:70:90:D9:D7:1E:F9:3B:FC:A0:63:A4:4C:73 X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3b:ca:ff:2a:24:83:36:53:9d:e4:95:74:e4:26:7c:cd:9a: 32:59:33:2e:19:f9:10:16:94:02:a0:c5:31:42:f9:68:be:75: 7a:8b:b5:6e:14:21:1a:06:5f:25:db:d5:27:61:59:22:85:fa: 76:e0:30:09:b4:de:f3:f7:cd:aa:58:b9:c8:c6:4d:96:9d:4b: 46:8d:fb:d9:fb:05:ec:0b:e2:55:e2:91:52:d8:3f:7b:1b:e9: 9c:d0:e3:8c:f2:67:e7:4c:e0:30:a7:5f:d0:da:77:f9:41:bd: 7f:ca:e1:fa:a4:80:ed:3b:69:16:a0:c5:fc:61:dd:f8:40:97: f4:20:4b:95:4f:2b:6c:c0:e9:b7:2e:1d:a2:c8:cf:61:22:10: 32:82:2d:a7:21:12:00:d1:33:cd:ce:73:7a:c9:cf:52:a2:d2: e2:58:f7:d1:43:73:bb:c5:b0:91:ae:82:24:f9:43:38:20:f0: c5:cd:ad:f3:2c:60:65:02:21:f5:48:6f:14:bc:b4:66:a7:13: 59:0d:09:d1:96:01:31:7e:40:2b:a8:52:13:69:a0:bc:46:03: 74:9e:de:d1:d7:b9:8b:ed:30:18:ba:a0:ad:c9:9f:da:14:be: f4:d5:82:5e:9b:11:48:3e:43:2f:d4:89:6f:bb:23:c1:e4:bb: df:09:7f:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUxMTA0MjA0NDQ3WhcNMjUxMTExMjA0NDQ3WjAYMRYwFAYD VQQDEw02OTBhNjViZi1hMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5kWQAkRY5M6XfcDChpHCkaFZjawMb9r7icj7D/CKs8l46P6GOPxyx7SLn4J k8s/C4uyzhLSJhbJX4JYIOwr+SwBM0Wr88hLRW2UdYJvxh7+luLbS71rJwSKB/NY 2D9yCoEeQYrvAu5XiaExkTpT+LXbzp/gxx+NBl5G+cH5Jaqb9VGjytHhHs84FXp4 k9QhR18rGmrc1S5XubnGAE7YA/mxwAVGgWKabo+VD9eeymuGNDjSJe6hgCkhyNKN oLTtVUOQ6jH15+qLqmXW9w8nBOspcK3qP8HDk7ccsdJD0I4tj7Rzqxj3eIB7zDvx F+nR0UTq+NyetQGsggDqAGCjyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK40k+7 a5dwkNnXHvk7/KBjpExzMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMO8r/KiSDNlOd5JV05CZ8zZoyWTMuGfkQFpQCoMUxQvlovnV6i7Vu FCEaBl8l29UnYVkihfp24DAJtN7z982qWLnIxk2WnUtGjfvZ+wXsC+JV4pFS2D97 G+mc0OOM8mfnTOAwp1/Q2nf5Qb1/yuH6pIDtO2kWoMX8Yd34QJf0IEuVTytswOm3 Lh2iyM9hIhAygi2nIRIA0TPNznN6yc9SotLiWPfRQ3O7xbCRroIk+UM4IPDFza3z LGBlAiH1SG8UvLRmpxNZDQnRlgExfkArqFITaaC8RgN0nt7R17mL7TAYuqCtyZ/a FL701YJemxFIPkMv1IlvuyPB5LvfCX8j -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:11 2025 by rpki-client