$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: BkiVnfHFhPq26Xq505R9NqL/1EQ2YDfITDtHYQ44VRA= Subject key identifier: A6:66:3D:30:EB:A8:58:C2:22:41:8A:40:3B:DD:19:DA:A0:A3:BD:DD Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 01C5 Signing time: Wed 05 Nov 2025 03:03:27 +0000 Manifest this update: Wed 05 Nov 2025 03:03:27 +0000 Manifest next update: Wed 12 Nov 2025 03:03:27 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: tqqi/YW/sadysrH7nb4yX3nnRdyDxf/1Gn3dGDKl3HI=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: eMm1aATtYTxr8yulbbTqFy3KIRD0+Hc1f6QKDsCg/8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Nov 5 03:03:27 2025 GMT Not After : Nov 12 03:03:27 2025 GMT Subject: CN=690abe7f-fba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:23:57:d5:eb:da:71:41:5a:0e:28:15:17: 71:c5:4f:e3:1f:bf:33:f3:97:cc:b2:31:19:e3:69: f2:94:a6:e4:a4:74:43:32:88:61:3f:85:f9:e4:02: 90:77:31:7a:54:5b:f0:12:ac:78:3a:3e:ca:f1:30: 4b:0b:c1:14:67:57:f4:bd:d9:d2:6a:20:7c:c2:71: 76:e4:f7:22:9b:92:40:05:8b:47:71:a9:68:79:58: 88:56:e7:3a:13:07:29:e8:5a:9b:e4:6f:8e:8e:d2: fd:bb:0b:7a:29:90:5a:ae:cc:51:71:d0:d7:2c:05: 55:98:31:09:a4:0f:fb:e9:65:5e:12:56:ef:22:6b: 3d:90:d1:3c:bf:be:37:87:c6:34:db:2d:ee:24:82: bf:2a:6f:a6:01:94:fb:57:4e:dd:50:4f:ee:1e:e1: 8b:05:a4:3e:a0:af:90:19:32:7b:76:17:b2:7f:3b: ed:4f:54:19:04:aa:ec:1e:bc:32:ae:84:da:0d:a3: 3a:59:ec:49:21:f7:97:22:7c:db:9a:9f:44:75:bc: d9:67:89:ef:09:5d:99:85:71:1c:0c:48:2a:d7:d8: 99:76:00:40:e9:48:d7:7b:79:1d:e7:e3:7e:27:b1: 7f:b2:5e:09:0e:51:d1:d7:12:e8:f5:07:84:07:13: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:66:3D:30:EB:A8:58:C2:22:41:8A:40:3B:DD:19:DA:A0:A3:BD:DD X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:ca:2c:9c:7c:71:cc:c2:be:bb:57:86:dd:c6:48:cf:d7: 4e:51:3a:23:56:39:92:fe:f5:9b:9d:28:eb:e5:58:22:7f:00: 70:df:c9:ac:29:d0:0b:8e:19:b9:50:85:a4:9d:b9:98:cc:da: 11:67:bc:36:99:87:a0:43:f3:41:3c:1b:5b:62:b1:12:8b:60: 0e:b1:ca:7e:5c:7a:77:b8:c5:98:9a:e3:10:48:8c:07:2e:89: 87:8c:2e:bf:7a:ab:44:1b:a8:fb:5e:95:b4:87:6c:63:56:1f: 23:6c:0c:d0:22:db:7f:db:8b:37:b6:6f:b7:8d:2f:ad:18:dd: 67:38:76:de:ce:1c:c9:cc:a4:8f:66:5a:e9:81:f7:78:ce:50: 11:3d:8b:39:e5:a4:6d:95:8e:44:85:fc:6f:59:e8:6b:a0:31: fc:96:16:33:b1:1e:db:95:6f:e9:48:70:16:2a:96:08:5f:aa: 3a:ea:46:ec:27:c9:56:97:1d:70:4a:2f:d7:52:c0:ba:0f:bb: 39:0e:54:c8:70:10:81:26:b1:47:d1:1f:f3:60:cb:e2:c0:e7: ac:30:8c:1a:7d:56:a0:48:92:df:a3:ed:3a:6e:0a:c0:64:39: 1e:cb:45:7b:e2:18:5d:a5:43:a9:d1:1c:e6:ea:98:03:08:65: 53:c1:09:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUxMTA1MDMwMzI3WhcNMjUxMTEyMDMwMzI3WjAYMRYwFAYD VQQDEw02OTBhYmU3Zi1mYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uMjV9Xr2nFBWg4oFRdxxU/jH78z85fMsjEZ42nylKbkpHRDMohhP4X55AKQ dzF6VFvwEqx4Oj7K8TBLC8EUZ1f0vdnSaiB8wnF25Pcim5JABYtHcaloeViIVuc6 Ewcp6Fqb5G+OjtL9uwt6KZBarsxRcdDXLAVVmDEJpA/76WVeElbvIms9kNE8v743 h8Y02y3uJIK/Km+mAZT7V07dUE/uHuGLBaQ+oK+QGTJ7dheyfzvtT1QZBKrsHrwy roTaDaM6WexJIfeXInzbmp9EdbzZZ4nvCV2ZhXEcDEgq19iZdgBA6UjXe3kd5+N+ J7F/sl4JDlHR1xLo9QeEBxPPVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZmPTDr qFjCIkGKQDvdGdqgo73dMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCTsosnHxxzMK+u1eG3cZIz9dOUTojVjmS/vWbnSjr5VgifwBw38ms KdALjhm5UIWknbmYzNoRZ7w2mYegQ/NBPBtbYrESi2AOscp+XHp3uMWYmuMQSIwH LomHjC6/eqtEG6j7XpW0h2xjVh8jbAzQItt/24s3tm+3jS+tGN1nOHbezhzJzKSP Zlrpgfd4zlARPYs55aRtlY5EhfxvWehroDH8lhYzsR7blW/pSHAWKpYIX6o66kbs J8lWlx1wSi/XUsC6D7s5DlTIcBCBJrFH0R/zYMviwOesMIwafVagSJLfo+06bgrA ZDkey0V74hhdpUOp0Rzm6pgDCGVTwQks -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:05 2025 by rpki-client