$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: MaVKnnrGIlMgJHPtZKNZU9zmwBlaxWgpTujJnPu6v7c= Subject key identifier: C4:02:0A:2B:3A:A5:73:E2:20:AF:B0:0D:17:81:C6:53:45:2C:5D:89 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 02B7 Signing time: Wed 05 Nov 2025 01:32:45 +0000 Manifest this update: Wed 05 Nov 2025 01:32:44 +0000 Manifest next update: Wed 12 Nov 2025 01:32:44 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: FEE/iBsMiMp3kOsNNjMP6ViQnmHREwPxgV5O5vj4prQ=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Nov 5 01:32:44 2025 GMT Not After : Nov 12 01:32:44 2025 GMT Subject: CN=690aa93d-0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:da:1c:b4:fa:23:9c:0b:7e:73:96:1c:17: ca:60:ed:a5:39:27:3e:b3:c0:4f:42:48:50:9f:fc: 84:42:88:62:8c:f9:03:b8:ef:3a:24:e8:91:37:1c: 80:e4:0d:e4:d5:ac:bb:53:2c:41:72:a7:b2:51:e8: 8a:95:64:33:c9:44:e7:f0:7b:9e:37:c0:d9:22:ac: e6:5e:79:75:c8:4f:62:f5:c8:f5:34:46:3d:4b:3e: f8:d7:a3:c9:4a:90:19:a1:a7:3f:24:18:9f:73:6c: 29:2f:88:31:4f:10:42:4e:11:ee:5e:b0:d6:f9:52: 65:de:34:96:99:44:29:45:ad:d1:28:23:34:d2:51: 82:da:4b:18:d8:24:4f:26:33:16:35:86:5f:c6:10: 6b:2c:85:1c:2f:26:8c:47:4e:a6:b7:90:86:9d:99: 44:55:2a:3f:47:36:03:82:a0:fe:1b:af:d2:2c:56: c9:06:02:64:36:0b:d5:93:a8:2c:32:90:88:bd:fa: ed:c9:6e:d8:56:1b:36:bb:fb:f4:ae:95:c6:bb:6e: 0f:c5:de:dd:9b:7d:41:96:7d:75:94:a9:cc:d6:6a: a2:02:e5:b2:de:d2:7c:6a:88:c2:9a:2c:9c:c3:85: c4:8b:b4:41:dc:54:fc:45:94:47:b8:89:c6:5f:c7: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:02:0A:2B:3A:A5:73:E2:20:AF:B0:0D:17:81:C6:53:45:2C:5D:89 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:cb:95:ca:9f:4b:6d:7f:18:29:2d:12:ed:62:1a:2a:39:ac: 49:16:be:c6:50:25:73:5f:a3:bb:3f:d3:d4:3a:5f:df:18:bb: b8:64:60:35:e9:ea:98:7d:df:5f:ae:fc:26:2a:61:b5:73:18: ec:82:8b:91:47:98:88:a3:d2:d9:16:3f:8b:14:6c:39:37:ba: 04:4f:30:45:69:4d:b1:cd:3e:a7:32:fb:d4:0c:6f:8e:11:47: 62:f1:c3:50:1c:b6:ad:d1:a7:d1:f7:47:69:d1:ea:6e:9f:64: cb:17:9b:f2:48:08:d9:81:07:df:c8:78:dd:ea:b0:6e:8a:7b: 4b:e1:1b:01:42:2a:e1:10:55:32:33:69:6b:fe:c1:f6:db:1e: ee:1f:f0:d3:73:6e:5e:e7:dd:10:18:96:ea:52:c0:28:b6:3f: 57:3a:26:20:4b:b1:63:4d:7c:26:b3:35:bb:39:d3:50:45:55: 4a:d0:0d:e7:46:54:e0:0a:99:06:27:25:8d:c7:42:af:73:6e: d8:64:af:b5:c7:17:a5:91:f7:38:41:9f:fb:d7:e1:f0:c8:4e: 5f:9a:bc:ef:c6:d9:34:6a:5a:9c:21:f1:3c:b9:f6:4e:ee:55: 7b:38:8a:b8:88:13:a1:c4:6f:a4:8a:af:f1:fa:0e:d7:12:cc: 41:cf:5a:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUxMTA1MDEzMjQ0WhcNMjUxMTEyMDEzMjQ0WjAYMRYwFAYD VQQDEw02OTBhYTkzZC0wYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4raHLT6I5wLfnOWHBfKYO2lOSc+s8BPQkhQn/yEQohijPkDuO86JOiRNxyA 5A3k1ay7UyxBcqeyUeiKlWQzyUTn8HueN8DZIqzmXnl1yE9i9cj1NEY9Sz7416PJ SpAZoac/JBifc2wpL4gxTxBCThHuXrDW+VJl3jSWmUQpRa3RKCM00lGC2ksY2CRP JjMWNYZfxhBrLIUcLyaMR06mt5CGnZlEVSo/RzYDgqD+G6/SLFbJBgJkNgvVk6gs MpCIvfrtyW7YVhs2u/v0rpXGu24Pxd7dm31Bln11lKnM1mqiAuWy3tJ8aojCmiyc w4XEi7RB3FT8RZRHuInGX8clMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQCCis6 pXPiIK+wDReBxlNFLF2JMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWy5XKn0ttfxgpLRLtYhoqOaxJFr7GUCVzX6O7P9PUOl/fGLu4ZGA1 6eqYfd9frvwmKmG1cxjsgouRR5iIo9LZFj+LFGw5N7oETzBFaU2xzT6nMvvUDG+O EUdi8cNQHLat0afR90dp0epun2TLF5vySAjZgQffyHjd6rBuintL4RsBQirhEFUy M2lr/sH22x7uH/DTc25e590QGJbqUsAotj9XOiYgS7FjTXwmszW7OdNQRVVK0A3n RlTgCpkGJyWNx0Kvc27YZK+1xxelkfc4QZ/71+HwyE5fmrzvxtk0alqcIfE8ufZO 7lV7OIq4iBOhxG+kiq/x+g7XEsxBz1ql -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:33 2025 by rpki-client