$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: JauqyBL7/9RsrLljoKmXNKaNGzF15zlW9XUfzFT7xyU= Subject key identifier: A9:5B:DF:5B:5A:8E:26:3B:D3:63:60:17:7F:32:49:79:52:A7:EF:AC Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: 59 Signing time: Wed 05 Nov 2025 07:20:39 +0000 Manifest this update: Wed 05 Nov 2025 07:20:38 +0000 Manifest next update: Wed 12 Nov 2025 07:20:38 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: Yo6cljK9sb9fRZ4OWgpnl9vAsy7oC/19u1paIYkw4Lk=) 2: D474730E311C11F08B197B65C4F9AE02.roa (hash: Pu/QPbX6etZqKvOsEtAWX426lG3kK44YjXzpJvX5ecs=) 3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: OuYK59uWIga3ZAzcT5ocu0lcjNK1alPA7Ti+SUQJrh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Nov 5 07:20:38 2025 GMT Not After : Nov 12 07:20:38 2025 GMT Subject: CN=690afac7-cfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:35:1e:81:f0:c7:b4:46:d8:c1:37:30:e3: d2:90:89:b4:59:a5:d0:38:7f:fe:72:93:e0:55:6b: 5c:bc:d8:20:ad:6e:ed:df:52:1f:a9:27:4a:1d:4c: 9d:b1:e4:02:67:1e:1c:c0:bc:73:99:af:2b:68:b3: 95:b9:8a:ae:a5:3d:36:fe:96:9c:42:8c:3f:b0:cc: b6:00:9c:cb:fd:cd:d4:a2:db:ce:ea:55:36:85:b9: c5:86:fa:2b:90:df:6f:42:99:15:e0:87:ac:71:d0: ac:7c:d1:9e:55:e9:2c:63:57:88:4c:25:5a:a1:47: 5c:d5:2a:b9:11:e0:1c:c4:07:89:12:a9:48:95:59: 8c:66:00:a8:b8:f0:79:c4:6f:5a:89:57:17:29:da: b7:ed:0a:39:50:05:fd:2e:e1:4f:56:41:16:2a:ee: af:d7:0e:82:7e:f3:a9:16:03:b9:1e:92:5a:e3:b1: fb:4f:fc:0c:ff:1c:4c:0d:19:27:f9:26:90:ec:a7: cc:78:57:04:2a:06:df:54:8d:b8:2b:dc:61:29:10: d3:6e:5b:ba:94:15:d1:12:63:a1:6c:dd:6b:14:75: ac:95:87:52:fb:a9:77:cc:3c:4e:f0:00:68:b3:89: ab:ec:45:2d:c1:17:d0:ee:0a:fc:2f:8a:47:3c:d1: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5B:DF:5B:5A:8E:26:3B:D3:63:60:17:7F:32:49:79:52:A7:EF:AC X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:3b:2f:08:f8:28:36:9e:93:3f:de:38:26:4a:4b:ca:2b:97: a8:b8:90:fe:69:48:cb:42:75:8a:70:67:c4:f1:a7:65:f3:4c: b9:ef:6f:19:15:c7:ce:c8:06:69:77:67:62:b7:99:c6:a3:9c: 51:24:bd:10:47:50:b7:0c:d3:9f:0d:a6:e6:2b:fc:2d:20:cb: 23:03:a7:f8:49:c0:a0:c9:93:65:e4:77:c3:67:b2:73:b6:aa: 7c:ff:88:df:1e:10:58:9a:03:2c:de:3c:80:5a:24:87:ac:d0: da:a6:68:e1:2f:32:e4:18:b4:56:bb:ac:22:ca:9b:c4:c9:56: d0:80:ec:c8:fb:b0:59:88:f0:ed:00:20:b1:b8:77:54:af:1f: 16:e2:a2:73:03:f3:bb:9d:d1:e8:df:17:55:d2:4e:d4:ef:1b: 11:62:5a:88:dc:f9:e5:23:be:b9:85:df:01:e0:ee:bf:f7:d9: b2:7c:94:67:a5:56:2f:57:3a:40:d6:d1:1d:e4:de:c5:91:59: 50:b1:1a:c5:ee:e4:5f:4b:08:f0:3e:b4:7a:71:8d:6c:0b:ec: 73:71:95:87:15:2a:d9:8e:c2:37:2b:3c:cb:e6:86:f0:a5:d5: d1:8a:c6:58:ec:4d:8c:21:bf:76:f7:a2:eb:0e:93:5f:e0:d3: d6:f1:76:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUVEMjExMC8GA1UEBRMoRDkwNEQ1NTJDMEVGMzJGMjQ5QUJBNDU5N0JEODRBMTVF RTU1NTVDMTAeFw0yNTExMDUwNzIwMzhaFw0yNTExMTIwNzIwMzhaMBgxFjAUBgNV BAMTDTY5MGFmYWM3LWNmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEvTUegfDHtEbYwTcw49KQibRZpdA4f/5yk+BVa1y82CCtbu3fUh+pJ0odTJ2x 5AJnHhzAvHOZrytos5W5iq6lPTb+lpxCjD+wzLYAnMv9zdSi287qVTaFucWG+iuQ 329CmRXgh6xx0Kx80Z5V6SxjV4hMJVqhR1zVKrkR4BzEB4kSqUiVWYxmAKi48HnE b1qJVxcp2rftCjlQBf0u4U9WQRYq7q/XDoJ+86kWA7keklrjsftP/Az/HEwNGSf5 JpDsp8x4VwQqBt9Ujbgr3GEpENNuW7qUFdESY6Fs3WsUdayVh1L7qXfMPE7wAGiz iavsRS3BF9DuCvwvikc80f4ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqVvfW1qO JjvTY2AXfzJJeVKn76wwHwYDVR0jBBgwFoAU2QTVUsDvMvJJq6RZe9hKFe5VVcEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUQyL0YyNDVCMkQ2MzEx QjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZj RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFUVlVzRHZNdkpKcTZSWmU5aEtGZTVWVmNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RUQyL0YyNDVCMkQ2MzExQjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZK SnE2UlplOWhLRmU1VlZjRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHg7Lwj4KDaekz/eOCZKS8orl6i4kP5pSMtCdYpwZ8Txp2XzTLnvbxkV x87IBml3Z2K3mcajnFEkvRBHULcM058NpuYr/C0gyyMDp/hJwKDJk2Xkd8NnsnO2 qnz/iN8eEFiaAyzePIBaJIes0NqmaOEvMuQYtFa7rCLKm8TJVtCA7Mj7sFmI8O0A ILG4d1SvHxbionMD87ud0ejfF1XSTtTvGxFiWojc+eUjvrmF3wHg7r/32bJ8lGel Vi9XOkDW0R3k3sWRWVCxGsXu5F9LCPA+tHpxjWwL7HNxlYcVKtmOwjcrPMvmhvCl 1dGKxljsTYwhv3b3ousOk1/g09bxdp8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:47 2025 by rpki-client