$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: xxC5uLaoi2dwY9LC47mng3XsMQ2TxdIvgjr9Ybmjk4w= Subject key identifier: D2:4F:14:1F:33:73:A0:26:9C:F0:2D:A9:59:C8:B1:73:89:D8:D4:A6 Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0BAB Signing time: Tue 04 Nov 2025 19:06:45 +0000 Manifest this update: Tue 04 Nov 2025 19:06:44 +0000 Manifest next update: Tue 11 Nov 2025 19:06:44 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: kpuz9qNr6EBhUUEtGk1SKCcVSugdobF1sOySR7v9AhM=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Nov 4 19:06:44 2025 GMT Not After : Nov 11 19:06:44 2025 GMT Subject: CN=690a4ec4-3bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:05:df:42:2e:bd:da:d5:b0:4f:9f:66:29: 36:b6:d2:a3:8e:d9:04:5d:0f:99:0c:2e:1a:22:34: c6:c2:9b:4f:50:b2:df:23:6f:8f:3e:76:2e:c7:94: 4d:38:d1:47:3d:f6:14:68:2a:c4:df:23:55:f4:47: 28:22:14:3f:3c:3b:92:15:10:46:df:89:eb:a2:e7: de:4f:f8:16:d1:c5:f3:07:b5:81:1d:f7:9a:d3:c2: f3:fc:2b:34:31:90:bf:b8:72:1d:ca:26:d2:4d:85: d0:61:74:cd:a0:84:22:c5:7f:8b:27:4a:10:5b:ea: 5b:7e:60:b1:8c:95:dc:65:f4:61:0d:a8:0e:2f:bd: bc:6b:a8:70:77:c8:a9:30:34:6d:12:9e:6f:6d:df: 45:0a:79:a8:28:cf:dc:25:c4:a8:87:30:8e:6f:06: f3:d7:e4:24:85:16:b8:2f:14:28:8d:97:c6:22:b2: b0:19:05:41:e0:8b:d8:33:22:4b:46:5f:74:68:f6: fb:91:c1:70:fb:95:e7:60:f7:b7:0c:8e:bf:af:46: 37:a2:86:87:e3:d0:cd:5f:ae:08:da:f1:d9:c4:80: e6:14:7d:e0:41:41:38:47:e8:76:9c:5d:91:8a:55: a1:8c:bb:2e:83:d9:53:a2:8a:8b:58:31:83:1a:08: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4F:14:1F:33:73:A0:26:9C:F0:2D:A9:59:C8:B1:73:89:D8:D4:A6 X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:0d:e3:da:1a:77:72:b8:13:62:f9:b9:da:0a:05:7a:5e:4f: 87:4d:f3:66:16:cf:ef:0a:66:2d:41:50:fc:d7:c1:6a:09:93: 6e:62:4c:73:27:2c:6e:c1:5f:56:d0:b6:f0:d7:4b:c6:69:6d: 22:12:15:53:f9:73:47:d1:cc:08:f7:c0:7f:89:c5:cf:a4:80: f0:c9:eb:dc:65:06:19:50:e6:33:cc:74:f1:fe:9d:19:b1:fc: d2:31:0d:89:83:f4:4f:67:17:31:87:01:5f:de:41:b7:9e:73: 3f:6d:ca:d0:f9:01:ce:4c:ff:49:04:0f:f5:f2:2f:4b:de:05: e6:6a:2c:c8:69:66:ed:76:33:61:f6:1f:87:80:4f:80:ba:16: 6e:89:15:37:eb:1f:ff:4a:62:ac:b1:36:d7:fe:00:78:2d:07: b2:fe:d1:83:a6:a7:b9:0c:82:41:49:1e:0a:a6:a4:09:c6:f5: c8:78:4a:ca:e1:db:f0:fc:6c:cc:33:a6:29:c3:90:75:e9:72: 76:fc:a3:5d:da:b9:f8:72:6c:01:88:34:1b:33:7b:45:2f:41: 48:6f:e9:b5:df:39:52:38:4b:02:93:88:e7:11:45:4e:70:70: 51:ca:4d:49:04:db:dd:4a:27:8b:e9:64:f6:f7:e5:ff:a8:6d: 65:cf:38:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUxMTA0MTkwNjQ0WhcNMjUxMTExMTkwNjQ0WjAYMRYwFAYD VQQDEw02OTBhNGVjNC0zYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5YF30IuvdrVsE+fZik2ttKjjtkEXQ+ZDC4aIjTGwptPULLfI2+PPnYux5RN ONFHPfYUaCrE3yNV9EcoIhQ/PDuSFRBG34nroufeT/gW0cXzB7WBHfea08Lz/Cs0 MZC/uHIdyibSTYXQYXTNoIQixX+LJ0oQW+pbfmCxjJXcZfRhDagOL728a6hwd8ip MDRtEp5vbd9FCnmoKM/cJcSohzCObwbz1+QkhRa4LxQojZfGIrKwGQVB4IvYMyJL Rl90aPb7kcFw+5XnYPe3DI6/r0Y3ooaH49DNX64I2vHZxIDmFH3gQUE4R+h2nF2R ilWhjLsug9lTooqLWDGDGgjH0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJPFB8z c6AmnPAtqVnIsXOJ2NSmMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIDePaGndyuBNi+bnaCgV6Xk+HTfNmFs/vCmYtQVD818FqCZNuYkxz JyxuwV9W0Lbw10vGaW0iEhVT+XNH0cwI98B/icXPpIDwyevcZQYZUOYzzHTx/p0Z sfzSMQ2Jg/RPZxcxhwFf3kG3nnM/bcrQ+QHOTP9JBA/18i9L3gXmaizIaWbtdjNh 9h+HgE+AuhZuiRU36x//SmKssTbX/gB4LQey/tGDpqe5DIJBSR4KpqQJxvXIeErK 4dvw/GzMM6Ypw5B16XJ2/KNd2rn4cmwBiDQbM3tFL0FIb+m13zlSOEsCk4jnEUVO cHBRyk1JBNvdSieL6WT29+X/qG1lzzin -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:22 2025 by rpki-client