$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json) Hash identifier: 2oN5pJSx+5rSUiWRvNu+a6NsYRypRGbMf3EmNKhUrj4= Subject key identifier: 1B:85:FC:99:A3:7B:3C:ED:9F:C0:64:E3:4B:B9:F4:00:85:A1:87:75 Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Certificate serial: 170E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft Manifest number: 16FE Signing time: Tue 04 Nov 2025 16:43:55 +0000 Manifest this update: Tue 04 Nov 2025 16:43:55 +0000 Manifest next update: Tue 11 Nov 2025 16:43:55 +0000 Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: BvgDb5xK2u3+Ks3FbDHu6SKlQW5mi7FoX4M+f8o+LmY=) 2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: ZwNXUOwbbGwEvsT0YYSZl1NqDpf0fkjGMPzYp65wdFE=) 3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: fI6pWEKhcfnz5T7b0Qu0ji5oi9dMvf4xCNtRiu+OZoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5902 (0x170e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Validity Not Before: Nov 4 16:43:55 2025 GMT Not After : Nov 11 16:43:55 2025 GMT Subject: CN=690a2d4b-a5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:1e:f3:e8:56:b2:01:38:b2:52:10:35:bf: 1d:5c:9c:7e:44:78:e1:c3:7c:ae:1b:c6:a6:35:e1: b2:df:33:fd:30:50:e8:63:c7:70:7e:66:ef:e4:47: 8a:41:20:8f:fa:af:78:05:a2:2c:55:21:61:1b:82: 24:fc:9c:36:a2:37:9f:6e:21:5f:33:1c:8d:64:d7: 64:7e:28:ed:6c:f2:4d:e1:6f:c2:fa:b3:a9:b8:13: 5d:7a:2c:92:81:31:aa:56:01:25:8b:ed:7a:4b:89: 83:9f:ac:b2:a9:f8:c7:da:cd:4d:8a:37:d5:ad:b8: 5c:ea:1a:e8:84:7c:ec:63:7d:4a:08:af:03:bf:b2: 72:0b:67:ba:97:30:ef:50:6b:17:2d:cb:86:12:da: 78:39:60:b7:f4:94:60:8b:d9:1a:29:51:50:9d:dc: 35:26:a3:73:98:90:fe:e1:11:a2:23:13:cd:62:e2: 5f:78:74:ef:2d:1e:17:3d:bf:6d:26:93:be:18:e7: 1a:75:ce:33:e6:ac:7e:d2:17:98:8e:a9:0d:ce:1b: 09:04:16:cc:96:82:9b:96:59:6d:bb:1e:56:59:98: a1:2e:8d:f3:41:df:72:3d:f2:91:9b:a5:f7:4c:31: ce:5a:ed:4d:71:65:7e:ad:66:2e:f5:23:0c:92:7e: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:85:FC:99:A3:7B:3C:ED:9F:C0:64:E3:4B:B9:F4:00:85:A1:87:75 X509v3 Authority Key Identifier: keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2a:40:1f:5f:c1:12:f0:ff:3a:7d:f4:81:73:45:81:1b:3c: 3d:f2:43:5e:c4:e9:de:e8:71:cf:9d:9f:e1:e3:9c:44:f6:42: 13:b3:70:34:c6:6f:f4:c0:81:e8:01:8a:96:7b:9a:b8:f6:73: 65:27:d9:38:2d:d8:f6:e3:6f:2b:d5:a0:0a:18:b6:21:7c:f6: f9:c3:a7:db:67:40:09:27:c2:5f:a3:65:ed:33:3f:40:a9:e1: 02:68:ec:09:75:05:cd:33:55:ce:2c:99:4f:4a:73:f5:68:43: ae:ad:6b:13:88:07:97:a9:5c:24:9c:34:49:e6:0a:ff:00:f9: af:60:a3:58:6a:c5:c5:e6:06:f5:c3:e1:e4:40:ce:32:01:a1: 6f:03:c5:23:00:90:b6:14:5d:23:d1:a1:5d:16:5d:23:07:fd: d3:87:1d:c1:90:8f:28:0b:64:46:03:85:51:9e:a4:8d:7c:50: 9e:33:85:73:79:11:5b:41:7c:04:c4:8a:34:d4:e8:48:49:99: cf:8d:96:8e:37:18:17:36:f5:d1:c1:71:d8:ba:52:9b:f2:12: 99:c4:a1:ec:f0:29:c8:6e:a7:05:f0:c2:cb:50:c6:ed:f1:75: 06:5d:9b:81:43:a3:0d:45:6c:87:58:40:c3:a7:e7:cd:a2:b6: e4:3c:af:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3RTgxMTAvBgNVBAUTKEE5NzUyNTk5ODQwRDZFRUNBQTFCRjY4QzA5MDVBRDdE RjQ2OUEyRTcwHhcNMjUxMTA0MTY0MzU1WhcNMjUxMTExMTY0MzU1WjAYMRYwFAYD VQQDEw02OTBhMmQ0Yi1hNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwoe8+hWsgE4slIQNb8dXJx+RHjhw3yuG8amNeGy3zP9MFDoY8dwfmbv5EeK QSCP+q94BaIsVSFhG4Ik/Jw2ojefbiFfMxyNZNdkfijtbPJN4W/C+rOpuBNdeiyS gTGqVgEli+16S4mDn6yyqfjH2s1NijfVrbhc6hrohHzsY31KCK8Dv7JyC2e6lzDv UGsXLcuGEtp4OWC39JRgi9kaKVFQndw1JqNzmJD+4RGiIxPNYuJfeHTvLR4XPb9t JpO+GOcadc4z5qx+0heYjqkNzhsJBBbMloKbllltux5WWZihLo3zQd9yPfKRm6X3 TDHOWu1NcWV+rWYu9SMMkn6K6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuF/Jmj ezztn8Bk40u59ACFoYd1MB8GA1UdIwQYMBaAFKl1JZmEDW7sqhv2jAkFrX30aaLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjdFOC82OTJGNzJGMkY5 QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1eXFHX2FNQ1FXdGZmUnBv dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYVWxtWVFOYnV5cUdfYU1DUVd0ZmZScG91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjdFOC82OTJGNzJGMkY5QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1 eXFHX2FNQ1FXdGZmUnBvdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbKkAfX8ES8P86ffSBc0WBGzw98kNexOne6HHPnZ/h45xE9kITs3A0 xm/0wIHoAYqWe5q49nNlJ9k4Ldj2428r1aAKGLYhfPb5w6fbZ0AJJ8Jfo2XtMz9A qeECaOwJdQXNM1XOLJlPSnP1aEOurWsTiAeXqVwknDRJ5gr/APmvYKNYasXF5gb1 w+HkQM4yAaFvA8UjAJC2FF0j0aFdFl0jB/3Thx3BkI8oC2RGA4VRnqSNfFCeM4Vz eRFbQXwExIo01OhISZnPjZaONxgXNvXRwXHYulKb8hKZxKHs8CnIbqcF8MLLUMbt 8XUGXZuBQ6MNRWyHWEDDp+fNorbkPK/e -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:50 2025 by rpki-client