$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: JCJv1ASaporKXjMjcCWkHCQ6LNrd2kk+w54Zv8IRr4Y= Subject key identifier: 5F:5D:7B:F1:3F:4A:98:10:10:19:17:56:6D:33:CD:63:14:BA:A4:4F Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: 0110 Signing time: Wed 05 Nov 2025 05:05:07 +0000 Manifest this update: Wed 05 Nov 2025 05:05:07 +0000 Manifest next update: Wed 12 Nov 2025 05:05:07 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: F08VoJQ53KCGiybZuoU5xRCBU2y9sOgObK5tb4Mlet4=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Nov 5 05:05:07 2025 GMT Not After : Nov 12 05:05:07 2025 GMT Subject: CN=690adb03-f128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:01:47:84:b6:b9:fe:ec:67:34:57:b0:c2: 74:38:e5:0c:41:b4:2f:90:60:de:5d:b5:e4:9d:ee: 5d:07:d4:6f:1a:4d:f8:c0:44:a8:60:35:d4:0f:4b: 7a:52:fb:1d:0d:34:50:81:78:0e:a4:0a:6e:9b:cc: 56:2f:d3:c3:33:af:99:53:59:26:b0:87:bc:89:7b: d4:95:7e:a1:79:a1:ff:a5:58:27:8f:64:0c:a3:aa: 68:e9:c9:af:83:ef:ff:d4:8e:a0:74:84:8c:4c:64: 54:42:2e:bf:fd:b2:1c:a7:b7:ad:88:a6:60:ac:7c: 5d:55:c6:3d:95:a8:90:15:e6:01:75:0d:fa:82:52: 2b:1b:68:c4:2f:58:2f:56:74:8d:ba:4f:d7:05:89: e5:71:c3:99:67:90:f5:71:49:39:ef:66:2b:c0:22: 1c:a4:95:fa:d8:b8:10:ce:d7:21:85:86:95:0d:aa: 3d:fb:83:b4:88:f5:64:34:ee:d5:64:9d:c0:df:30: 13:ca:b2:a3:0b:2e:3d:aa:ae:ae:b2:82:b8:3f:0d: 35:f2:d5:09:9d:7a:d8:03:fe:81:00:90:7f:11:92: 65:32:70:17:e7:52:78:a6:8f:7e:44:85:2a:a4:d2: dc:de:1c:d9:b2:18:bc:34:e8:d8:fa:78:c6:b5:d8: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5D:7B:F1:3F:4A:98:10:10:19:17:56:6D:33:CD:63:14:BA:A4:4F X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:9f:46:ed:84:71:d5:c5:0d:f7:3a:f6:6b:73:a2:68:f8:21: 5b:8d:ea:48:4a:fb:df:05:f6:eb:52:ad:02:2a:64:f1:29:89: 89:f4:bd:7d:5b:11:01:a4:e7:c8:2b:2a:04:df:25:69:7b:05: 1b:c6:3e:ba:eb:7e:c7:7a:62:35:18:c5:32:b9:8d:b5:2f:dd: c7:80:7e:52:75:44:10:cf:cb:72:9e:1e:42:bf:7f:4d:70:d6: 32:7e:a5:a5:6e:a6:10:18:f9:10:2e:80:2e:33:5b:2c:f1:b0: 7c:e7:7a:b0:e5:69:e9:b0:77:e2:6b:0b:30:01:4f:2d:18:f8: 2a:7a:c8:1f:18:c2:06:c3:15:37:ad:a1:11:8f:aa:94:70:fb: a2:83:9d:b9:98:2f:94:d2:82:72:4b:e7:7a:1d:c5:4a:ba:7f: 2c:c8:0f:cf:06:c2:39:82:a9:e9:ca:13:50:d3:d3:ff:4a:94: 1e:35:f8:9d:17:ab:62:4c:59:60:96:f3:4f:51:00:75:d6:2e: 68:57:a6:d4:da:c5:47:70:da:0d:58:04:25:4f:64:66:92:dd: 56:9c:af:49:70:31:f0:52:53:b6:df:81:7f:4e:01:c7:71:e8: b5:82:f9:56:6a:31:eb:59:82:63:6f:26:eb:b9:1c:aa:6f:11: 95:dc:4d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUxMTA1MDUwNTA3WhcNMjUxMTEyMDUwNTA3WjAYMRYwFAYD VQQDEw02OTBhZGIwMy1mMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfwBR4S2uf7sZzRXsMJ0OOUMQbQvkGDeXbXkne5dB9RvGk34wESoYDXUD0t6 UvsdDTRQgXgOpApum8xWL9PDM6+ZU1kmsIe8iXvUlX6heaH/pVgnj2QMo6po6cmv g+//1I6gdISMTGRUQi6//bIcp7etiKZgrHxdVcY9laiQFeYBdQ36glIrG2jEL1gv VnSNuk/XBYnlccOZZ5D1cUk572YrwCIcpJX62LgQztchhYaVDao9+4O0iPVkNO7V ZJ3A3zATyrKjCy49qq6usoK4Pw018tUJnXrYA/6BAJB/EZJlMnAX51J4po9+RIUq pNLc3hzZshi8NOjY+njGtdinSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9de/E/ SpgQEBkXVm0zzWMUuqRPMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpn0bthHHVxQ33OvZrc6Jo+CFbjepISvvfBfbrUq0CKmTxKYmJ9L19 WxEBpOfIKyoE3yVpewUbxj66637HemI1GMUyuY21L93HgH5SdUQQz8tynh5Cv39N cNYyfqWlbqYQGPkQLoAuM1ss8bB853qw5WnpsHfiawswAU8tGPgqesgfGMIGwxU3 raERj6qUcPuig525mC+U0oJyS+d6HcVKun8syA/PBsI5gqnpyhNQ09P/SpQeNfid F6tiTFlglvNPUQB11i5oV6bU2sVHcNoNWAQlT2Rmkt1WnK9JcDHwUlO234F/TgHH cei1gvlWajHrWYJjbybruRyqbxGV3E1d -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:58 2025 by rpki-client