$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: M8M417uzmOcKUQvRgxWgRGWaRR2Lffmfc66eJ+gm3WQ= Subject key identifier: 5F:6A:72:58:09:78:F0:D7:42:81:E8:E4:5A:9C:33:62:77:FA:0F:3F Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0B66 Signing time: Sun 02 Nov 2025 19:06:42 +0000 Manifest this update: Sun 02 Nov 2025 19:06:42 +0000 Manifest next update: Sun 09 Nov 2025 19:06:42 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: FMNaMIQCd9Gp2jVzUX7WkiAXh6x+2+b49JZcyflpa6k=) 2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: V1nVjcRX5R04AqVfR5w5cXlLTGnKcZ3YhA/Vr4DbC7g=) 3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: Dt3Rxw54HIQ46kEi6T0edZoyMwWemQneM/8kvnTf7jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Nov 2 19:06:42 2025 GMT Not After : Nov 9 19:06:42 2025 GMT Subject: CN=6907abc2-34ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:b9:08:11:d7:26:3d:07:65:c0:f2:89:0e: dc:9e:c0:85:93:eb:af:7d:36:51:54:4d:42:3c:0a: 79:d5:04:33:bc:5e:ca:aa:97:da:7a:8d:1f:92:67: 7c:86:69:2c:d2:ee:70:c9:ae:ec:5d:18:fe:79:fc: 79:7f:e1:9b:86:0b:1e:e3:b4:0f:f5:1c:66:06:8b: 59:cd:3b:34:04:c3:f3:4b:e9:5b:37:8c:7b:8d:f7: fd:ef:ea:55:e4:b5:a2:40:1d:a8:23:f9:4d:f4:45: 64:7c:d2:60:f9:b8:60:19:97:b5:05:ee:00:3d:7b: 47:74:a9:08:a0:fe:2d:30:3c:b3:96:ae:f7:be:b0: a2:c3:3b:e9:98:31:25:e6:1a:3e:3b:26:c6:3d:f4: 4e:b8:71:d8:82:4b:bb:1b:05:37:0c:6b:af:3d:1b: c2:8d:fc:23:14:fb:da:60:6f:32:74:25:18:22:2f: 25:0b:15:9c:14:f9:b0:c0:ab:50:98:6e:e2:1d:92: 89:ff:92:1e:96:89:3f:b9:34:25:2b:92:96:c0:0f: 5b:9d:85:34:8a:18:cd:29:2b:04:a0:89:e8:2a:a5: cd:bf:7b:15:f8:33:63:f7:3e:16:a1:8c:2b:03:e5: 3e:60:15:39:f2:5c:c6:c9:4e:af:49:6d:c5:e1:dc: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6A:72:58:09:78:F0:D7:42:81:E8:E4:5A:9C:33:62:77:FA:0F:3F X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:33:d7:5c:04:44:f0:6f:72:98:a6:86:5c:22:99:22:7f:25: 10:9b:4a:67:da:b6:a1:cc:22:18:39:1a:43:a3:b1:c7:17:6d: 3a:13:e1:1a:18:0b:f9:22:9d:86:f5:fd:5f:9b:28:0d:76:83: 6d:fb:20:54:dd:f9:5c:84:82:51:ac:26:3c:22:37:96:09:24: 11:c1:5f:b4:14:f0:e6:b2:62:93:fa:20:01:c3:ac:46:02:42: 05:c7:57:a5:b8:f3:9f:6c:0e:c1:0c:94:cb:50:8e:02:61:87: b1:1f:8f:56:46:a1:b1:9f:1a:40:1e:6f:3a:5f:81:04:fd:10: 55:90:dd:c7:62:e5:a8:9e:9e:e4:d9:c8:9d:ac:7e:87:80:cc: a1:43:15:3b:90:38:57:fa:ee:67:c0:cc:73:db:ce:b5:d6:2c: 32:ee:b9:cd:df:b0:fe:df:32:4b:e0:b7:d1:f6:be:d2:1b:63: 27:f1:52:db:17:7a:b1:00:83:71:72:4f:6c:10:53:ac:c5:f0: 66:5d:46:64:ac:33:90:0f:e0:eb:6b:00:3c:8a:5a:97:d3:09: 15:4e:5c:86:a8:3a:fa:01:30:9b:9e:8a:07:98:f1:91:50:bc: 12:09:b7:c0:29:a9:71:12:7f:52:8e:01:d6:65:5a:12:0b:f1: 33:07:ba:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUxMTAyMTkwNjQyWhcNMjUxMTA5MTkwNjQyWjAYMRYwFAYD VQQDEw02OTA3YWJjMi0zNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh65CBHXJj0HZcDyiQ7cnsCFk+uvfTZRVE1CPAp51QQzvF7Kqpfaeo0fkmd8 hmks0u5wya7sXRj+efx5f+Gbhgse47QP9RxmBotZzTs0BMPzS+lbN4x7jff97+pV 5LWiQB2oI/lN9EVkfNJg+bhgGZe1Be4APXtHdKkIoP4tMDyzlq73vrCiwzvpmDEl 5ho+OybGPfROuHHYgku7GwU3DGuvPRvCjfwjFPvaYG8ydCUYIi8lCxWcFPmwwKtQ mG7iHZKJ/5Ielok/uTQlK5KWwA9bnYU0ihjNKSsEoInoKqXNv3sV+DNj9z4WoYwr A+U+YBU58lzGyU6vSW3F4dyO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9qclgJ ePDXQoHo5FqcM2J3+g8/MB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJM9dcBETwb3KYpoZcIpkifyUQm0pn2rahzCIYORpDo7HHF206E+Ea GAv5Ip2G9f1fmygNdoNt+yBU3flchIJRrCY8IjeWCSQRwV+0FPDmsmKT+iABw6xG AkIFx1eluPOfbA7BDJTLUI4CYYexH49WRqGxnxpAHm86X4EE/RBVkN3HYuWonp7k 2cidrH6HgMyhQxU7kDhX+u5nwMxz28611iwy7rnN37D+3zJL4LfR9r7SG2Mn8VLb F3qxAINxck9sEFOsxfBmXUZkrDOQD+DrawA8ilqX0wkVTlyGqDr6ATCbnooHmPGR ULwSCbfAKalxEn9SjgHWZVoSC/EzB7pR -----END CERTIFICATE-----Generated at Tue Nov 4 16:29:58 2025 by rpki-client