$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: PJoW2GlHXHQsyyvzpbw9yF9Yr3ae5wGAbgr5h3Q6P8A= Subject key identifier: B9:E0:AA:FA:F9:A6:F6:6B:38:9D:CA:C9:FF:D6:DA:DA:33:41:19:D8 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 021C Signing time: Mon 03 Nov 2025 02:15:07 +0000 Manifest this update: Mon 03 Nov 2025 02:15:07 +0000 Manifest next update: Mon 10 Nov 2025 02:15:07 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: sQmFN7tyKQ1Gf1SPeqlkostbugD/40re1Zxvy9LZieI=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: jnHEv+tk9LEmiC9T0eLpIu0ka8tlgw/1HGmQA/hDw9s=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: Tod+meVH3/YYDYyQo78I9vVyyLfaumC1ya5cnKT+hFM=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 3zWqR+4/bbh/62pxX54wkuJs0uKg6zeZhN4dCLWwFho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Nov 3 02:15:07 2025 GMT Not After : Nov 10 02:15:07 2025 GMT Subject: CN=6908102b-fe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:bb:7d:f4:59:8d:27:50:84:2f:7b:36:99: 66:5a:e3:cb:ea:0c:71:8d:4e:8f:71:a3:24:d8:fb: 16:fb:9b:10:09:2f:93:d1:4c:99:1a:6c:51:25:f2: c6:67:77:42:b5:3a:fd:25:36:eb:99:38:22:e3:b9: 99:fa:8b:27:71:3d:61:83:54:ec:20:38:43:fa:68: ff:20:a0:e6:b5:25:b6:73:cb:72:b9:a1:f0:d0:e2: a8:8d:19:00:d5:27:bb:4a:77:86:a5:41:a5:6b:18: 0a:2d:9f:13:8b:8a:9a:8b:e8:4c:2c:2e:e9:54:a6: e7:44:ce:84:28:aa:17:7c:99:3f:a9:cf:99:d5:05: a2:b0:2e:cf:d3:22:c2:d1:63:e6:bd:20:0b:76:be: 13:57:24:9e:87:3a:79:cc:5d:7a:6c:fb:a9:48:36: 89:7b:10:8e:35:fd:52:d8:07:7f:d9:70:79:5b:a7: 5b:72:6b:ee:d7:1d:7f:83:0b:9b:a2:88:80:f2:ce: 15:a0:79:0d:cf:74:f6:8a:ee:af:87:a5:18:c0:6d: b3:68:6e:78:72:75:2b:d1:7a:ac:98:cb:5a:55:c5: 1b:f3:ca:4c:e7:e8:6f:d5:36:b1:09:cb:20:7f:62: e8:2e:b6:22:8b:11:ca:2c:2c:73:3d:e2:17:93:74: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E0:AA:FA:F9:A6:F6:6B:38:9D:CA:C9:FF:D6:DA:DA:33:41:19:D8 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:92:b5:73:93:da:1e:2e:24:ad:e8:68:f8:91:6b:d7:42:d1: 38:39:ba:4e:5d:d3:34:d8:90:91:d1:1a:31:66:bd:1e:ea:53: c3:6a:a4:dc:db:34:29:bf:44:e0:a5:80:62:a8:93:d1:fb:8a: 3f:f2:35:dc:75:24:da:11:18:fc:f9:c6:6c:b4:9e:17:e3:72: 35:15:c6:25:f3:63:c5:50:b9:be:55:ed:9f:6a:98:cc:24:4d: 83:52:1f:27:28:d9:d9:24:35:21:bb:f8:18:c8:12:cc:d8:aa: 74:f0:60:45:1c:f3:a1:77:3c:eb:21:c2:76:58:91:68:bc:3d: 12:6b:2f:b4:4b:84:72:10:41:e2:2a:b4:59:a5:a1:df:ae:26: c5:d1:88:95:39:ac:fc:a7:4e:5c:1b:f7:b2:11:cd:2f:77:2b: 92:ab:c5:1e:32:20:d8:5f:70:86:c2:b5:09:a3:51:ef:fd:c0: 47:cc:e4:84:a0:15:46:07:74:0f:a8:af:a8:62:b7:d2:3d:e1: 43:52:ca:df:4e:9a:dd:98:99:93:05:48:e5:00:c7:31:42:4a: e0:b9:54:16:00:f9:24:a3:ec:03:51:b2:72:4d:19:ce:4b:3d: 46:dd:9a:b2:d8:d7:ab:6c:95:7e:90:16:b6:e9:b8:1c:ae:7b: 85:08:6e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUxMTAzMDIxNTA3WhcNMjUxMTEwMDIxNTA3WjAYMRYwFAYD VQQDEw02OTA4MTAyYi1mZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMG7ffRZjSdQhC97NplmWuPL6gxxjU6PcaMk2PsW+5sQCS+T0UyZGmxRJfLG Z3dCtTr9JTbrmTgi47mZ+osncT1hg1TsIDhD+mj/IKDmtSW2c8tyuaHw0OKojRkA 1Se7SneGpUGlaxgKLZ8Ti4qai+hMLC7pVKbnRM6EKKoXfJk/qc+Z1QWisC7P0yLC 0WPmvSALdr4TVySehzp5zF16bPupSDaJexCONf1S2Ad/2XB5W6dbcmvu1x1/gwub ooiA8s4VoHkNz3T2iu6vh6UYwG2zaG54cnUr0XqsmMtaVcUb88pM5+hv1TaxCcsg f2LoLrYiixHKLCxzPeIXk3R9rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLngqvr5 pvZrOJ3Kyf/W2tozQRnYMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkrVzk9oeLiSt6Gj4kWvXQtE4ObpOXdM02JCR0RoxZr0e6lPDaqTc 2zQpv0TgpYBiqJPR+4o/8jXcdSTaERj8+cZstJ4X43I1FcYl82PFULm+Ve2fapjM JE2DUh8nKNnZJDUhu/gYyBLM2Kp08GBFHPOhdzzrIcJ2WJFovD0Say+0S4RyEEHi KrRZpaHfribF0YiVOaz8p05cG/eyEc0vdyuSq8UeMiDYX3CGwrUJo1Hv/cBHzOSE oBVGB3QPqK+oYrfSPeFDUsrfTprdmJmTBUjlAMcxQkrguVQWAPkko+wDUbJyTRnO Sz1G3Zqy2NerbJV+kBa26bgcrnuFCG4f -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:48 2025 by rpki-client