$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json) Hash identifier: ESIF5lsSiFksDoB135GBVxilO0dAcy9WTQs5PUCQBUg= Subject key identifier: E0:BA:B4:AD:82:C2:DA:C7:6A:DB:71:87:98:0F:22:9F:19:35:74:BC Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft Manifest number: 3F Signing time: Mon 03 Nov 2025 07:27:55 +0000 Manifest this update: Mon 03 Nov 2025 07:27:55 +0000 Manifest next update: Mon 10 Nov 2025 07:27:55 +0000 Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: 0sTIux21Jzhw6qGNsDbNh9D7KYZZfflW0Wtv+gsKoiI=) 2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Validity Not Before: Nov 3 07:27:55 2025 GMT Not After : Nov 10 07:27:55 2025 GMT Subject: CN=6908597b-7f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6a:c0:27:03:f2:cf:39:9d:ae:4d:99:76:e1: bb:fd:aa:6c:84:14:91:79:6d:54:37:9d:e8:74:2a: 55:61:f2:d6:f5:e4:ba:48:10:dc:62:5b:f4:a7:68: f9:56:e5:84:50:f5:09:d6:a9:3b:28:ab:c7:01:2f: ee:96:f9:7d:6a:e6:af:93:4b:ea:10:fa:28:1b:b1: c2:3a:34:e3:5a:f5:6f:a4:e3:a3:ac:ce:8f:0d:f6: bb:9d:42:cb:81:ce:39:1f:eb:8c:7d:08:e6:09:fb: 32:c3:f0:78:81:a4:22:8e:e8:67:bb:b9:3c:d1:e0: 80:ca:9b:05:ac:34:73:c3:da:f7:6c:c8:c9:96:ad: b7:86:b3:d8:d5:e6:f3:ec:a6:bf:ae:41:d6:5f:ac: cd:c5:9e:a7:ea:6a:e8:d5:92:7a:28:95:f6:f9:87: 75:b8:99:d7:0e:0d:46:97:b5:0e:fa:03:0b:03:93: 29:01:e4:28:ee:d4:27:a1:7c:02:e6:f6:6f:ac:db: ec:0e:9b:3e:4e:e5:ff:7f:a0:12:32:56:50:ee:f0: bb:f6:49:d2:61:20:28:b7:5b:e7:e6:88:00:dc:8c: a3:27:dc:32:40:be:49:0b:dc:fb:6c:ab:d8:97:03: 6e:a8:24:b6:90:8f:b1:39:b2:66:3f:22:9c:ce:7b: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:B4:AD:82:C2:DA:C7:6A:DB:71:87:98:0F:22:9F:19:35:74:BC X509v3 Authority Key Identifier: keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:62:fe:7d:83:80:14:74:05:69:fe:37:8d:47:ee:a1:41: 65:6a:1d:e0:49:8a:66:1d:1c:72:a0:eb:33:50:86:b2:ef:1f: 9b:e2:0e:06:74:12:3e:e0:61:e4:a5:0e:44:39:7b:23:42:d7: 61:2e:04:b3:fd:7b:7d:62:f1:cb:c6:e2:f5:32:af:6d:af:00: 28:53:e3:03:8d:4c:f6:63:2b:53:56:b3:5c:f4:f4:19:47:63: 88:b6:4a:d4:a2:4d:db:79:09:fe:2b:8c:16:22:93:26:4b:b2: b8:61:9a:73:c3:44:e5:88:4b:cf:73:fd:8d:ac:c8:33:d2:c1: 35:b9:3a:b0:48:80:43:1a:52:4b:92:06:4f:c4:da:f8:3b:71: 7d:15:90:7d:a8:21:79:0d:6e:57:c1:4d:58:7b:c9:e0:aa:d0: ac:28:75:50:62:65:4c:eb:1b:1e:d4:5f:c4:00:8b:88:a8:09: 21:84:5e:59:67:a3:b8:ab:08:2e:6f:79:2d:2a:9d:4d:30:d4: 9a:22:c4:86:1e:4f:92:94:f7:5f:f6:11:98:a3:5e:31:7f:a4: f9:fc:a9:45:36:36:ed:57:a3:2d:48:13:ea:21:44:17:f9:ca: 6a:e2:73:c1:51:6e:f4:5f:9d:01:d9:6b:95:5f:6c:26:d9:18: 48:09:8a:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURDMTExMC8GA1UEBRMoOTgyNDIxODFBNzU1NEEyOEU3OEMxQUU4QTczQkUyNzk0 NTJDQ0JGNDAeFw0yNTExMDMwNzI3NTVaFw0yNTExMTAwNzI3NTVaMBgxFjAUBgNV BAMTDTY5MDg1OTdiLTdmMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2asAnA/LPOZ2uTZl24bv9qmyEFJF5bVQ3neh0KlVh8tb15LpIENxiW/SnaPlW 5YRQ9QnWqTsoq8cBL+6W+X1q5q+TS+oQ+igbscI6NONa9W+k46Oszo8N9rudQsuB zjkf64x9COYJ+zLD8HiBpCKO6Ge7uTzR4IDKmwWsNHPD2vdsyMmWrbeGs9jV5vPs pr+uQdZfrM3FnqfqaujVknoolfb5h3W4mdcODUaXtQ76AwsDkykB5Cju1CehfALm 9m+s2+wOmz5O5f9/oBIyVlDu8Lv2SdJhICi3W+fmiADcjKMn3DJAvkkL3Ptsq9iX A26oJLaQj7E5smY/IpzOe7nRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4Lq0rYLC 2sdq23GHmA8inxk1dLwwHwYDVR0jBBgwFoAUmCQhgadVSijnjBropzvieUUsy/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREMxL0ZEMTEyQjc2NUQ2 OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUNRaGdhZFZTaWpuakJyb3B6dmllVVVzeV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REMxL0ZEMTEyQjc2NUQ2OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lq bmpCcm9wenZpZVVVc3lfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD5wYv59g4AUdAVp/jeNR+6hQWVqHeBJimYdHHKg6zNQhrLvH5viDgZ0 Ej7gYeSlDkQ5eyNC12EuBLP9e31i8cvG4vUyr22vAChT4wONTPZjK1NWs1z09BlH Y4i2StSiTdt5Cf4rjBYikyZLsrhhmnPDROWIS89z/Y2syDPSwTW5OrBIgEMaUkuS Bk/E2vg7cX0VkH2oIXkNblfBTVh7yeCq0KwodVBiZUzrGx7UX8QAi4ioCSGEXlln o7irCC5veS0qnU0w1JoixIYeT5KU91/2EZijXjF/pPn8qUU2Nu1Xoy1IE+ohRBf5 ymric8FRbvRfnQHZa5VfbCbZGEgJijQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:07 2025 by rpki-client