$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: vm3UEGqVomTMSDo3lHQBnLVG/3FD63aDJAGot7jNupk= Subject key identifier: 54:25:C2:BD:D1:B8:C8:16:DC:6B:85:B2:DD:C3:1E:A9:A0:2D:D5:AA Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 0715 Signing time: Tue 04 Nov 2025 21:56:55 +0000 Manifest this update: Tue 04 Nov 2025 21:56:54 +0000 Manifest next update: Tue 11 Nov 2025 21:56:54 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: z8aRbexiEWOlMA+7JuETeqsuK87omrSSOSd71ubBCA4=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: FRIMYZ0ymb4xNk4HDg1e5QrcA1pECIMjsb8IPP33VK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: Nov 4 21:56:54 2025 GMT Not After : Nov 11 21:56:54 2025 GMT Subject: CN=690a76a6-441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:27:5c:27:c0:2f:68:75:b4:dd:cf:10:61: f4:de:7c:df:39:18:c7:42:9c:61:21:66:dd:5b:7d: 88:c0:27:7b:44:c9:49:26:ee:61:07:74:4d:94:24: 89:f6:99:62:6c:0e:bd:d9:74:0c:0f:20:bf:02:7c: 20:42:aa:34:80:f9:77:ab:c7:94:80:c6:57:df:08: f4:4e:dd:65:1a:1a:26:2a:11:7a:95:45:61:df:db: fa:04:68:4b:05:64:d6:76:8a:31:c4:d0:24:e6:1c: a6:31:a9:2f:80:04:d9:52:29:2f:de:49:e9:84:00: 41:06:a5:18:48:64:f6:0d:7d:95:3f:00:2c:bf:cd: df:b0:1a:a0:17:dd:b5:ca:5e:96:35:85:e7:c5:4b: 99:6a:9b:9e:60:2b:e5:d7:15:d0:4c:98:d5:29:6a: 9c:1d:3b:a2:ab:c6:60:99:ff:f8:79:54:d7:fc:d4: c1:c6:d7:3c:92:e0:39:fd:4d:a9:5e:b7:40:77:6c: 1a:d0:d0:1a:44:0c:4d:2b:82:a5:74:cf:5d:69:24: 2b:04:a9:da:c0:f6:5d:ee:1a:3a:87:46:85:2f:4e: 4e:80:d5:8d:18:cc:3f:36:7a:4a:61:9b:1b:a2:54: 5a:12:90:ff:1e:75:7e:a2:27:52:24:e3:de:97:39: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:25:C2:BD:D1:B8:C8:16:DC:6B:85:B2:DD:C3:1E:A9:A0:2D:D5:AA X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:44:2a:af:fd:0b:bc:19:0b:04:01:b5:fe:8b:72:c7:f2:5c: e2:92:b3:0b:3f:12:dc:3c:e9:c7:b5:76:0b:68:be:2f:b4:70: c4:53:21:1f:2e:48:aa:a0:c0:53:d1:eb:23:e1:0e:15:05:f7: de:0a:d1:aa:db:d8:29:bc:b3:39:4c:cd:c4:93:52:1e:20:de: e0:5c:54:3c:8a:0f:2b:f9:95:5b:d4:8e:37:eb:e4:11:fe:d2: 7c:4b:f0:7f:f6:48:f8:26:77:1c:a6:d3:66:06:c4:fa:c2:d7: a5:65:1f:37:a3:bb:5c:14:9c:d8:2d:ba:8a:57:1b:73:45:8c: 38:0c:5b:54:a6:19:f7:05:11:eb:90:20:64:9a:18:55:3a:69: 28:b0:77:b5:1f:bd:29:7f:97:9b:ce:6b:b2:1c:ba:57:e8:c3: ce:71:f6:59:77:58:d7:7d:00:dd:f4:c0:a5:d1:6f:bd:93:13: a2:01:eb:07:9c:61:c3:2e:ae:f2:26:e1:d8:48:b1:d7:6b:02: f6:56:72:cd:1a:ac:83:55:37:4a:9a:5a:0d:11:8b:05:ff:49: 9b:82:59:b1:b5:06:ac:2e:46:25:38:82:bd:2b:87:fe:67:2d: f2:0e:2e:99:9d:d8:88:58:68:0e:c9:8e:17:ce:2c:b5:84:82: 5a:fe:e2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjUxMTA0MjE1NjU0WhcNMjUxMTExMjE1NjU0WjAYMRYwFAYD VQQDEw02OTBhNzZhNi00NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstYnXCfAL2h1tN3PEGH03nzfORjHQpxhIWbdW32IwCd7RMlJJu5hB3RNlCSJ 9plibA692XQMDyC/AnwgQqo0gPl3q8eUgMZX3wj0Tt1lGhomKhF6lUVh39v6BGhL BWTWdooxxNAk5hymMakvgATZUikv3knphABBBqUYSGT2DX2VPwAsv83fsBqgF921 yl6WNYXnxUuZapueYCvl1xXQTJjVKWqcHTuiq8Zgmf/4eVTX/NTBxtc8kuA5/U2p XrdAd2wa0NAaRAxNK4KldM9daSQrBKnawPZd7ho6h0aFL05OgNWNGMw/NnpKYZsb olRaEpD/HnV+oidSJOPelznKCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQlwr3R uMgW3GuFst3DHqmgLdWqMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/RCqv/Qu8GQsEAbX+i3LH8lzikrMLPxLcPOnHtXYLaL4vtHDEUyEf LkiqoMBT0esj4Q4VBffeCtGq29gpvLM5TM3Ek1IeIN7gXFQ8ig8r+ZVb1I436+QR /tJ8S/B/9kj4JnccptNmBsT6wtelZR83o7tcFJzYLbqKVxtzRYw4DFtUphn3BRHr kCBkmhhVOmkosHe1H70pf5ebzmuyHLpX6MPOcfZZd1jXfQDd9MCl0W+9kxOiAesH nGHDLq7yJuHYSLHXawL2VnLNGqyDVTdKmloNEYsF/0mbglmxtQasLkYlOIK9K4f+ Zy3yDi6ZndiIWGgOyY4Xziy1hIJa/uIR -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:16 2025 by rpki-client