$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: Dlbr2wfH+Uhwit3q3RNoBCsHbFccumjdjr41IuXkwag= Subject key identifier: 8E:D8:43:32:A4:F9:F4:6A:1B:C5:DD:34:0F:44:D5:A7:73:54:C4:EA Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0EC5 Signing time: Sun 02 Nov 2025 17:39:54 +0000 Manifest this update: Sun 02 Nov 2025 17:39:54 +0000 Manifest next update: Sun 09 Nov 2025 17:39:54 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: CoxljB1sQaeN5bFnwkt8S1l8wHx4C3znPIe4uYcgMI0=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: vN4eTkgE+NqzrGCF55MmLQiQ1U4uCoJcvi6VZO9X/KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3793 (0xed1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Nov 2 17:39:54 2025 GMT Not After : Nov 9 17:39:54 2025 GMT Subject: CN=6907976a-dc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:53:c2:97:70:c4:de:e4:e5:3b:94:be:40: ff:d2:a8:82:ea:43:26:88:48:e7:6b:6f:04:00:71: f7:a5:5f:16:e1:f5:cc:4b:98:41:4d:8f:fb:3a:cb: 9b:77:79:91:8c:09:e3:12:bd:ff:3e:ec:7b:aa:33: 82:b3:49:48:b8:5f:71:ab:c3:ba:90:65:47:b3:62: 64:f3:64:62:80:0f:3e:f3:4c:69:00:2e:84:3d:83: 91:b8:a7:2b:a5:d4:a2:a7:ff:bd:b7:a2:a8:db:5b: f8:08:cb:45:bb:bb:0d:1d:92:69:d6:12:22:58:a4: 53:ab:c6:27:52:d9:c3:16:bd:56:17:53:3f:a8:12: 50:a3:2e:e2:8c:ac:8d:ba:ab:a2:3d:cd:ec:84:50: 0e:97:8d:f2:49:eb:1e:67:f3:68:49:98:c7:ee:11: e5:a6:8a:ae:b2:be:9c:f2:3c:3d:cc:a5:27:02:2f: 2f:fd:c5:f7:ab:ea:70:6d:3a:24:4e:f9:11:28:30: 40:93:d4:7a:19:86:a1:21:1c:dc:d9:1a:20:2b:c3: 63:c6:ef:77:e5:c1:5b:c5:4f:aa:1f:00:20:1f:80: da:63:fb:11:88:1a:5c:cd:af:f5:5f:ad:26:dd:26: 36:4f:78:25:5b:1c:e3:4d:be:ac:5d:f8:92:df:16: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D8:43:32:A4:F9:F4:6A:1B:C5:DD:34:0F:44:D5:A7:73:54:C4:EA X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6a:ad:55:d4:2f:cc:d3:9c:d8:92:d2:be:3c:df:93:f9:0b: 84:02:20:8b:01:11:a4:7f:96:b9:7f:52:41:83:e9:4e:68:28: 00:a9:ca:5f:83:92:74:dc:5e:9d:89:39:1d:bb:82:46:e4:e9: ee:fe:63:a0:70:5c:dd:fe:8e:fd:0e:b8:73:98:0d:eb:a5:f6: ad:17:e4:04:5d:80:94:57:f8:63:ee:0b:7d:83:1f:03:4a:09: 7f:9a:1e:23:73:b6:d0:24:3c:f5:d1:ed:2a:e9:01:37:65:57: 87:d5:30:a7:5f:d5:60:e6:ed:dd:18:08:bb:c7:bd:cf:f4:3a: a9:7a:11:69:ac:d0:23:58:32:cb:68:cd:1b:bb:fc:d6:3a:fe: a5:a3:64:9a:d5:c3:af:e3:eb:ec:4a:58:ea:5d:d8:80:a4:d8: 15:e8:68:08:05:25:63:b0:91:bc:cd:f5:0e:95:f6:a7:aa:5b: 4c:a1:64:6d:44:28:db:20:74:33:26:ef:83:3b:70:69:23:9c: 32:cf:65:bf:50:f7:8d:da:45:36:e4:d1:d1:f5:4c:09:b7:3e: 31:1c:40:cf:d2:96:70:b5:79:9c:4e:5b:7e:6a:a2:d8:60:f2: 43:eb:ab:f4:55:96:4d:e9:c5:b1:94:8a:98:72:82:08:5c:3b: d0:bf:da:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjUxMTAyMTczOTU0WhcNMjUxMTA5MTczOTU0WjAYMRYwFAYD VQQDEw02OTA3OTc2YS1kYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu75TwpdwxN7k5TuUvkD/0qiC6kMmiEjna28EAHH3pV8W4fXMS5hBTY/7Osub d3mRjAnjEr3/Pux7qjOCs0lIuF9xq8O6kGVHs2Jk82RigA8+80xpAC6EPYORuKcr pdSip/+9t6Ko21v4CMtFu7sNHZJp1hIiWKRTq8YnUtnDFr1WF1M/qBJQoy7ijKyN uquiPc3shFAOl43ySeseZ/NoSZjH7hHlpoqusr6c8jw9zKUnAi8v/cX3q+pwbTok TvkRKDBAk9R6GYahIRzc2RogK8Njxu935cFbxU+qHwAgH4DaY/sRiBpcza/1X60m 3SY2T3glWxzjTb6sXfiS3xYkEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7YQzKk +fRqG8XdNA9E1adzVMTqMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/aq1V1C/M05zYktK+PN+T+QuEAiCLARGkf5a5f1JBg+lOaCgAqcpf g5J03F6diTkdu4JG5Onu/mOgcFzd/o79DrhzmA3rpfatF+QEXYCUV/hj7gt9gx8D Sgl/mh4jc7bQJDz10e0q6QE3ZVeH1TCnX9Vg5u3dGAi7x73P9DqpehFprNAjWDLL aM0bu/zWOv6lo2Sa1cOv4+vsSljqXdiApNgV6GgIBSVjsJG8zfUOlfanqltMoWRt RCjbIHQzJu+DO3BpI5wyz2W/UPeN2kU25NHR9UwJtz4xHEDP0pZwtXmcTlt+aqLY YPJD66v0VZZN6cWxlIqYcoIIXDvQv9p8 -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:54 2025 by rpki-client