$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: /cE4Rz/mKA8j6cndVvv2CTiDWbxpShzqLMInSO2DbnM= Subject key identifier: 35:A0:8C:9F:11:49:03:50:9A:7A:8E:9D:68:55:EF:EB:12:3B:4F:EF Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B6B Signing time: Tue 04 Nov 2025 16:21:57 +0000 Manifest this update: Tue 04 Nov 2025 16:21:56 +0000 Manifest next update: Tue 11 Nov 2025 16:21:56 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: 4+YYf7AAjhK78nnMIiStbW9S+/7kRe50fFf3+OdxyFk=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: PfaBGPnkUgsWEXBDryvUqr89XZWDUPWxeZUL3rzB4xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7031 (0x1b77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Nov 4 16:21:56 2025 GMT Not After : Nov 11 16:21:56 2025 GMT Subject: CN=690a2825-8b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:de:42:b2:c4:15:bb:d9:14:62:80:91:a9: dd:12:99:41:17:ac:87:d9:65:78:21:c1:78:81:b8: ac:01:28:5b:9a:1d:2c:cf:6d:9b:d3:3d:de:a4:8e: ca:32:34:c4:9d:02:8a:cd:2c:a7:03:7c:87:3f:c0: 4e:d4:3e:71:ee:98:d9:ae:61:d5:b5:ae:70:54:8a: be:88:55:84:7b:1d:d0:33:fd:f3:16:f4:38:a8:0c: ea:70:9e:29:0d:84:0a:fe:e9:a0:0e:e5:43:e1:61: 34:f3:38:28:0e:db:bf:55:22:44:d5:53:b7:9a:7f: fa:9f:d6:65:6d:63:e3:e5:13:f6:85:b8:dd:21:d5: fe:6b:69:af:e6:68:e2:3d:3c:7b:82:dd:66:a6:a0: 0b:a8:06:a1:7d:85:6e:5c:a6:78:53:df:39:17:b2: 1f:ba:88:a2:d8:ba:2c:00:53:c4:ea:90:78:87:61: 6d:2d:04:dd:a5:2e:e2:b0:f4:eb:5e:a1:f6:c3:a1: fc:20:ff:51:af:5e:0c:c8:8f:2a:26:23:56:41:1b: 3f:4e:38:88:cf:e9:41:68:d1:7f:a2:f5:83:d5:b4: aa:d1:55:69:d1:f7:8f:b8:98:f2:5d:84:86:e5:f4: a5:79:25:f8:37:e1:b9:ae:33:ab:8f:ce:86:c6:80: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A0:8C:9F:11:49:03:50:9A:7A:8E:9D:68:55:EF:EB:12:3B:4F:EF X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:23:4d:f0:7e:2b:51:a4:fd:20:01:84:64:a1:b3:45:c3:63: 61:7e:c5:47:35:d5:dc:0d:17:2f:3c:b8:3b:45:f4:74:4e:ce: 39:6f:9a:3d:76:25:72:b7:f6:96:ad:e3:c2:0b:77:bd:59:c7: 1f:74:d4:73:86:3f:75:a4:6b:98:cc:10:db:93:f7:c4:21:61: c9:0d:5d:94:43:f1:ea:b0:c2:b3:c5:73:23:fc:31:d5:b1:2f: d8:5d:ff:82:8a:48:f2:70:5c:07:4f:df:36:50:5e:77:bd:5f: 74:82:f4:20:0d:3d:f1:8e:d2:5a:29:4d:2a:55:1e:49:71:15: 9b:68:fe:c9:e3:bb:74:c6:9f:95:1f:24:03:61:b3:9b:51:d2: ca:07:2a:1b:91:fa:61:c3:bb:2e:9d:88:8a:84:6b:67:08:5a: e8:f7:04:16:19:7d:82:97:f1:da:3f:f7:db:62:ad:07:a1:10: fe:42:da:ac:17:90:0e:db:58:e9:f3:01:b0:78:b6:26:d8:34: bf:e5:50:4e:ec:53:65:d3:07:f1:77:ce:b5:42:e0:11:17:4e: a4:0e:5a:95:44:b6:25:d2:0e:ff:da:4d:d9:9a:1b:df:c6:0f: a4:af:d4:9d:f3:bd:15:58:f5:34:ba:cf:33:2e:55:54:a8:34: e6:67:87:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUxMTA0MTYyMTU2WhcNMjUxMTExMTYyMTU2WjAYMRYwFAYD VQQDEw02OTBhMjgyNS04YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApc7eQrLEFbvZFGKAkandEplBF6yH2WV4IcF4gbisAShbmh0sz22b0z3epI7K MjTEnQKKzSynA3yHP8BO1D5x7pjZrmHVta5wVIq+iFWEex3QM/3zFvQ4qAzqcJ4p DYQK/umgDuVD4WE08zgoDtu/VSJE1VO3mn/6n9ZlbWPj5RP2hbjdIdX+a2mv5mji PTx7gt1mpqALqAahfYVuXKZ4U985F7Ifuoii2LosAFPE6pB4h2FtLQTdpS7isPTr XqH2w6H8IP9Rr14MyI8qJiNWQRs/TjiIz+lBaNF/ovWD1bSq0VVp0fePuJjyXYSG 5fSleSX4N+G5rjOrj86GxoBn3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWgjJ8R SQNQmnqOnWhV7+sSO0/vMB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhI03wfitRpP0gAYRkobNFw2NhfsVHNdXcDRcvPLg7RfR0Ts45b5o9 diVyt/aWrePCC3e9WccfdNRzhj91pGuYzBDbk/fEIWHJDV2UQ/HqsMKzxXMj/DHV sS/YXf+CikjycFwHT982UF53vV90gvQgDT3xjtJaKU0qVR5JcRWbaP7J47t0xp+V HyQDYbObUdLKByobkfphw7sunYiKhGtnCFro9wQWGX2Cl/HaP/fbYq0HoRD+Qtqs F5AO21jp8wGweLYm2DS/5VBO7FNl0wfxd861QuARF06kDlqVRLYl0g7/2k3Zmhvf xg+kr9Sd870VWPU0us8zLlVUqDTmZ4fu -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:26 2025 by rpki-client