$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: hY7erVn/hhq+IjTwfOFxKAbxvte+fHPaJAjOiSD4bRo= Subject key identifier: 72:B7:41:61:19:5B:F7:E7:9D:69:C4:EC:6B:99:1A:FB:EC:A1:3C:66 Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 013E Signing time: Wed 05 Nov 2025 04:36:31 +0000 Manifest this update: Wed 05 Nov 2025 04:36:31 +0000 Manifest next update: Wed 12 Nov 2025 04:36:31 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: 7rln1jnLD826s0ofg6C0FzadIzfm1B+PIUeHTFx8QTc=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: Jluh9mrxLx3CmJG4INslPH8RKZMT0C9KwG0Dzzekk1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: Nov 5 04:36:31 2025 GMT Not After : Nov 12 04:36:31 2025 GMT Subject: CN=690ad44f-01f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:b8:d9:84:2e:65:f3:38:05:77:2a:01:ca: 2b:db:e2:6f:e0:0a:cc:de:be:22:40:1d:1e:ba:44: b8:c9:9a:4c:df:da:fa:08:f2:b8:fc:04:2e:2b:97: b5:0c:31:bd:c6:a9:d3:16:de:74:a1:f6:ed:fd:ff: 3b:82:ff:10:b6:b6:5b:a4:18:f3:33:e0:12:0e:c2: d4:3e:0b:d7:8e:f0:50:e6:b4:af:6e:69:5d:06:0c: b6:68:b6:b0:17:86:d6:a6:46:16:c4:ba:d7:1a:59: 00:26:40:b9:04:42:0d:fc:ac:1b:c9:2c:c2:14:29: c0:53:16:b2:c9:c8:1d:57:f5:a1:a4:12:95:84:7a: e1:12:4f:ab:1e:93:a2:d2:55:97:2f:8e:81:1e:f4: 80:22:05:0f:f1:2c:3e:56:c1:71:bf:65:a8:6e:37: 6e:d3:f7:af:f8:db:c3:78:f2:ea:dd:90:4c:3d:48: 15:7d:ac:d1:1e:03:65:d5:4a:15:07:6e:54:1b:d0: 3a:82:9f:4b:7e:20:b5:c2:35:d3:04:e7:71:90:48: 74:7d:a7:44:a9:e8:cb:81:e4:fc:2d:34:07:de:a4: 8f:3f:a1:a1:27:a6:82:4e:58:1f:c4:49:4b:2a:1d: 2b:1d:5c:56:e1:a2:43:de:f9:e5:f8:48:1b:7c:06: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B7:41:61:19:5B:F7:E7:9D:69:C4:EC:6B:99:1A:FB:EC:A1:3C:66 X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3d:03:cd:74:b9:1e:43:ab:fe:91:b3:b1:26:d3:88:e7:24: bc:3f:80:ad:d9:dd:c6:97:3d:bc:ed:61:27:d9:0d:29:31:62: d0:a5:56:3f:ca:9c:88:19:c4:e1:35:ff:ff:bf:63:98:45:70: 90:42:d9:66:73:c1:e6:59:81:6b:a9:00:52:6c:8c:fe:9b:ac: 06:10:71:1e:74:c5:7f:c5:f8:d7:3b:63:e2:59:ff:eb:b8:c7: cf:34:67:33:0b:a9:a4:2a:42:34:88:23:6a:76:63:94:56:de: 4c:ed:27:83:67:55:6e:ce:19:c9:95:76:7b:05:9a:ce:ba:6f: 8f:a9:1a:2e:97:27:8a:89:67:5d:2a:91:b8:50:38:71:fa:82: 85:1e:10:07:d5:30:b9:83:3f:08:ab:86:c2:6a:87:33:14:0e: 25:72:a6:8b:57:5c:74:a8:c5:ec:48:db:42:71:bc:58:3e:a4: 52:67:a2:cd:d3:c4:a2:d8:3a:03:7e:20:c2:48:80:e0:f7:e3: b5:f0:d7:5c:5b:ea:0b:01:4c:da:81:a4:f9:f2:29:e5:a3:6e: 78:12:e4:b2:37:38:95:98:6f:6c:05:17:b3:27:6f:bc:da:30: 6c:0c:fc:56:8c:26:c0:df:33:31:68:02:4b:cc:62:c0:77:dc: ea:93:2f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE ODJDNDhDRTIwHhcNMjUxMTA1MDQzNjMxWhcNMjUxMTEyMDQzNjMxWjAYMRYwFAYD VQQDEw02OTBhZDQ0Zi0wMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1242YQuZfM4BXcqAcor2+Jv4ArM3r4iQB0eukS4yZpM39r6CPK4/AQuK5e1 DDG9xqnTFt50ofbt/f87gv8QtrZbpBjzM+ASDsLUPgvXjvBQ5rSvbmldBgy2aLaw F4bWpkYWxLrXGlkAJkC5BEIN/KwbySzCFCnAUxayycgdV/WhpBKVhHrhEk+rHpOi 0lWXL46BHvSAIgUP8Sw+VsFxv2Wobjdu0/ev+NvDePLq3ZBMPUgVfazRHgNl1UoV B25UG9A6gp9LfiC1wjXTBOdxkEh0fadEqejLgeT8LTQH3qSPP6GhJ6aCTlgfxElL Kh0rHVxW4aJD3vnl+EgbfAbofQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK3QWEZ W/fnnWnE7GuZGvvsoTxmMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1 RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15 bkU4RVhETmtjT25ZTEVqT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPQPNdLkeQ6v+kbOxJtOI5yS8P4Ct2d3Glz287WEn2Q0pMWLQpVY/ ypyIGcThNf//v2OYRXCQQtlmc8HmWYFrqQBSbIz+m6wGEHEedMV/xfjXO2PiWf/r uMfPNGczC6mkKkI0iCNqdmOUVt5M7SeDZ1VuzhnJlXZ7BZrOum+PqRoulyeKiWdd KpG4UDhx+oKFHhAH1TC5gz8Iq4bCaoczFA4lcqaLV1x0qMXsSNtCcbxYPqRSZ6LN 08Si2DoDfiDCSIDg9+O18NdcW+oLAUzagaT58inlo254EuSyNziVmG9sBRezJ2+8 2jBsDPxWjCbA3zMxaAJLzGLAd9zqky+f -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:04 2025 by rpki-client