$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: v8V1b1i4Rp6JL2SMBqEX6yrL7yPWd5mUjOXeZsTaXxc= Subject key identifier: A6:9C:AC:2C:9E:05:1E:61:9C:2C:A5:D2:C8:2F:0F:70:C4:FA:49:DD Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 2920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 289F Signing time: Sun 02 Nov 2025 15:35:59 +0000 Manifest this update: Sun 02 Nov 2025 15:35:59 +0000 Manifest next update: Sun 09 Nov 2025 15:35:59 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: AhKD8mwjI0Evdr+NqttamxFFuQBLcSfXR8LOLRd1AGo=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: AGeEiq7USDpmKzktvODn9IUhC/OYAfI+o7JYSyD+iMw=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 98UF+myQFYiUCU4A+4AledYcZLsw/iBfENB29yOjRE8=) 4: BC85BF12986611F099AC837DC4F9AE02.roa (hash: 4T5wpB6getHv74Vs17fIaT93jGRKPndQ2Hva0yiHyxM=) 5: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=) 6: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10528 (0x2920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Nov 2 15:35:59 2025 GMT Not After : Nov 9 15:35:59 2025 GMT Subject: CN=69077a5f-47be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:e3:da:49:8d:9d:19:e9:d5:87:d7:20:59: 91:03:3d:9f:a6:69:ae:ea:15:01:d4:bb:18:36:6b: b7:c2:ec:f5:be:11:46:5a:19:1e:08:df:11:fd:06: 0e:92:e5:91:1c:ef:94:72:ab:c2:08:61:e3:d8:08: 35:74:a4:fd:47:d6:93:ac:e3:fc:04:c1:fa:c0:a7: ad:91:6f:6d:a5:49:d3:54:59:ed:27:0b:b1:fd:0c: 2b:51:52:18:4a:da:95:a4:77:fc:67:79:f7:45:b6: 5f:bf:d9:b5:fb:13:1d:cc:1f:41:cd:4f:24:cd:c8: 82:be:2a:ac:58:4a:ef:1c:d0:12:8f:be:15:0f:68: 74:bf:40:fb:7f:6f:34:94:ef:29:d9:42:d3:12:41: 80:6e:19:05:2f:7c:9f:27:91:d0:5e:9a:5a:dc:26: 55:7f:1d:7d:7f:05:7a:39:47:4e:6d:df:ad:6b:3c: 01:f1:35:f4:db:70:a9:48:8c:f1:dd:0a:f8:ed:35: 85:ae:65:fa:48:e2:d7:fb:89:af:49:a2:2d:f6:44: 1b:13:e8:0e:a2:10:69:01:66:be:bd:50:3f:64:33: e0:95:84:7d:9b:37:b4:7d:f0:93:b4:4e:48:2b:00: f7:70:1d:68:77:51:c3:81:77:a5:18:0a:d2:3b:df: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9C:AC:2C:9E:05:1E:61:9C:2C:A5:D2:C8:2F:0F:70:C4:FA:49:DD X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9b:66:ba:23:3b:36:eb:6c:7d:b8:ad:ae:73:01:26:1d:33: 3b:cb:b9:0e:cb:27:c1:3c:99:10:38:d9:41:1f:56:6b:1c:28: a7:69:ee:31:20:65:ff:de:00:fe:52:66:9e:1f:2b:b2:1a:81: 46:23:c2:2c:09:83:ef:d6:7f:dd:3a:85:6b:f6:5b:16:b6:19: 1c:7f:21:1e:b6:09:6f:65:53:e4:86:e0:b9:76:27:06:d1:aa: a4:3d:88:67:58:8f:82:4b:d3:3e:65:ab:36:7b:4f:81:71:43: 3b:a8:e6:03:12:76:37:ed:e6:b7:f7:c5:7b:bc:7c:10:1a:ed: 65:e5:05:3b:2d:bf:4f:e8:6a:cc:71:05:72:20:2d:58:02:57: 9c:05:9b:6d:5f:25:41:bc:ba:e3:d3:1e:34:72:07:1f:ea:37: f7:fb:0d:2f:d8:f5:8d:3d:86:0f:46:b1:14:ae:23:43:f3:7e: c0:40:f8:6a:1e:09:40:39:09:ec:53:6d:d9:62:55:08:2f:88: db:94:2b:19:4c:f3:80:7f:9a:86:fa:28:51:bd:66:a6:86:6f: f3:9e:fc:2a:ac:6f:18:8d:ee:55:20:cc:c5:76:4c:d5:9e:92: fa:a0:a8:ba:cf:3a:47:87:8d:2c:c0:5a:11:dd:aa:43:7a:82: f0:39:ef:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUxMTAyMTUzNTU5WhcNMjUxMTA5MTUzNTU5WjAYMRYwFAYD VQQDEw02OTA3N2E1Zi00N2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIzj2kmNnRnp1YfXIFmRAz2fpmmu6hUB1LsYNmu3wuz1vhFGWhkeCN8R/QYO kuWRHO+UcqvCCGHj2Ag1dKT9R9aTrOP8BMH6wKetkW9tpUnTVFntJwux/QwrUVIY StqVpHf8Z3n3RbZfv9m1+xMdzB9BzU8kzciCviqsWErvHNASj74VD2h0v0D7f280 lO8p2ULTEkGAbhkFL3yfJ5HQXppa3CZVfx19fwV6OUdObd+tazwB8TX023CpSIzx 3Qr47TWFrmX6SOLX+4mvSaIt9kQbE+gOohBpAWa+vVA/ZDPglYR9mze0ffCTtE5I KwD3cB1od1HDgXelGArSO9/XTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKacrCye BR5hnCyl0sgvD3DE+kndMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFm2a6Izs262x9uK2ucwEmHTM7y7kOyyfBPJkQONlBH1ZrHCinae4x IGX/3gD+UmaeHyuyGoFGI8IsCYPv1n/dOoVr9lsWthkcfyEetglvZVPkhuC5dicG 0aqkPYhnWI+CS9M+Zas2e0+BcUM7qOYDEnY37ea398V7vHwQGu1l5QU7Lb9P6GrM cQVyIC1YAlecBZttXyVBvLrj0x40cgcf6jf3+w0v2PWNPYYPRrEUriND837AQPhq HglAOQnsU23ZYlUIL4jblCsZTPOAf5qG+ihRvWamhm/znvwqrG8Yje5VIMzFdkzV npL6oKi6zzpHh40swFoR3apDeoLwOe9L -----END CERTIFICATE-----Generated at Tue Nov 4 15:56:35 2025 by rpki-client