$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft File: coqCQJLldBJUu5LVl3IzYaBL8pI.mft (raw, json) Hash identifier: eMs9lF+PXxiHIm+NqGo1ZRiy7ydw7OLh/RYhwIXN0yI= Subject key identifier: 05:E0:1E:D3:07:B1:4F:DB:A6:20:A2:DF:5D:DF:A7:42:9A:98:7F:B7 Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Certificate serial: 0D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft Manifest number: 0D4A Signing time: Tue 04 Nov 2025 18:06:36 +0000 Manifest this update: Tue 04 Nov 2025 18:06:35 +0000 Manifest next update: Tue 11 Nov 2025 18:06:35 +0000 Files and hashes: 1: coqCQJLldBJUu5LVl3IzYaBL8pI.crl (hash: yFIGFVQRez8NxXmFuwxDGReiqJvxmWwmdmz1gksqCA8=) 2: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (hash: MGzEWIZ/EdtTbp6/FRF/2CJMkfaDmSh75fKXCwfETHM=) 3: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (hash: Io6gCyR0FtQ3xcV6SmfOiqcTWURvoXsQUWodciVqXV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292 Validity Not Before: Nov 4 18:06:35 2025 GMT Not After : Nov 11 18:06:35 2025 GMT Subject: CN=690a40ac-19ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:53:18:bf:a8:20:6a:42:67:eb:29:03:33: c2:79:af:76:4a:e6:70:eb:4a:d5:cc:bf:04:e6:a1: a2:1c:03:f0:3a:13:d8:0a:50:af:a9:cd:f1:eb:a5: 36:1c:03:0c:2a:7a:14:30:e7:22:6b:08:e3:b5:ac: fe:fa:0a:bd:db:d4:d2:9a:d3:86:23:f2:39:78:40: eb:95:fe:e7:75:c8:ce:1d:19:8c:ef:72:48:fb:5d: 0c:c8:ac:3f:0b:f3:94:54:94:51:ac:7a:52:7b:9c: c0:6e:a0:c1:b3:b7:25:96:f4:56:cf:21:22:f9:31: d0:84:bc:2f:71:a9:e2:f6:1b:46:f1:21:0b:60:16: 14:e5:c8:32:02:2a:e7:89:a9:2a:d9:24:f2:d1:77: 1d:a1:f8:e7:37:4c:60:4c:31:fd:31:10:dd:be:2e: 2a:0c:83:2a:da:d2:d5:83:9e:5e:ae:7d:6a:fb:3f: c6:af:2f:a7:84:19:fa:b0:79:ff:35:51:7c:62:5c: 5c:d9:6c:b8:73:19:24:3a:31:bd:a9:9d:c3:e4:63: 44:12:3b:49:93:14:07:69:22:4a:35:85:1d:59:1c: 23:a8:aa:4b:1a:cc:18:aa:00:9a:ec:e4:2e:67:53: f7:99:fe:9c:e1:10:e1:d0:3d:0b:8e:d0:e6:ea:ff: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:1E:D3:07:B1:4F:DB:A6:20:A2:DF:5D:DF:A7:42:9A:98:7F:B7 X509v3 Authority Key Identifier: keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:46:1e:14:38:8a:ab:05:fe:f2:fc:06:0f:cd:1f:43:d5:93: 5b:ee:73:ca:c0:83:24:ba:77:eb:f5:b2:69:c8:47:2f:5e:45: 0f:cb:c4:71:22:03:51:fa:86:13:eb:ba:c3:ea:29:2e:41:cc: 84:d7:eb:6a:66:e0:e3:ff:69:fc:90:5d:64:de:22:fc:43:ee: 03:5c:f4:e5:de:76:0f:1f:56:f6:2b:d9:59:0b:7a:df:0e:5c: 45:48:fe:ff:43:9c:fc:8a:99:b7:ee:9e:f1:9f:14:63:3a:77: 5a:69:54:4e:0b:37:d9:6a:7e:c4:7b:5a:73:cf:a3:c0:bf:98: a3:d3:03:81:74:c4:35:e7:93:90:36:57:6d:19:02:d8:ad:80: c8:e5:ef:1e:77:38:a2:c5:d1:17:02:1c:e6:c2:f9:02:30:c8: 05:d6:4c:f9:b1:dd:00:63:96:e8:c8:54:ae:cc:2d:c3:05:4a: d1:4f:3e:6f:fe:2e:18:bb:f8:cb:42:c3:88:59:4a:c2:ab:f9: 4e:f5:66:ec:9e:a5:84:d6:87:f3:9c:2d:1c:5f:db:bb:08:a5: 3f:20:b2:82:bb:40:3f:6f:c2:07:f7:d6:84:a8:51:d1:d0:0b: 2f:44:08:56:82:72:34:f1:1e:14:d3:e3:9c:57:c6:46:79:01: f8:47:ac:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx QTA0QkYyOTIwHhcNMjUxMTA0MTgwNjM1WhcNMjUxMTExMTgwNjM1WjAYMRYwFAYD VQQDEw02OTBhNDBhYy0xOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssBTGL+oIGpCZ+spAzPCea92SuZw60rVzL8E5qGiHAPwOhPYClCvqc3x66U2 HAMMKnoUMOciawjjtaz++gq929TSmtOGI/I5eEDrlf7ndcjOHRmM73JI+10MyKw/ C/OUVJRRrHpSe5zAbqDBs7cllvRWzyEi+THQhLwvcani9htG8SELYBYU5cgyAirn iakq2STy0XcdofjnN0xgTDH9MRDdvi4qDIMq2tLVg55ern1q+z/Gry+nhBn6sHn/ NVF8Ylxc2Wy4cxkkOjG9qZ3D5GNEEjtJkxQHaSJKNYUdWRwjqKpLGswYqgCa7OQu Z1P3mf6c4RDh0D0LjtDm6v9lZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXgHtMH sU/bpiCi313fp0KamH+3MB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUI2MS8zRjAwRDc1Q0UyQUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRC SlV1NUxWbDNJellhQkw4cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Rh4UOIqrBf7y/AYPzR9D1ZNb7nPKwIMkunfr9bJpyEcvXkUPy8Rx IgNR+oYT67rD6ikuQcyE1+tqZuDj/2n8kF1k3iL8Q+4DXPTl3nYPH1b2K9lZC3rf DlxFSP7/Q5z8ipm37p7xnxRjOndaaVROCzfZan7Ee1pzz6PAv5ij0wOBdMQ155OQ NldtGQLYrYDI5e8edziixdEXAhzmwvkCMMgF1kz5sd0AY5boyFSuzC3DBUrRTz5v /i4Yu/jLQsOIWUrCq/lO9WbsnqWE1ofznC0cX9u7CKU/ILKCu0A/b8IH99aEqFHR 0AsvRAhWgnI08R4U0+OcV8ZGeQH4R6yV -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:16 2025 by rpki-client