$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: orZEv3NUsmjhcmrly5L2IsvJuhLxK/Q92Z0gud6SxqQ= Subject key identifier: 29:4C:62:C8:FA:08:9D:A4:B4:99:BB:91:4E:05:38:10:FE:7A:95:68 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 01BE Signing time: Wed 05 Nov 2025 03:11:54 +0000 Manifest this update: Wed 05 Nov 2025 03:11:53 +0000 Manifest next update: Wed 12 Nov 2025 03:11:53 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: 7HHF7mU1FP7afi/8gND9yr7b5yNLolz7PQ+vtBpAxYc=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Nov 5 03:11:53 2025 GMT Not After : Nov 12 03:11:53 2025 GMT Subject: CN=690ac079-d753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:db:0d:97:ff:d4:f4:dc:0c:75:23:4b:3a: 6b:90:ad:1d:1a:b1:b3:1c:40:31:78:b4:c6:fe:e8: 82:41:93:b3:4d:6e:a1:c5:09:ab:1c:bc:81:e1:97: 82:71:ed:c0:55:87:ac:c6:12:02:2c:ac:45:26:29: e5:10:10:a1:d3:20:a9:8d:b0:96:a8:6b:ed:8d:9a: a1:9e:33:e1:21:eb:4a:c0:03:68:15:44:4b:21:68: 42:65:3f:b7:98:b6:81:ec:aa:68:16:e7:21:21:b6: f9:b3:cb:54:6a:e5:78:ea:a1:2a:82:b6:f3:0c:e4: 23:44:dd:ee:83:de:a2:a9:9e:c1:68:1c:08:3a:2f: d3:f4:b2:16:3b:db:73:63:07:92:6a:8c:94:59:f7: a9:1c:95:0e:a9:e1:fe:ab:ef:1e:6a:01:05:1a:f2: a8:e7:d0:68:36:07:87:2b:c9:10:a5:72:5d:ef:82: 31:cc:af:31:5a:2c:59:80:53:4c:8b:0a:c3:6d:f0: 70:93:76:13:9e:29:83:dc:d8:6d:2d:e2:10:4e:b3: 52:a0:22:df:c7:e5:82:a0:27:cf:07:27:aa:ab:13: ef:8a:9c:9e:c4:da:73:5c:4f:8b:bf:1c:b8:35:69: 9d:2f:1b:19:b7:c7:77:49:3a:d2:5d:22:25:1e:76: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:62:C8:FA:08:9D:A4:B4:99:BB:91:4E:05:38:10:FE:7A:95:68 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:cc:a7:d5:4f:c6:ae:e5:90:43:7e:07:ab:0f:5e:9b:0f:3e: 50:23:7b:6a:13:c7:f4:51:6b:f7:c6:8c:e8:89:08:52:32:3d: ce:5b:70:ee:a4:6b:4e:9d:6f:37:4f:3f:ec:56:77:3d:3c:f2: cc:8f:e1:56:a1:01:f6:35:12:00:2f:97:bb:a2:5f:e8:43:79: ce:4e:00:92:56:04:d6:f5:93:4d:61:db:e9:3e:63:23:88:03: 6b:6d:85:e4:17:7f:ed:5c:78:ab:bd:41:69:3c:60:52:fd:77: c3:e7:77:d6:30:0f:61:5b:1e:cd:18:4f:25:3e:64:fa:65:71: 13:ba:68:83:0f:b8:8a:27:9e:d8:11:0d:2b:97:24:89:fb:19: fe:a8:30:38:9d:fc:8d:b6:e8:34:65:47:c2:0c:d9:25:cc:22: 06:e8:b0:5b:19:de:ed:c1:5a:4f:53:7a:89:c4:88:8c:23:9b: 24:1f:5d:ea:f5:31:a1:19:1d:ee:36:d7:5a:27:31:cf:02:78: 6c:f2:21:4c:a3:05:0e:b7:cd:de:1e:43:c4:75:1c:62:95:5d: 9a:bd:0b:58:75:2a:7b:5b:d3:25:0a:6f:72:a3:2b:e7:c0:39: d1:1a:cb:03:0a:fc:e8:24:db:a0:3d:aa:c1:df:9d:36:b2:3f: 38:6d:76:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUxMTA1MDMxMTUzWhcNMjUxMTEyMDMxMTUzWjAYMRYwFAYD VQQDEw02OTBhYzA3OS1kNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyLbDZf/1PTcDHUjSzprkK0dGrGzHEAxeLTG/uiCQZOzTW6hxQmrHLyB4ZeC ce3AVYesxhICLKxFJinlEBCh0yCpjbCWqGvtjZqhnjPhIetKwANoFURLIWhCZT+3 mLaB7KpoFuchIbb5s8tUauV46qEqgrbzDOQjRN3ug96iqZ7BaBwIOi/T9LIWO9tz YweSaoyUWfepHJUOqeH+q+8eagEFGvKo59BoNgeHK8kQpXJd74IxzK8xWixZgFNM iwrDbfBwk3YTnimD3NhtLeIQTrNSoCLfx+WCoCfPByeqqxPvipyexNpzXE+Lvxy4 NWmdLxsZt8d3STrSXSIlHnb1JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClMYsj6 CJ2ktJm7kU4FOBD+epVoMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYzKfVT8au5ZBDfgerD16bDz5QI3tqE8f0UWv3xozoiQhSMj3OW3Du pGtOnW83Tz/sVnc9PPLMj+FWoQH2NRIAL5e7ol/oQ3nOTgCSVgTW9ZNNYdvpPmMj iANrbYXkF3/tXHirvUFpPGBS/XfD53fWMA9hWx7NGE8lPmT6ZXETumiDD7iKJ57Y EQ0rlySJ+xn+qDA4nfyNtug0ZUfCDNklzCIG6LBbGd7twVpPU3qJxIiMI5skH13q 9TGhGR3uNtdaJzHPAnhs8iFMowUOt83eHkPEdRxilV2avQtYdSp7W9MlCm9yoyvn wDnRGssDCvzoJNugParB3502sj84bXZD -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:56 2025 by rpki-client